GLib Networking: Improper certificate validation

Background Network-related giomodules for glib Description GTlsClientConnection skips hostname verification of the server’s TLS certificate if the application fails to specify the expected server identity. Impact There may be a breach of integrity or confidentiality in connections made using GLib...

PT-2014-1430

Name of the Vulnerable Software and Affected Versions Samba versions 4.0.x through 4.0.15 Samba versions 4.1.x through 4.1.5 Description The issue exists in the owner set function in smbcacls.c in smbcacls due to the removal of an access control list when using the --chown or --chgrp options. Thi...

PT-2012-1178

Name of the Vulnerable Software and Affected Versions libproxy versions 0.4.x through 0.4.9 Description The issue is related to a stack-based buffer overflow in the url::get pac function, which can be triggered by a large proxy.pac file from remote servers. This may lead to unspecified...

PT-2011-1022

Name of the Vulnerable Software and Affected Versions Mojolicious versions prior to 0.999927 Description The issue is related to the improper implementation of HMAC-MD5 checksums in Mojolicious, which may have an unspecified impact and can be exploited remotely. Additionally, there are multiple...