Oracle: Security Advisory (ELSA-2008-0649)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : libxslt on SL4.x, SL5.x i386/x86_64

A heap buffer overflow flaw was discovered in the RC4 libxslt library extension. An attacker could create a malicious XSL file that would cause a crash, or, possibly, execute arbitrary code with the privileges of the application using the libxslt library to perform XSL transformations on untruste...

CentOS 4 / 5 : libxslt (CESA-2008:0649)

Updated libxslt packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. libxslt is a library for transforming XML files into other XML...

openSUSE Security Update : libxslt (libxslt-110)

A heap overflow in the RC4 cryptographic routines in libxslt was fixed which could be used by attackers to potentially execute code. CVE-2008-2935 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

Ubuntu Update for libxslt vulnerabilities USN-633-1

Ubuntu Update for Linux kernel vulnerabilities USN-633-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6331.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libxslt vulnerabilities USN-633-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-633-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libxslt FEDORA-2008-7062

Check for the Version of libxslt OpenVAS Vulnerability Test Fedora Update for libxslt FEDORA-2008-7062 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libxslt FEDORA-2008-7029

Check for the Version of libxslt OpenVAS Vulnerability Test Fedora Update for libxslt FEDORA-2008-7029 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libxslt FEDORA-2008-7029

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200808-06 (libxslt)

The remote host is missing updates announced in advisory GLSA 200808-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200808-06 (libxslt)

The remote host is missing updates announced in advisory GLSA 200808-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : libxslt (libxslt-5458)

A heap overflow in the RC4 cryptographic routines in libxslt was fixed which could be used by attackers to potentially execute code. CVE-2008-2935 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

Debian Security Advisory DSA 1624-1 (libxslt)

The remote host is missing an update to libxslt announced via advisory DSA 1624-1. OpenVAS Vulnerability Test $Id: deb16241.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1624-1 libxslt Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Fedora 9 : libxslt-1.1.24-2.fc9 (2008-7062)

fix for CVE-2008-2935 problem in exslt rc4 crypto extensions Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

CVE-2008-2935

Multiple heap-based buffer overflows in the rc4 1 encryption aka exsltCryptoRc4EncryptFunction and 2 decryption aka exsltCryptoRc4DecryptFunction functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containin...

USN-633-1: libxslt vulnerabilities

It was discovered that long transformation matches in libxslt could overflow. If an attacker were able to make an application linked against libxslt process malicious XSL style sheet input, they could execute arbitrary code with user privileges or cause the application to crash, leading to a deni...

CVE-2008-2935

CVE-2008-2935 affects libxslt 1.1.8–1.1.24 via heap-based buffer overflows in the RC4 S-Box code in libexslt (exsltCryptoRc4EncryptFunction/exsltCryptoRc4DecryptFunction). An XML stylesheet containing a long string as an argument in the XSL input could allow a context-dependent attacker to execut...

[oCERT-2008-009] libxslt heap overflow

2008/07/31 2008-009 libxslt heap overflow Description: The libexslt library bundled with libxslt is affected by a heap-based buffer overflow which can lead to arbitrary code execution. The vulnerability is present in the rc4 encryption/decryption functions. An arbitrary length string, passed as a...

Debian DSA-1624-1 : libxslt - buffer overflows

Chris Evans discovered that a buffer overflow in the RC4 functions of libexslt may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1624. The text...

[SECURITY] [DSA 1624-1] New libxslt packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1624-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 31, 2008 http://www.debian.org/security/faq -...