Scientific Linux Security Update : httpd on SL5.x i386/x86_64 (20130108)

Input sanitization flaws were found in the modnegotiation module. A remote attacker able to upload or create files with arbitrary names in a directory that has the MultiViews options enabled, could use these flaws to conduct cross-site scripting and HTTP response splitting attacks against users...

[20130203] - Core - Information Disclosure

Coding errors led to information disclosure in some situations...

httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2013:0130 Updated httpd packages that fix multiple security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common...

Warm up your keyboard for Facebook Hacker Cup 2013

Dear Hackers, Warm up your keyboards! Because Facebook open Registration for third Hacker Cup 2013, an annual worldwide programming competition where hackers compete against each other for fame, fortune, glory and a shot at the title of world champion, with $5,000 top prize. The qualification rou...

Low: Red Hat Security Advisory: httpd security, bug fix, and enhancement update

Updated httpd packages that fix multiple security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give...

CVE-2012-3544

Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data...

PT-2012-4798

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.0.0 through 6.0.36 Apache Tomcat versions 7.0.0 through 7.0.29 Description The issue allows remote attackers to cause a denial of service by streaming data due to improper handling of chunk extensions in chunked transf...

CVE-2012-5132

Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service application crash via a response with chunked transfer coding...

CVE-2012-5132

Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service application crash via a response with chunked transfer coding...

CVE-2012-5132

Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service application crash via a response with chunked transfer coding...

CVE-2012-5132

Removed by vendor...

CVE-2012-5132: Undefined Security Weakness

Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service application crash via a response with chunked transfer coding...

PT-2012-5797

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 23.0.1271.91 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by sending a response with chunked transfer coding. Recommendation...

Apache Tomcat 7.0.0 < 7.0.30 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 7.0.30. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat7.0.30security-7 advisory. - Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in...

Fedora 17 : libproxy-0.4.10-1.fc17 (2012-17574)

Fix http chunk encoded PAC that was broken in previous release Add HTTP client unit test Fix coding style issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it ...

Fedora 18 : libproxy-0.4.10-1.fc18 (2012-16383)

Fix http chunk encoded PAC that was broken in previous release - Add HTTP client unit test - Fix coding style issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

xheditor online editor lead to stored xss-vulnerability warning-the black bar safety net

Brief description: The issue before the hair, http://tmxk.org/thread-411-1-1.html that This is at the limit of the Source mode in the case appearxss. Detailed description: First, the official website deomo for testing. ! ! ! Test example the ! Description of case Soufun, phpsoso, the kingcms...

Fedora Update for automake17 FEDORA-2012-14779

Check for the Version of automake17 OpenVAS Vulnerability Test Fedora Update for automake17 FEDORA-2012-14779 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 18 Update: automake17-1.7.9-17.fc18

Automake is a tool for automatically generating Makefile.in' files compliant with the GNU Coding Standards. This package contains Automake 1.7, an older version of Automake. You should install it if you need to run automake in a project that has not yet been updated to work with latest version of...

[SECURITY] Fedora 17 Update: automake17-1.7.9-16.fc17

Automake is a tool for automatically generating Makefile.in' files compliant with the GNU Coding Standards. This package contains Automake 1.7, an older version of Automake. You should install it if you need to run automake in a project that has not yet been updated to work with latest version of...