Fedora 11 : python-paste-1.7.4-1.fc11 (2010-10400)

1.7.4 The only real change is to paste.httpexceptions, which was using insecure quoting of some parameters and allowed an XSS hole, most specifically with its 404 messages. The most notably WSGI application using this is paste.urlparse.StaticURLParser and PkgResourcesParser. By directing someone ...

Ubuntu 4.10 / 5.04 : gaim vulnerabilities (USN-125-1)

Marco Alvarez found a Denial of Service vulnerability in the Jabber protocol handler. A remote attacker could exploit this to crash Gaim by sending specially crafted file transfers to the user. CAN-2005-0967 Stu Tomlinson discovered an insufficient bounds checking flaw in the URL parser. By sendi...

CVE-2005-4360

Summary (CVE-2005-4360, mode C) : IIS 5.1 on Windows XP Pro SP2 contains a memory/URL parsing vulnerability in the IIS WWW component. A remote attacker can trigger it by sending specially crafted URLs (notably using paths like /_vti_bin/.dll/*/~0), leading to remote code execution with SYSTEM pri...

CVE-2005-4360: Unchecked Return Value

The URL parser in Microsoft Internet Information Services IIS 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "0" through "9", which causes ntdll.dll to produce a return value that is not correctly...

CURL-CVE-2005-4077 URL Buffer Overflow

libcurl's URL parser function can overflow a heap based buffer in two ways, if given a too long URL. These overflows happen if you 1 - pass in a URL with no protocol like "http://" prefix, using no slash and the string is 256 bytes or longer. This leads to a single zero byte overflow of the heap...

curl -- URL buffer overflow vulnerability

A Project cURL Security Advisory reports: libcurl's URL parser function can overflow a malloced buffer in two ways, if given a too long URL. 1 - pass in a URL with no protocol like "http://" prefix, using no slash and the string is 256 bytes or longer. This leads to a single zero byte overflow of...

USN-125-1: Gaim vulnerabilities

Marco Alvarez found a Denial of Service vulnerability in the Jabber protocol handler. A remote attacker could exploit this to crash Gaim by sending specially crafted file transfers to the user. CAN-2005-0967 Stu Tomlinson discovered an insufficient bounds checking flaw in the URL parser. By sendi...