RHEL 3 : squid (RHSA-2006:0045)

Updated squid packages that fix a security vulnerability as well as several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HT...

squid security update

CentOS Errata and Security Advisory CESA-2006:0045 Updated squid packages that fix a security vulnerability as well as several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching...

Moderate: Red Hat Security Advisory: squid security update

Updated squid packages that fix a security vulnerability as well as several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HT...

security flaw

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

squid security update

CentOS Errata and Security Advisory CESA-2006:0052 An updated squid package that fixes a security vulnerability as well as several issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy cachin...

Moderate: Red Hat Security Advisory: squid security update

An updated squid package that fixes a security vulnerability as well as several issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, a...

Ubuntu 4.10 / 5.04 / 5.10 : curl, wget vulnerabilities (USN-205-1)

A buffer overflow has been found in the NTLM authentication handler of the Curl library and wget. By tricking an user or automatic system that uses the Curl library, the curl application, or wget into visiting a specially crafted website, a remote attacker could exploit this to execute arbitrary...

Eudora Internet Mail Server < 3.2.8 NTLM Authentication Request DoS

Binary data 3361.prm...

CVE-2006-0141

Qualcomm Eudora Internet Mail Server EIMS before 3.2.8 allows remote attackers to cause a denial of service crash via 1 malformed NTLM authentication requests, or a malformed 2 Incoming Mail X or 3 Temporary Mail file...

CVE-2006-0141

CVE-2006-0141 affects Qualcomm’s Eudora Internet Mail Server (EIMS) prior to version 3.2.8. The vulnerability allows remote denial of service (crash) via: (1) malformed NTLM authentication requests, (2) a malformed Incoming Mail X, or (3) a malformed Temporary Mail file. The issue is documented a...

CVE-2006-0141

Qualcomm Eudora Internet Mail Server EIMS before 3.2.8 allows remote attackers to cause a denial of service crash via 1 malformed NTLM authentication requests, or a malformed 2 Incoming Mail X or 3 Temporary Mail file...

RHEL 2.1 / 3 / 4 : wget (RHSA-2005:812)

Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A stack based buffer overflow bug was found ...

openssl096b, wget security update

CentOS Errata and Security Advisory CESA-2005:830 Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP...

wget security update

CentOS Errata and Security Advisory CESA-2005:812 Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP...

Important: Red Hat Security Advisory: wget security update

Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A stack based buffer overflow bug was found ...

SUSE-SA:2005:063: curl, wget

The remote host is missing the patch for the advisory SUSE-SA:2005:063 curl, wget. This update fixes a stack-based buffer overflow in the NTLM authentication code used by the file download tools/libraries curl and wget that can be triggered by using a long user or domain name also works with HTTP...

Fedora Core 3 : curl-7.12.3-4.fc3 (2005-1000)

This package fixes a buffer overflow bug in NTLM authentication code of curl CVE-2005-3185. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

CVE-2005-3185

Stack-based buffer overflow in the ntlmoutput function in http-ntlm.c for 1 wget 1.10, 2 curl 7.13.2, and 3 libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username...

CVE-2005-3185

Stack-based buffer overflow in the ntlmoutput function in http-ntlm.c for 1 wget 1.10, 2 curl 7.13.2, and 3 libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username...

CVE-2005-3185

Stack-based buffer overflow in the ntlmoutput function in http-ntlm.c for 1 wget 1.10, 2 curl 7.13.2, and 3 libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username...