pdnsd: Denial of Service and cache poisoning

Background pdnsd is a proxy DNS server with permanent caching that is designed to cope with unreachable DNS servers. Description Two issues have been reported in pdnsd: The pexecquery function in src/dnsquery.c does not properly handle many entries in the answer section of a DNS reply, related to...

ModSecurity 'SecCacheTransformations' Security Bypass Vulnerability

This host is running ModSecurity and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodmodsecuritysecbypassvuln.nasl 4522 2016-11-15 14:52:19Z teissa $ ModSecurity 'SecCacheTransformations' Security Bypass Vulnerability Authors: Sujit Ghosal Copyright: Copyright c...

CVE-2008-5676

Multiple unspecified vulnerabilities in the ModSecurity aka modsecurity module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service daemon crash or bypass the product's functionality via unknown vectors relate...

CVE-2008-5676

Multiple unspecified vulnerabilities in the ModSecurity aka modsecurity module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service daemon crash or bypass the product's functionality via unknown vectors relate...

CVE-2008-5676

ModSecurity (mod_security) for the Apache HTTP Server is affected by CVE-2008-5676. The issue affects ModSecurity versions 2.5.0 through 2.5.5 when SecCacheTransformations is enabled, allowing remote attackers to cause a denial of service (daemon crash) or bypass the product’s functionality via u...

CVE-2008-5676: Undefined Security Weakness

Multiple unspecified vulnerabilities in the ModSecurity aka modsecurity module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service daemon crash or bypass the product's functionality via unknown vectors relate...

WordPress XSS vulnerability in RSS Feed Generator

===== noXSS.org Security Advisory ====== Advisory: WordPress XSS vulnerability in RSS Feed Generator Author: Jeremias Reith [email protected] Published: 2008/11/25 Affected: WordPress 2.6.5 Summary ======= WordPress prior to v2.6.3 fails to sanitize the Host header variable correctly when generating R...

CVE-2008-3644

Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache...

Design/Logic Flaw

Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache...

CVE-2008-3644

Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache...

CVE-2008-3644

Summary: CVE-2008-3644 affects Apple Safari prior to 3.2. The issue is that Safari does not reliably prevent caching of form data in fields with autocomplete disabled, allowing local users to read sensitive information from the browser page cache. The vulnerability is described in the NVD entry f...

pam_krb5 privilege escalation

Privilege escalation is possible if existingticket credentials caching option is used...

CVE-2008-3003

Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD password string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the...

Design/Logic Flaw

Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD password string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the...

CVE-2008-3003

Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD password string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the...

CVE-2008-3003: Improper Input Validation

Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD password string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the...

CVE-2008-3226

The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors...

Design/Logic Flaw

The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors...

CVE-2008-3226

The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors...

CVE-2008-3226

CVE-2008-3226 : Joomla! prior to 1.5.4 has a flaw in the file caching implementation that allows attackers to access cached pages. The precise attack vectors are not detailed in the available documents. Evidence from NVD lists a CVSSv2 base score of 5.0 (Medium), with network access required, no ...