CVE-2009-2260

stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2009-2260: Exposure of Sensitive Information to an Unauthorized Actor

stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network...

Mozilla Tackles XSS Vulnerabilities, Clickjacking Attacks

Mozilla’s security engineers are working on new technology that promises to mitigate a large class of Web application vulnerabilities, especially the cross-site scripting XSS plague against modern Web browsers. The project, called Content Security Policy, is designed to shut down XSS attacks by...

CVE-2009-1898

The secure login page in the Administrative Console component in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network...

Design/Logic Flaw

The secure login page in the Administrative Console component in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network...

CVE-2009-1898

CVE-2009-1898 affects IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35. The issue is that the secure login page in the Administrative Console does not redirect HTTP requests to HTTPS, enabling a remote attacker to read session contents by sniffing network traffic. Connected sources co...

CVE-2009-1898

The secure login page in the Administrative Console component in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network...

CVE-2009-1898: Exposure of Sensitive Information to an Unauthorized Actor

The secure login page in the Administrative Console component in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network...

CVE-2004-2764

Sun SDK and Java Runtime Environment JRE 1.4.2 through 1.4.204, 1.4.1 through 1.4.107, and 1.4.0 through 1.4.004 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML...

CVE-2004-2764

Sun SDK and Java Runtime Environment JRE 1.4.2 through 1.4.204, 1.4.1 through 1.4.107, and 1.4.0 through 1.4.004 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML...

CVE-2004-2764

CVE-2004-2764 affects Sun JRE/JSDK 1.4.x (1.4.0 to 1.4.2_04, and 1.4.1, 1.4.2) where untrusted applets and unprivileged servlets could gain privileges and read data from other applets due to issues in the XSLT processor (XML sniffing). The vulnerability description states privilege escalation via...

CVE-2004-2764: Undefined Security Weakness

Sun SDK and Java Runtime Environment JRE 1.4.2 through 1.4.204, 1.4.1 through 1.4.107, and 1.4.0 through 1.4.004 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML...

CVE-2009-1477

The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, and the PN9108 power-control unit have a hardcoded SSL private key, which makes it easier for remote attackers to decrypt https sessions by extracting this key from...

Design/Logic Flaw

CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections...

CVE-2009-0152

iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger AIM communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2009-0144

CVE-2009-0144 concerns CFNetwork in Apple Mac OS X 10.5.x (before 10.5.7). The issue arises from improper parsing of noncompliant Set-Cookie headers, which may cause certain cookies (including sensitive ones) to be sent over unencrypted HTTP connections. Affected: Mac OS X 10.5 through 10.5.6 (se...

CVE-2009-0152

CVE-2009-0152 affects iChat on Mac OS X 10.5.x prior to 10.5.7. The issue causes SSL for AOL Instant Messenger (AIM) to be disabled in certain scenarios, potentially exposing AIM conversations to network sniffing. Remediation is to upgrade to Mac OS X 10.5.7 (Security Update 2009-002) which inclu...

CVE-2009-0144

CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections...

CVE-2009-0152

iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger AIM communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2009-2842 · Aol +1 · Aim +1

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X versions 10.5 through 10.5.6 Description: The issue allows remote attackers to obtain sensitive information by sniffing the network due to the disabling of SSL for AOL Instant Messenger AIM communication in certain circumstance...