295 matches found
CVE-2008-6997: Undefined Security Weakness
Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service browser crash via an IMG tag with a long src attribute, which triggers the crash when the victim performs an "Inspect Element" action...
Google Chrome 0.2.149.27 - Inspect Element Denial of Service
Google Chrome 0.2.149.27 - Inspect Element Denial of Service Metascortexsecurity img...
Google Chrome 0.2.149.27 - Inspect Element Denial of Service
Metascortexsecurity img...
CVE-2007-0962: Undefined Security Weakness
Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.04.14 and 7.1 before 7.12.1, and the FWSM 2.x before 2.34.12 and 3.x before 3.13.24, when "inspect http" is enabled, allows remote attackers to cause a denial of service device reboot via malformed HTTP traffic...
CVE-2007-0961: Undefined Security Weakness
Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.35.115, 7.0 before 7.05.2, and 7.1 before 7.12.5, and the FWSM 3.x before 3.13.24, when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service device reboot via malformed SIP packets...
Design/Logic Flaw
The HTTP Inspect preprocessor httpinspect in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return \r after the URL and before the HTTP declaration...
CVE-2006-2769
The HTTP Inspect preprocessor httpinspect in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return \r after the URL and before the HTTP declaration...
CVE-2006-2769
The HTTP Inspect preprocessor httpinspect in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return \r after the URL and before the HTTP declaration...
CVE-2006-2769
The HTTP Inspect preprocessor httpinspect in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return \r after the URL and before the HTTP declaration...
CVE-2006-2769
The HTTP Inspect preprocessor httpinspect in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return \r after the URL and before the HTTP declaration...
CVE-2006-2769
The CVE-2006-2769 issue affects Snort 2.4.0–2.4.4 and is described in connected sources as an evasion flaw in the http_inspect preprocessor. A carriage return (\r) placed after the URL and before the HTTP declaration can bypass uricontent rules, enabling remote attackers to bypass certain URL con...
CVE-2006-2769
Removed by vendor...
Snort HTTP Inspect Pre-Processor Uricontent Bypass
For those of you using snort on this list, this got posted to some of the snort mailing lists this morning. http://www.demarc.com/support/downloads/patch20060531 http://www.osvdb.org/25837 "The evasion technique allows an attack to bypass detection of "uricontent" rules by adding a carriage retur...
DEBIAN-CVE-2006-0151
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158...