935 matches found
CVE-2013-5471
Cross-site request forgery CSRF vulnerability in the web framework in Cisco Global Site Selector GSS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh42164...
CVE-2013-5471
Cisco GSS (Global Site Selector) web framework is affected by a Cross-site request forgery (CSRF) vulnerability (CVE-2013-5471). The issue allows an unauthenticated, remote attacker to hijack the authentication of a user by enticing them to follow a crafted link, enabling the attacker to submit a...
Cisco Global Site Selector Cross-Site Request Forgery Vulnerability
A vulnerability in the web framework of Cisco GSS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by...
Cisco GSS Version
The remote host is running GSS, an operating system for Cisco load balancers. It is possible to read the GSS version number by connecting to the router by SSH or by using SNMP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid68960; scriptversion"1.6";...
cURL/libcURL GSS/Negotiate Feature Spoofing
Binary data 6904.prm...
cURL/libcURL GSS/Negotiate Feature Spoofing Security Vulnerability
Binary data 801392.prm...
Mandriva Linux Security Advisory : elinks (MDVSA-2013:075)
Updated elinks package fixes security vulnerability : Marko Myllynen discovered that ELinks, a powerful text-mode browser, incorrectly delegates user credentials during GSS-Negotiate CVE-2012-4545. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...
RedHat Update for elinks RHSA-2013:0250-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for elinks CESA-2013:0250 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS 5 / 6 : elinks (CESA-2013:0250)
An updated elinks package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
RHEL 5 / 6 : elinks (RHSA-2013:0250)
An updated elinks package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
elinks security update
CentOS Errata and Security Advisory CESA-2013:0250 An updated elinks package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS...
Moderate: Red Hat Security Advisory: elinks security update
An updated elinks package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
RHEL 5 : Red Hat Network Satellite server IBM Java Runtime (RHSA-2011:0880)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0880 advisory. - TLS: MITM attacks via session renegotiation CVE-2009-3555 - krb5: null pointer dereference in GSS-API library leads to DoS...
CVE-2012-4545
The httpnegotiatecreatecontext function in protocol/http/httpnegotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials...
elinks authentication relaing
Incorrect user credentials delegation in GSS...
[SECURITY] [DSA 2592-1] elinks security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2592-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28, 2012 http://www.debian.org/security/faq -...
Debian DSA-2592-1 : elinks - programming error
Marko Myllynen discovered that ELinks, a powerful text-mode browser, incorrectly delegates user credentials during GSS-Negotiate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2592. The...
DSA-2592-1 elinks - programming error
Bulletin has no description...
Scientific Linux Security Update : krb5 on SL3.x, SL4.x, SL5.x i386/x86_64
A NULL pointer dereference flaw was discovered in the MIT Kerberos Generic Security Service Application Program Interface GSS-API library. A remote, authenticated attacker could use this flaw to crash any server application using the GSS-API authentication mechanism, by sending a specially crafte...