DSA-2025-1 icedove - several vulnerabilities

Bulletin has no description...

Django Forms Library Algorithmic Complexity Vulnerability

The host is running Django and is prone to Algorithmic Complexity vulnerability. OpenVAS Vulnerability Test $Id: secpoddjangoalgorithmiccomplexityvuln.nasl 6539 2017-07-05 12:02:14Z cfischer $ Django Forms Library Algorithmic Complexity Vulnerability Authors: Sharath S Copyright: Copyright c 2009...

Mozilla Firefox JavaScript Engine Information Disclosure (CVE-2005-0989)

The Mozilla web browser and its derivatives, Firefox, Netscape, and K-Meleon are applications designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, etc. These applications have a built in functionality to interpret JavaScript code. One of the...

Mozilla Products Regular Expressions Heap Corruption (CVE-2006-4566)

The Firefox web browser is an application designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so forth. The browser application has a built-in JavaScript interpreter which also allows client side scripting and is normally used for dynamic...

SuSE9 Security Update : Perl (YOU Patch Number 12208)

Specially crafted regular expressions could crash perl. CVE-2008-1927 Additionally problem in the CGI module was fixed that could result in an endless loop if uploads were cancelled. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : pcre (YOU Patch Number 11998)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. CVE-2007-1659, CVE-2006-7230 %NASLMINLEVEL 7030...

SuSE9 Security Update : perl (YOU Patch Number 11964)

Specially crafted regular expressions could lead to a buffer overflow in perl's regular expressions engine. Scripts processing data from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. Depending on the purpose of the scripts, the vulnerability ca...

USN-810-1: NSS vulnerabilities

Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of service via application crash or execute arbitrary code as the user invoking the program. CVE-2009-2404 Moxie...

openSUSE Security Update : perl (perl-101)

Specially crafted regular expressions could crash perl CVE-2008-1927. Insufficient symlink checks in the File::Path could result in wrong file permissions CVE-2008-2827. Additionally problem in the CGI module was fixed that could result in an endless loop if uploads were cancelled. %NASLMINLEVEL...

Stable, Beta update: Bug fixes

Update: Added CVE numbers for the security issues. [email protected], 21 July 2009 Google Chrome 2.0.172.37 has been released to the Beta and Stable channels. This release fixes some minor bugs: Fix: Solving captcha images broken at orkut.com. Issue 15569 Make forward/backward navigation work ev...

Mandrake Linux Security Advisory : pcre (MDKSA-2007:211)

Multiple vulnerabilities were discovered by Tavis Ormandy and Will Drewry in the way that pcre handled certain malformed regular expressions. If an application linked against pcre, such as Konqueror, parses a malicious regular expression, it could lead to the execution of arbitrary code as the us...

Mandriva Linux Security Advisory : boost (MDVSA-2008:032)

Tavis Ormandy and Will Drewry found that the bost library did not properly perform input validation on regular expressions. An attacker could exploit this by sening a specially crafted regular expression to an application linked against boost and cause a denial of service via an application crash...

CentOS 4 : pcre (CESA-2007:1052)

Updated pcre packages that correct security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 15 November 2007 Further analysis of these flaws in PCRE has led to the single C...

Mandriva Update for boost MDVSA-2008:032 (boost)

Check for the Version of boost OpenVAS Vulnerability Test Mandriva Update for boost MDVSA-2008:032 boost Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for icu MDVSA-2008:026 (icu)

Check for the Version of icu OpenVAS Vulnerability Test Mandriva Update for icu MDVSA-2008:026 icu Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for file MDKSA-2007:114 (file)

Check for the Version of file OpenVAS Vulnerability Test Mandriva Update for file MDKSA-2007:114 file Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Ubuntu Update for boost vulnerabilities USN-570-1

Ubuntu Update for Linux kernel vulnerabilities USN-570-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5701.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for boost vulnerabilities USN-570-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Fedora Update for syslog-ng FEDORA-2008-0523

Check for the Version of syslog-ng OpenVAS Vulnerability Test Fedora Update for syslog-ng FEDORA-2008-0523 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for syslog-ng FEDORA-2008-10879

Check for the Version of syslog-ng OpenVAS Vulnerability Test Fedora Update for syslog-ng FEDORA-2008-10879 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 8 Update: syslog-ng-2.0.10-1.fc8

syslog-ng, as the name shows, is a syslogd replacement, but with new functionality for the new generation. The original syslogd allows messages only to be sorted based on priority/facility pairs; syslog-ng adds the possibility to filter based on message contents using regular expressions. The new...