748 matches found
CVE-2005-3348
HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter...
CVE-2005-3272
Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets...
CVE-2005-2060
Multiple HTTP Response Splitting vulnerabilities in 1 toggleshow.php, 2 togglecats.php, and 3 showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF "%0d%0a" sequences in the Cat parameter...
еще один бажный скрипт в WebAPP v0.9.9.
Здравствуйте, . вот нашел еще новую узвимость в WebAPP v0.9.9.. Просмотр произвольных файлов в WebAPP Web Automated Perl Portal System v0.9.9. Software / Application - WebAPP v0.9.9. Problem-Type - удаленная Vulnerability - возможность чтения файлов и просмотр каталогов. Vendor -...
CVE-2005-1180: Undefined Security Weakness
HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web caches via hex-encoded CRLF "%0d%0a" sequences in the forwarder parameter...
CVE-2005-0174
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including 1 multiple Content-Length headers, 2 carriage return CR characters that are not part of a CRLF pair, and 3 header names containing...
FreeBSD : bind8 negative cache poison attack (17)
The following package needs to be updated: bind %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgf04cc5cb2d0b11d8beaf000a95c4d922.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...