Code injection

The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service loss of new connections by repeatedly sending data or attempting connections...

CVE-2007-4136

The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service loss of new connections by repeatedly sending data or attempting connections...

CVE-2007-4136: Undefined Security Weakness

The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service loss of new connections by repeatedly sending data or attempting connections...

CVE-2007-4136

CVE-2007-4136 : A denial-of-service flaw in the ricci daemon of Red Hat Conga 0.10.0 allows remote attackers to temporarily refuse new connections by repeatedly sending data or attempting connections. The issue is documented in multiple sources (RHSA-2007:0640, RHSA advisories, and Oracle/Linux u...

ricci is vulnerable to a connect DoS attack

The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service loss of new connections by repeatedly sending data or attempting connections...

CVE-2007-1462

The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by storing the password in the Value attribute of a password entry field, which allows attackers to steal the password by performing a "view source" or other operation to obtain the w...

Design/Logic Flaw

The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by storing the password in the Value attribute of a password entry field, which allows attackers to steal the password by performing a "view source" or other operation to obtain the w...

CVE-2007-1462

The CVE-2007-1462 issue affects the luci server component in Conga, where a password is stored in the Value attribute of a password field between page loads. This enables a password disclosure through page source viewing or similar operations; impact is partial confidentiality loss as noted, with...

CVE-2007-1462

The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by storing the password in the Value attribute of a password entry field, which allows attackers to steal the password by performing a "view source" or other operation to obtain the w...

CVE-2007-1462: Undefined Security Weakness

The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by storing the password in the Value attribute of a password entry field, which allows attackers to steal the password by performing a "view source" or other operation to obtain the w...

security flaw

The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by storing the password in the Value attribute of a password entry field, which allows attackers to steal the password by performing a "view source" or other operation to obtain the w...

Low: Red Hat Bug Fix Advisory: conga bug fix update

Updated conga packages that provide critical bug fixes are now available. The Conga package is a web-based administration tool for remote cluster and storage management. This erratum applies the following bug fixes: - The borrowed Zope packages used by Conga have been patched to eliminate a...