CVE-2013-0518

IBM Sterling Secure Proxy is affected by CVE-2013-0518 (and related CVEs) where certain 3.2.0, 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 do not refuse rendering in third‑party frames, enabling clickjacking. Affected versions: SSP 3.2.0, 3....

CVE-2013-0519

CVE-2013-0519 affects IBM Sterling Secure Proxy 3.2.0, 3.3.01 before 3.3.01.23 iFix 1, 3.4.0 before 3.4.0.6 iFix 1, and 3.4.1 before 3.4.1.7, where the web-server version is disclosed in (1) an unspecified page title and (2) an HTTP header, enabling remote disclosure of a version string. IBM reme...

CVE-2013-0520

CVE-2013-0520 affects IBM Sterling Secure Proxy: vulnerable in 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7. The issue allows remote authenticated users to obtain sensitive Java stack traces by sending invalid input. Remediation is ...

PT-2013-2401

Name of the Vulnerable Software and Affected Versions IBM Sterling Secure Proxy versions 3.2.0 through 3.3.01 before 3.3.01.23 Interim Fix 1 IBM Sterling Secure Proxy versions 3.4.0 through 3.4.0.5 IBM Sterling Secure Proxy versions 3.4.1 through 3.4.1.6 Description The issue allows remote...

PT-2013-2400

Name of the Vulnerable Software and Affected Versions IBM Sterling Secure Proxy versions 3.2.0 through 3.3.01 before 3.3.01.23 Interim Fix 1 IBM Sterling Secure Proxy versions 3.4.0 through 3.4.0 before 3.4.0.6 Interim Fix 1 IBM Sterling Secure Proxy versions 3.4.1 through 3.4.1 before 3.4.1.7...

PT-2013-2399

Name of the Vulnerable Software and Affected Versions IBM Sterling Secure Proxy versions 3.2.0 through 3.3.01 before 3.3.01.23 Interim Fix 1 IBM Sterling Secure Proxy versions 3.4.0 through 3.4.0.5 IBM Sterling Secure Proxy versions 3.4.1 through 3.4.1.6 Description The issue allows remote...

CVE-2013-0519: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 provides web-server version data in 1 an unspecified page title and 2 an unspecified HTTP header field, which allows remote attackers to obtain potentially...

CVE-2013-0518: Improper Input Validation

IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 does not refuse to be rendered in different-origin frames, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

CVE-2013-0520: Improper Input Validation

IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data...

PT-2013-3637

Name of the Vulnerable Software and Affected Versions CA SiteMinder Federation FSS versions 12.0 through 12.5 CA SiteMinder Federation Standalone versions 12.0 through 12.1 CA Agent for SharePoint 2010 CA SiteMinder for Secure Proxy Server versions 6.0 through 12.5 Description The issue concerns...

CVE-2013-2279: Improper Input Validation

CA SiteMinder Federation FSS 12.5, 12.0, and r6; Federation Standalone 12.1 and 12.0; Agent for SharePoint 2010; and SiteMinder for Secure Proxy Server 6.0, 12.0, and 12.5 does not properly verify XML signatures for SAML statements, which allows remote attackers to spoof other users and gain...

VPSProxy (PHP Secure proxy + GUI)

PHP Secure proxy - программа для туннелирования HTTP/HTTPS трафика через PHP-гейт. На написание меня подтолкнула идея bons'a, в реализации которого не было необходимого мне функционала, и самое главное, GUI. Возможности + Поддержка HTTPS для php-гейтов. + Туннелирование HTTPS трафика добавлено в...

DEBIAN-CVE-2007-5034

ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy ...