Fedora 11 : squidGuard-1.4-8.fc11 (2009-10780)

Fixes language file issue, but more importantly. . . --------------- squidGuard upstream has released patches fixing quoting from upstream advisories: a, This patch fixes one buffer overflow problem in sgLog.c when overlong URLs are requested. SquidGuard will then go into emergency mode were no...

NOKIA Siemens FlexiISN 3.1 - Multiple Authentication Bypass Vulnerabilities

NOKIA Siemens FlexiISN 3.1 - Multiple Authentication Bypass Vulnerabilities NOKIA Siemens FlexiISN GGSN Multiple Authentication bypass Vulnerability: NOKIA Siemens FlexiISN Remote: Yes Local: No Class: Input Validation Error Critical: Moderately critical OS : FlexiISN GGSN FISN 3.1 URL 1 for...

DSA-1697-1 iceape - several vulnerabilities

Bulletin has no description...

CVE-2007-1762: Undefined Security Weakness

Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to bypass phishing protection via multiple / slash characters in the URL...

CVE-2006-2775

Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL...

CVE-2006-2035

The connected advisory confirms CVE-2006-2035 affects Websense when configured to permit the dynamic content category, enabling local users to bypass blocking of the Uncategorized category by appending a "/?" sequence to a URL. The CVSS data in the initial record indicates a low overall risk (AV:...

CVE-2005-1908

Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / slash or leading \ backslash in the URL...

CVE-2004-2480

Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer...

zonelabsFilter.txt

Zone Labs IMsecure Active Link Filter Bypass http://www.kurczaba.com/html/security/0410141.htm ------------------------------------------------- Overview: A vulnerability has been discovered in the Zone Labs IMsecure Active Link Filter Vendor: Zone Labs http://www.zonelabs.com Affected...

CVE-2004-0061

CVE-2004-0061 affects WWW File Share Pro 2.42 and earlier . It allows remote attackers to bypass directory access restrictions by using a URL with a trailing dot or a URI beginning with a slash or backslash. The impact described is partial disclosure/integrity/availability with a network attack v...

MSIE->WsBASEjpu

WsBASEjpu tested Browser Ver MS Internet Explorer: 6.0.2600.0000.xpclntqfe.021108-2107; Encryption: 128-bit; Patch:; Q810847; So, it's far from fully patched. OS Ver: "Windows XP Cn ver" demo http://www.safecenter.net/liudieyu/WsBASEjpu/WsBASEjpu-MyPage.HTM or http://umbrella.mx.tc --- WsBASEjpu...

MSIE->WsBASEjpu

WsBASEjpu tested Browser Ver MS Internet Explorer: 6.0.2600.0000.xpclntqfe.021108-2107; Encryption: 128-bit; Patch:; Q810847; So, it's far from fully patched. OS Ver: "Windows XP Cn ver" demo http://www.safecenter.net/liudieyu/WsBASEjpu/WsBASEjpu-MyPage.HTM or http://umbrella.mx.tc --- WsBASEjpu...

MSIE->NAFfileJPU

NAFfileJPU tested Browser Ver MS Internet Explorer: 6.0.2600.0000.xpclntqfe.021108-2107; Encryption: 128-bit; Patch:; Q810847; So, it's far from fully patched. OS Ver: "Windows XP Cn ver" demo http://www.safecenter.net/liudieyu/NAFfileJPU/NAFfileJPU-MyPage.HTM or http://umbrella.mx.tc ---...

CVE-2003-0106

The HTTP proxy for Symantec Enterprise Firewall SEF 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8...

CVE-2003-0106

The HTTP proxy for Symantec Enterprise Firewall SEF 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8...

CVE-2003-0106

The CVE-2003-0106 entry concerns Symantec Enterprise Firewall (SEF) 7.0 HTTP proxy URL pattern matching that can be bypassed when requests are URL-encoded (escapes, Unicode, UTF-8). The issue allows proxy users to bypass blocked URL pattern matching, enabling access to URLs that should be blocked...

CVE-2003-0106: Undefined Security Weakness

The HTTP proxy for Symantec Enterprise Firewall SEF 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8...

File protection bypass in BRS WebWeaver

URL like http://host/./secret/ allows access to password protected files...

CVE-2002-0899

Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . dot...

Various problems in Baltimore WebSweeper URL filtering

Tuesday 4 September 2001 Various problems in Baltimore WebSweeper URL filtering ====================================================== Product Background ------------------ WEBSweeper is Baltimore Technologies' Web Content Security solution. It enables customers to implement Content Security...