BIND Dynamic Update DoS

BIND Dynamic Update DoS CVE: CVE-2009-0696 CERT: VU725188 Posting date: 2009-07-28 Program Impacted: BIND Versions affected: BIND 9 all versions Severity: High Exploitable: remotely Summary: BIND denial of service server crash caused by receipt of a specific remote dynamic update message...

tomcat request dispatcher information disclosure vulnerability

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct...

tomcat request dispatcher information disclosure vulnerability

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct...

Firefox XUL scripts skip some security checks

Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web...

ClearSpace Detection

The remote web server is running Jive ClearSpace, a social networking site letting users manage wikis, publish blog entries and discuss between each other. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38183; scriptversion"1.8"; scriptnameenglish:"ClearSpace...

Microsoft SharePoint Server Detection

The remote web server is running SharePoint, a web interface for document management. As this interface is likely to contain sensitive information, make sure only authorized personel can log into this site C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38157;...

Fortify 360 Web Interface Detection

The remote web server is running the web interface for Fortify 360, a web interface to analyze the results of source code audits. As this interface is likely to contain sensitive information, make sure only authorized personel can log into this site C Tenable Network Security, Inc...

FogBugz Interface Detection

The remote web server is running the web interface for FogBugz, a web interface for a project management software As this interface is likely to contain sensitive information, make sure only authorized personel can log into this site C Tenable Network Security, Inc. include"compat.inc"; if...

PYSEC-2009-13

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when aclhierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937...

CVE-2009-1211

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet...

Design/Logic Flaw

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet...

CVE-2009-1211

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet...

CVE-2009-1211

CVE-2009-1211 affects Blue Coat ProxySG when in transparent interception mode. The vulnerability arises because the appliance uses the HTTP Host header to select the remote endpoint, allowing a crafted page to cause a client to send requests with a modified Host header. This can bypass access con...

PYSEC-2009-5

schema.py in FormEncode for Python python-formencode 1.0 does not apply the chainedvalidators feature, which allows attackers to bypass intended access restrictions via unknown vectors...

DEBIAN-CVE-2008-6547

schema.py in FormEncode for Python python-formencode 1.0 does not apply the chainedvalidators feature, which allows attackers to bypass intended access restrictions via unknown vectors...

net-snmp: incorrect application of hosts access restrictions in hosts.{allow,deny}

The netsnmpudpfmtaddr function snmplib/snmpUDPDomain.c in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to...

Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1

Ubuntu Update for Linux kernel vulnerabilities USN-559-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5591.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

The biggest security vulnerability — people!

We recently conducted a project focused on confidential data security enterprisestrategygroup.com that will be published soon. However, here are some interesting advance results that support this venerable security dictum. ESG asked 308 North American and European security professionals from larg...

CVE-2009-0803

SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and...

Design/Logic Flaw

SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and...