CVE-2006-3742

The CVE-2006-3742 issue affects the KDE PAM configuration shipped with Fedora Core 5, where KDM passwords are cached. This allows an attacker to gain access by attempting to log in multiple times without a password, effectively bypassing authentication. The description is supported by multiple so...

CVE-2006-3742: Undefined Security Weakness

The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times...

iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MrxSmbCscIoctlCloseForCopyChunk DoS

Windows MRXSMB.SYS MrxSmbCscIoctlCloseForCopyChunk DoS iDefense Security Advisory 06.13.06 http://www.idefense.com/application/poi/display?type=vulnerabilities June 13, 2006 I. BACKGROUND Microsoft Windows Operating System is system software for Intel based PCs. More information can be found at t...

BEA WebLogic Portal information leak

Incorrect caching algorithm leads to user's portlet data may be leaked to another portlet...

CVE-2006-0987

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service traffic amplification via DNS queries with...

WebCalendar 1.0.1 - Layers_Toggle.php HTTP Response Splitting

WebCalendar 1.0.1 - LayersToggle.php HTTP Response Splitting source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may...

IBM WebSphere Edge Server Caching Proxy DoS Vulnerability

We could crash the WebSphere Edge caching proxy by sending a bad request to the helpout.exe CGI SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2005-3339

Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors...

CVE-2005-3339

Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors...

CVE-2005-3339

Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors...

CVE-2005-3339

CVE-2005-3339 affects MantisBT (Mantis) prior to version 0.19.3, where the User ID was cached longer than necessary. The connected OpenVAS and Debian/Gentoo advisories confirm that this CVE is part of a set of multiple vulnerabilities in Mantis and reference 0.19.3 as the fix version, but the pro...

CVE-2005-1854

Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary commands on the caching server...

CVE-2005-1854: Undefined Security Weakness

Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary commands on the caching server...

apache -- http request smuggling

A Watchfire whitepaper reports an vulnerability in the Apache webserver. The vulnerability can be exploited by malicious people causing cross site scripting, web cache poisoining, session hijacking and most importantly the ability to bypass web application firewall protection. Exploiting this...

NetBSD Security Advisory 2005-001: Crypto leaks across HyperThreaded CPUs (i386, P4, HTT+SMP only)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2005-001 ================================= Topic: Crypto leaks across HyperThreaded CPUs i386, P4, HTT+SMP only Version: NetBSD-current: affected, i386 on P4 with HTT and SMP kernels NetBSD 2.0: affected, i386 on P4 with HTT a...

kernel -- ipfw packet matching errors with address tables

Problem Description The ipfw tables lookup code caches the result of the last query. The kernel may process multiple packets concurrently, performing several concurrent table lookups. Due to an insufficient locking, a cached result can become corrupted that could cause some addresses to be...

[SA15627] C-JDBC Exposure of Cached Results

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

C-JDBC clastered database access interface information leak

Vulnerability in caching mechanism allows to access cached data without access rights validation...

DSA-726-1 oops - format string vulnerability

Bulletin has no description...

CVE-2003-1183

The CVE concerns the WebCache component in Oracle Files within Oracle Collaboration Suite Release 1. versions 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 cache files despite Oracle Files cacheability rules, allowing local users to gain access. Affected product/area: WebCache in Oracle Files. Underlying i...