3495 matches found
SUSE SLED11 / SLES11 Security Update : bind (SUSE-SU-2015:2340-1)
This update fixes the following security issue : - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses bsc958861. It also fixes a bug : - Fix a regression in caching entries with a TTL of 0 bsc923281. Note that Tenable Network Security has extracted the preceding...
SUSE-SU-2015:2340-1 Security update for bind
This update fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses bsc958861. It also fixes a bug: - Fix a regression in caching entries with a TTL of 0 bsc923281...
[SECURITY] Fedora 22 Update: bind-dyndb-ldap-7.0-6.fc22
This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...
[SECURITY] Fedora 23 Update: bind-dyndb-ldap-8.0-4.fc23
This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...
bind, caching security update
CentOS Errata and Security Advisory CESA-2015:2656 Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which...
httpd: NULL pointer dereference in mod_cache if Content-Type has empty value
A NULL pointer dereference flaw was found in the way the modcache httpd module handled Content-Type headers. A malicious HTTP server could cause the httpd child process to crash when the Apache HTTP server was configured to proxy to a server with caching enabled...
httpd: NULL pointer dereference in mod_cache if Content-Type has empty value
A NULL pointer dereference flaw was found in the way the modcache httpd module handled Content-Type headers. A malicious HTTP server could cause the httpd child process to crash when the Apache HTTP server was configured to proxy to a server with caching enabled...
Information disclosure
The Edge Component Caching Proxy in IBM WebSphere Application Server WAS 8.0 before 8.0.0.12 and 8.5 before 8.5.5.8 does not properly encrypt data, which allows remote authenticated users to obtain sensitive information via unspecified vectors...
CVE-2015-5004
The Edge Component Caching Proxy in IBM WebSphere Application Server WAS 8.0 before 8.0.0.12 and 8.5 before 8.5.5.8 does not properly encrypt data, which allows remote authenticated users to obtain sensitive information via unspecified vectors...
CVE-2015-5004
CVE-2015-5004 affects IBM WebSphere Application Server Edge Component Caching Proxy. The vulnerability could allow a remote authenticated attacker to obtain sensitive information due to improper encryption. Affected are IBM WebSphere Application Server versions 8.0 (pre-8.0.0.12) and 8.5 (pre-8.5...
CVE-2015-5004
The Edge Component Caching Proxy in IBM WebSphere Application Server WAS 8.0 before 8.0.0.12 and 8.5 before 8.5.5.8 does not properly encrypt data, which allows remote authenticated users to obtain sensitive information via unspecified vectors...
The vulnerability of the software system for managing enterprise assets in IBM Maximo Asset Management allows a perpetrator to gain access to protected information.
The vulnerability of the IBM Maximo Asset Management software-based asset management system lies in the presence of a caching mechanism for HTTPS responses. Exploiting this vulnerability could allow an attacker, operating locally, to gain access to protected information...
libipa_hbac, libsss_idmap, libsss_nss_idmap, libsss_simpleifp, python, sssd security update
CentOS Errata and Security Advisory CESA-2015:2355 Updated sssd packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability...
RedHat Update for sssd RHSA-2015:2355-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Citrix NetScaler Application Delivery Controller and NetScaler Gateway Information Disclosure Vulnerability (CNVD-2015-07703)
Citrix Systems NetScaler Service Delivery Appliance Service VM SVM, NetScaler Application Delivery Controller ADC, and NetScaler Gateway formerly Citrix Access Gateway Enterprise Edition are Citrix Systems products. NetScaler Service Delivery Appliance SVM SVM, NetScaler Application Delivery...
CVE-2015-1996
IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not prevent caching of HTTPS responses, which allows physically proximate attackers to obtain sensitive local-cache information by leveraging an unattended workstation...
CVE-2015-1996
IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not prevent caching of HTTPS responses, which allows physically proximate attackers to obtain sensitive local-cache information by leveraging an unattended workstation...
The vulnerability of the MySQL database management system allows a hacker to cause a service failure.
The vulnerability of the Server sub-component: Memcached in the MySQL database management system is related to code errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
[SECURITY] Fedora 23 Update: squid-3.5.9-7.fc23
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
