"Wrapped" javascript: urls bypass security checks — Mozilla

Some security checks intended to prevent script injection were incorrect and could be bypassed by wrapping a javascript: url in the view-source: pseudo-protocol. Michael Krax demonstrated that a variant of his favicon exploit could still execute arbitrary code, and the same technique could also b...

CVE-2005-1158

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the search target of the Firefox sidebar...

CVE-2005-1158

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the search target of the Firefox sidebar...

CVE-2005-1158

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the search target of the Firefox sidebar...

CVE-2005-1158

CVE-2005-1158 affects Mozilla Firefox prior to 1.0.3. The issue arises from missing security checks that allow an attacker to inject arbitrary JavaScript into privileged pages by abusing the sidebar’s _search target. This could enable code execution within the context of the affected site, as des...

Arbitrary code execution from Firefox sidebar panel II — Mozilla

Sites can use the search target to open links in the Firefox sidebar. Two missing security checks allow malicious scripts to first open a privileged page such as about:config and then inject script using a javascript: url. This could be used to install malicious code or steal data without user...

firefox -- arbitrary code execution in sidebar panel

A Mozilla Foundation Security Advisory reports: Sites can use the search target to open links in the Firefox sidebar. Two missing security checks allow malicious scripts to first open a privileged page such as about:config and then inject script using a javascript: url. This could be used to...

Multiple Vendor ICMP Message Handling - Denial of Service

source: https://www.securityfocus.com/bid/13124/info Multiple vendor implementations of TCP/IP Internet Control Message Protocol ICMP are reported prone to several denial-of-service attacks. ICMP is employed by network nodes to determine certain automatic actions to take based on network failures...

HP-UX Security patch : PHSS_24842

The remote host is missing HP-UX Security Patch number PHSS24842 . Sec. Vulnerability in OV NNM %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17464; scriptversion"1.6";...

HP-UX Security patch : PHSS_27783

The remote host is missing HP-UX Security Patch number PHSS27783 . SSRT2332 rev.10 Apache Server Chunk Encoding %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17485;...

HP-UX Security patch : PHKL_17012

The remote host is missing HP-UX Security Patch number PHKL17012 . Security Vulnerability with rpc.pcnfsd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17396; scriptversion"1.6";...

HP-UX Security patch : PHSS_26918

The remote host is missing HP-UX Security Patch number PHSS26918 . Sec. Vulnerability in SNMP rev. 16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17469; scriptversion"1.6";...

SUSE-SA:2005:012: imap

The remote host is missing the patch for the advisory SUSE-SA:2005:012 imap. The University of Washington imap daemon can be used to access mails remotely using the IMAP protocol. This update fixes a logical error in the challenge response authentication mechanism CRAM-MD5 used by UW IMAP. Due to...

HP-UX Security patch : PHNE_25217

The remote host is missing HP-UX Security Patch number PHNE25217 . Sec. Vulnerability in telnetd rev.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16551; scriptversion"1.7";...

HP-UX Security patch : PHNE_24510

The remote host is missing HP-UX Security Patch number PHNE24510 . SSRT2370 Sec. Vulnerability with ntpd on HP-UX rev.01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16915;...

HP-UX Security patch : PHCO_25108

The remote host is missing HP-UX Security Patch number PHCO25108 . Sec. Vulnerability in rlpdaemon %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16960; scriptversion"1.7";...

HP-UX Security patch : PHNE_11096

The remote host is missing HP-UX Security Patch number PHNE11096 . Security Vulnerabilities in VirtualVault code %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16709;...

HP-UX Security patch : PHNE_9105

The remote host is missing HP-UX Security Patch number PHNE9105 . SYN Flooding Security Vulnerability in HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17041;...

HP-UX PHNE_21090 : HPSBUX0005-114 Sec. Vulnerability in BIND (rev.1)

s700800 11.04 VVOS Bind 4.9.7 components : Security vulnerability in the BIND executable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE21090. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHKL_27932 : HPSBUX0210-223 Security Vulnerability with OnlineJFS 3.1 (rev. 1)

s700800 11.04 VVOS VxFS cumulative,I/O Throttling/sync : JFS3.1 sticky bit does not function properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHKL27932. The text itself is copyright C Hewlett-Packard...