xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass

The design of the W3C XML Signature Syntax and Processing XMLDsig recommendation, as implemented in products including 1 the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; 2 the WebLogic Server component in BEA Product Suite 10.3, 10.0...

xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass

The design of the W3C XML Signature Syntax and Processing XMLDsig recommendation, as implemented in products including 1 the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; 2 the WebLogic Server component in BEA Product Suite 10.3, 10.0...

[SECURITY] [DSA 1849-1] New xml-security-c packages fix signature forgery

------------------------------------------------------------------------ Debian Security Advisory DSA-1849-1 [email protected] http://www.debian.org/security/ Florian Weimer August 02, 2009 http://www.debian.org/security/faq -...

DSA-1849-1 xml-security-c - signature forgery

Bulletin has no description...

CVE-2009-0231

CVE-2009-0231 concerns a heap-based overflow in the Embedded OpenType Font Engine (T2EMBED.DLL) used by Microsoft Windows. The vulnerability stems from an integer truncation while processing OpenType font records, allowing remote attackers to execute arbitrary code by delivering a crafted EOT/Ope...

mono -- XML signature HMAC truncation spoofing

Secunia reports: A security issue has been reported in Mono, which can be exploited by malicious people to conduct spoofing attacks. The security issue is caused due to an error when processing certain XML signatures...

XML signature HMAC truncation authentication bypass

Overview The XML Signature specification allows for HMAC truncation, which may allow a remote attacker to bypass authentication. Description XML Signature Syntax and Processing XMLDsig is a W3C recommendation for providing integrity, message authentication, and/or signer authentication services f...

CVE-2009-1834

CVE-2009-1834 describes a visual truncation vulnerability in Mozilla Firefox (nsIDNService.cpp) affecting Firefox < 3.0.11 and SeaMonkey

CVE-2009-1834

Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \u115A through...

CVE-2009-1834

Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \u115A through...

FreeBSD : php -- ini database truncation inside dba_replace() function (1e8031be-4258-11de-b67a-0030843d3802)

securityfocus research reports : A bug that leads to the emptying of the INI file contents if the database key was not found exists in PHP dba extension in versions 5.2.6, 4.4.9 and earlier. Function dbareplace are not filtering strings key and value. There is a possibility for the destruction of...

php file system attacks the wizard-vulnerability warning-the black bar safety net

A. php file system path normalization attack In the path use the/and/. Will make the/etc/passwd/or/etc/passwd/. As a file is opened. II. php file system path truncation attack PHP has a path truncation issuea very evil means of snprintfallowing only the use of MAXPATH is as open file or directory...

Mandriva Update for konqueror MDKSA-2007:176 (konqueror)

Check for the Version of konqueror OpenVAS Vulnerability Test Mandriva Update for konqueror MDKSA-2007:176 konqueror Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

RedHat Update for kernel RHSA-2008:0055-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0055-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

smNews 1.0 Auth Bypass/Column Truncation Vulnerabilities

No description provided by source. 0x01 Informations: Name : smNews Download : http://downloads.sourceforge.net/simplequizz/simpleQuizz.zip?modtime=1229788692&bigmirror=0 Vulnerability : Auth Bypass/Column Truncation Author : x0r Contact : [email protected] Notes : Proud to be Italian // Greet...

smNews 1.0 Authentication Bypass

0x01 Informations: Name : smNews Download : http://downloads.sourceforge.net/simplequizz/simpleQuizz.zip?modtime=1229788692&bigmirror=0 Vulnerability : Auth Bypass/Column Truncation Author : x0r Contact : [email protected] Notes : Proud to be Italian // Greetz : Str0ke, 0x02 Bug: Bugged file i...

smNews 1.0 - Authentication Bypass Column Truncation

smNews 1.0 - Authentication Bypass Column Truncation 0x01 Informations: Name : smNews Download : http://downloads.sourceforge.net/simplequizz/simpleQuizz.zip?modtime=1229788692&bigmirror=0 Vulnerability : Auth Bypass/Column Truncation Author : x0r Contact : [email protected] Notes : Proud to b...

smNews 1.0 Auth Bypass/Column Truncation Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== smNews 1.0 Auth Bypass/Column Truncation Vulnerabilities ======================================================== 0x01 Informations: Name : smNews Download :...

smNews 1.0 - Authentication Bypass / Column Truncation

0x01 Informations: Name : smNews Download : http://downloads.sourceforge.net/simplequizz/simpleQuizz.zip?modtime=1229788692&bigmirror=0 Vulnerability : Auth Bypass/Column Truncation Author : x0r Contact : [email protected] Notes : Proud to be Italian // Greetz : Str0ke, 0x02 Bug: Bugged file i...

PHP 5 < 5.2.7 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is prior to 5.2.7. It is, therefore, affected by multiple vulnerabilities : - There is a buffer overflow flaw in the bundled PCRE library that allows a denial of service attack. CVE-2008-2371 - Multiple directory traversal...