224 matches found
CVE-2010-3863: Apache Shiro information disclosure vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2010-3863: Apache Shiro information disclosure vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Shiro 1.0.0-incubating The unsupported JSecurity 0.9.x versions are also affected Description:...
UPlus-FTP-Server
UPlus FTP server 1.7 is prone to a buffer overflow that allows remote attackers to cause a DoS or execute arbitrary code via a long username or password in a read or write request. The vulnerability is caused due to a boundary error in the handling of filenames and can be exploited to cause a...
Fedora 7 : subversion-1.4.4-1.fc7 (2007-2635)
This update includes the Subversion 1.4.4 release, including a number of bug fixes and a fix for a minor security issue. An issue was discovered in the implementation of access control for revision properties in the path-based authorization code. In a repository using path-based access control, i...
subversion -- WebDAV fails to protect metadata
In some situations, subversion metadata may be unexpectedly disclosed via WebDAV. A subversion advisory states: modauthzsvn, the Apache httpd module which does path-based authorization on Subversion repositories, is not correctly protecting all metadata on unreadable paths. This security issue is...