549 matches found
Squid Gopher Remote Buffer Overflow Vulnerability (SQUID-2011:3)
Squid is prone remote buffer-overflow vulnerability affects the Gopher-to-HTML functionality. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...
Squid Gopher应答处理缓冲区溢出漏洞
Squid是一款功能强大的代理服务器和Web缓存服务器。 Squid解析来自Gopher服务器上的应答时存在缺陷,如果Gopher服务器返回的行超过4096字节可触发缓冲区溢出,此溢出可导致内存破坏一般可使Squid崩溃。 恶意用户必须设置伪造的Gopher服务器,并转发请求通过Squid。成功利用漏洞允许以服务器上下文执行任意代码。 Squid 3.x 厂商解决方案 Squid 3.0.STABLE26或3.1.15版本已经修复此漏洞,建议用户下载使用: http://www.squid-cache.org/...
Nmap NSE net: gopher-ls
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nmap NSE net: gopher-ls
Lists files and directories at the root of a gopher service. SYNTAX: gopher-ls.maxfiles: If set, limits the amount of files returned by the script. If set to 0 or less, all files are shown. The default value is 10. OpenVAS Vulnerability Test $Id: gbnmapgopherlsnet.nasl 5505 2017-03-07 10:00:18Z...
gopher-ls NSE Script
Lists files and directories at the root of a gopher service. Script Arguments gopher-ls.maxfiles If set, limits the amount of files returned by the script. If set to 0 or less, all files are shown. The default value is 10. Example Usage nmap -p 70 --script gopher-ls --script-args...
Fedora Update for squid FEDORA-2010-14149
Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2010-14149 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
CentOS 3 / 4 : seamonkey (CESA-2010:0781)
Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
RHEL 6 : firefox (RHSA-2010:0861)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0861 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A race condition flaw was...
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Mozilla XSS in gopher parser when parsing hrefs
Multiple cross-site scripting XSS vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote attackers to inject arbitrary web script or HTML via a crafted name of a 1 file or 2 directory on a Gopher server...
CentOS Update for seamonkey CESA-2010:0781 centos4 i386
Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0781 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
Mozilla Products Multiple Cross-site Scripting Vulnerabilities (Windows)
The host is installed with Mozilla Firefox/Seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultxssvulnwin.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Cross-site Scripting Vulnerabilities Windows Authors: Madhuri D Copyright:...
seamonkey security update
CentOS Errata and Security Advisory CESA-2010:0781 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System...
Mozilla Foundation Security Advisory 2010-68
Mozilla Foundation Security Advisory 2010-68 Title: XSS in gopher parser when parsing hrefs Impact: High Announced: October 19, 2010 Reporter: Robert Swiecki Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.11 Firefox 3.5.14 SeaMonkey 2.0.9 Description Google security researcher Robert Swiecki...
RedHat Update for firefox RHSA-2010:0782-01
Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2010:0782-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CVE-2010-3177
Multiple cross-site scripting XSS vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote attackers to inject arbitrary web script or HTML via a crafted name of a 1 file or 2 directory on a Gopher server...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote attackers to inject arbitrary web script or HTML via a crafted name of a 1 file or 2 directory on a Gopher server...
CVE-2010-3177
CVE-2010-3177 affects Mozilla Firefox (before 3.5.14 and before 3.6.11) and SeaMonkey (before 2.0.9). The issue is a cross-site scripting (XSS) vulnerability in the Gopher parser that allows remote attackers to inject arbitrary script or HTML via the name of a file or directory on a Gopher server...
CVE-2010-3177
Multiple cross-site scripting XSS vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote attackers to inject arbitrary web script or HTML via a crafted name of a 1 file or 2 directory on a Gopher server...
USN-997-1: Firefox and Xulrunner vulnerabilities
Paul Nickerson, Jesse Ruderman, Olli Pettay, Igor Bukanov, Josh Soref, Gary Kwong, Martijn Wargers, Siddharth Agarwal and Michal Zalewski discovered various flaws in the browser engine. An attacker could exploit this to crash the browser or possibly run arbitrary code as the user invoking the...