Fedora Update for myproxy FEDORA-2011-0514

Check for the Version of myproxy OpenVAS Vulnerability Test Fedora Update for myproxy FEDORA-2011-0514 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 13 : myproxy-5.3-1.fc13 (2011-0512)

Release 5.3 fixes a myproxy-logon security bug in MyProxy versions 5.0-5.2 that disabled server identity verification : The myproxy-logon program in MyProxy versions 5.0 through 5.2 does not enforce the check that the myproxy-server's certificate contains the expected hostname or identity. The...

Fedora 14 : myproxy-5.3-1.fc14 (2011-0514)

Release 5.3 fixes a myproxy-logon security bug in MyProxy versions 5.0-5.2 that disabled server identity verification : The myproxy-logon program in MyProxy versions 5.0 through 5.2 does not enforce the check that the myproxy-server's certificate contains the expected hostname or identity. The...

[SECURITY] Fedora 13 Update: myproxy-5.3-1.fc13

MyProxy is open source software for managing X.509 Public Key Infrastructure PKI security credentials certificates and private keys. MyProxy combines an online credential repository with an online certificate authority to allow users to securely obtain credentials when and where need ed. Users ru...

[SECURITY] Fedora 14 Update: myproxy-5.3-1.fc14

MyProxy is open source software for managing X.509 Public Key Infrastructure PKI security credentials certificates and private keys. MyProxy combines an online credential repository with an online certificate authority to allow users to securely obtain credentials when and where need ed. Users ru...

FreeBSD : globus -- Multiple tmpfile races (5039ae61-2c9f-11db-8401-000ae42e9b93)

The Globus Alliance reports : The proxy generation tool grid-proxy-init creates the file, secures the file to provide access only to owner and writes proxy to the file. A race condition exists between the opening of the proxy credentials file, and making sure it is safe file to write to. The chec...

CVE-2004-2481

MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the proxy and issuing a CONNECT command...

CVE-2004-2481

CVE-2004-2481 affects MyProxy 6.58. The vulnerability allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server by issuing a CONNECT command, bypassing access restrictions. No explicit exploit code or affected version range beyond 6.58 is provided in...

CVE-2003-1199

Cross-site scripting XSS vulnerability in MyProxy 20030629 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2003-1199

The CVE-2003-1199 entry documents a cross-site scripting (XSS) vulnerability in MyProxy 20030629 that allows remote attackers to inject arbitrary web script or HTML via the URL. The connected sources (NVD, CVE list) confirm the affected software and vulnerability type, but do not provide specific...

CVE-2004-2481

MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the proxy and issuing a CONNECT command...

CVE-2003-1199

Cross-site scripting XSS vulnerability in MyProxy 20030629 allows remote attackers to inject arbitrary web script or HTML via the URL...

MyProxy crossite scripting

Crossite scripting via URL...

XSS in MyProxy 20030629

Donato Ferrante Application: MyProxy http://www.dietrich.cx/devel/myproxy/ Version: 20030629 Bug: cross site scripting Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The...

GNU MyProxy 20030629 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9846/info It has been reported that GNU MyProxy may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to insufficient sanitization of...