Squid "idnsALookup()" DNS名称处理缓冲区溢出漏洞

Squid是一个高效的Web缓存及代理程序。 Squid 3.2 - 3.2.11、3.3 - 3.3.6在处理DNS查询生成请求时，"idnsALookup" 函数发生错误，攻击者通过发送特制的HTTP请求利用此漏洞可造成缓冲区溢出。 0 Squid 3.x 厂商补丁： Squid ----- Squid已经为此发布了一个安全公告（SQUID-20132）以及相应补丁: SQUID-20132：Buffer overflow in HTTP request handling 链接：http://www.squid-cache.org/Advisories/SQUID-20132.txt...

CVE-2012-2660

actionpack/lib/actiondispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended...

RHEL 4 : seamonkey (RHSA-2011:0313)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Firefly Media Server ws_getpostvars Function Content-Length Header HTTP Request Handling Overflow

The remote host is running Firefly Media Server, also known as mt-daapd, a media streaming server. The version of Firefly Media Server installed on the remote host apparently fails to sanitize user-supplied Content-Length field before using it to the call to 'malloclen+1' in 'src/webserver.c'...

MS06-071 Microsoft Internet Explorer XML Core Services HTTP Request Handling

This module exploits a code execution vulnerability in Microsoft XML Core Services which exists in the XMLHTTP ActiveX control. This module is the modified version of http://www.milw0rm.com/exploits/2743 - credit to str0ke. This module has been successfully tested on Windows 2000 SP4, Windows XP...

CVE-2003-1415

NetCharts XBRL Server 4.0.0 allows remote attackers to obtain sensitive information via an HTTP request with an invalid chunked transfer encoding specification...

Global Spy Software Cyber Web Filter 2 - IP Filter Bypass

Global Spy Software Cyber Web Filter 2 - IP Filter Bypass source: https://www.securityfocus.com/bid/11562/info Global Spy Software Cyber Web Filter is affected by an IP filter bypass vulnerability. This issue is due to a failure of the application to properly handle exceptional HTTP requests. An...

Novell NetWare 5.16.0 - POST Arbitrary Perl Code Execution

Novell NetWare 5.16.0 - POST Arbitrary Perl Code Execution source: https://www.securityfocus.com/bid/5520/info A vulnerability has been reported in some versions of Novell NetWare. This issue lies in the handling of some HTTP requests when Perl is used as a handler by a web server. Reportedly, it...