openSUSE Security Update : MozillaFirefox (MozillaFirefox-1727)

The Mozilla Firefox was updated to version 3.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - MFSA 2009-65/CVE-2009-3979/CVE-2009-3981 Crashes with evidence of memory corruption 1.9.0.16 - MFSA 2009-68/CVE-2009-3983 bmo487872 NTLM reflection vulnerability...

SuSE 11 Security Update : XULRunner (SAT Patch Number 1716)

The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...

SuSE 11 Security Update : Mozilla Firefox (SAT Patch Number 1709)

The Mozilla Firefox was updated to version 3.5.6, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption rv:1.9.1.6. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3980 / CVE-2009-3982 - bmo504843,bmo523816 Memory safety fixes in...

Mozilla Firefox multiple security vulnerabilities

Multiple memory corruptions on HTML and media formats parsing, NTLM reflection attacks, location spoofing, privilege escalation, information leak...

FreeBSD : mozilla -- multiple vulnerabilities (01c57d20-ea26-11de-bd39-00248c9b4be7)

Mozilla Project reports : MFSA 2009-71 GeckoActiveXObject exception messages can be used to enumerate installed COM objects MFSA 2009-70 Privilege escalation via chrome window.opener MFSA 2009-69 Location bar spoofing vulnerabilities MFSA 2009-68 NTLM reflection vulnerability MFSA 2009-67 Integer...

Mozilla Foundation Security Advisory 2009-68

Mozilla Foundation Security Advisory 2009-68 Title: NTLM reflection vulnerability Impact: High Announced: December 15, 2009 Reporter: Takehiro Takahashi Products: Firefox, SeaMonkey Fixed in: Firefox 3.5.6 Firefox 3.0.16 SeaMonkey 2.0.1 Description Security researcher Takehiro Takahashi of the IB...

Mozilla NTLM reflection vulnerability

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user...

Firefox < 3.0.16 Multiple Vulnerabilities

The installed version of Firefox is earlier than 3.0.16. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2009-65 - The NTLM implementation is vulnerable to reflection attacks in which NTLM credentials from o...

SeaMonkey < 2.0.1 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.0.1. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2009-65 - Multiple vulnerabilities in 'liboggplay' can lead to arbitrary code execution. MFSA 2009-66...

Mozilla Firefox < 3.0.16 / 3.5.6 Multiple Vulnerabilities

Binary data 801369.prm...

Mozilla Firefox < 3.0.16 / 3.5.6 Multiple Vulnerabilities

Binary data 5264.prm...

NTLM reflection vulnerability — Mozilla

Security researcher Takehiro Takahashi of the IBM X-Force reported that Mozilla's NTLM implementation was vulnerable to reflection attacks in which NTLM credentials from one application could be forwarded to another arbitrary application via the browser. If an attacker could get a user to visit a...

Windows Telnet credential reflection

Added: 08/12/2009 CVE: CVE-2009-1930 BID: 35993 OSVDB: 56904 Background Microsoft Windows operating systems come with a telnet service. This service prompts a user to provide a login name and password. Following successful authentication, the server displays a shell prompt, allowing the user to r...

Windows Telnet credential reflection

Added: 08/12/2009 CVE: CVE-2009-1930 BID: 35993 OSVDB: 56904 Background Microsoft Windows operating systems come with a telnet service. This service prompts a user to provide a login name and password. Following successful authentication, the server displays a shell prompt, allowing the user to r...

PT-2009-4388 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user. This is related to a credential...

Windows Telnet credential reflection

Added: 08/12/2009 CVE: CVE-2009-1930 BID: 35993 OSVDB: 56904 Background Microsoft Windows operating systems come with a telnet service. This service prompts a user to provide a login name and password. Following successful authentication, the server displays a shell prompt, allowing the user to r...

Windows Telnet credential reflection

Added: 08/12/2009 CVE: CVE-2009-1930 BID: 35993 OSVDB: 56904 Background Microsoft Windows operating systems come with a telnet service. This service prompts a user to provide a login name and password. Following successful authentication, the server displays a shell prompt, allowing the user to r...

Telnet NTLM Credential Reflection Authentication Bypass Vulnerability (960859)

This host is missing a critical security update according to Microsoft Bulletin MS09-042. OpenVAS Vulnerability Test $Id: secpodms09-042.nasl 5363 2017-02-20 13:07:22Z cfi $ Telnet NTLM Credential Reflection Authentication Bypass Vulnerability 960859 Authors: Nikita MR Updated By: Madhuri D on...

Microsoft Windows Telnet NTLM凭据反射绕过认证漏洞（MS09-042）

BUGTRAQ ID: 35993 CVECAN ID: CVE-2009-1930 Microsoft Windows是微软发布的非常流行的操作系统。 Telnet协议未正确地选择加入NTLM凭据反射保护以确保用户凭据不被反射回来并供用户使用。如果用户受骗连接到了恶意的Telnet服务器，就可能导致反射NTLM凭据并以当前用户的权限获得系统访问。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windo...

Microsoft Telnet Services Credential Reflection Code Execution (MS09-042; CVE-2009-1930)

Telnet is a bidirectional communications protocol that allows for command line remote administration over the TCP protocol. A remote code execution vulnerability has been reported in the way Microsoft Windows Telnet Service handles NTLM credentials. The vulnerability is due to an error in the...