4655 matches found
CVE-2011-3014
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation...
CVE-2011-3014
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation...
DEBIAN-CVE-2011-2536
chansip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41.2, 1.6.2.x before 1.6.2.18.2, and 1.8.x before 1.8.4.4, and Asterisk Business Edition C.3.x before C.3.7.3, disregards the alwaysauthreject option and generates different responses for invalid SIP requests depending o...
AST-2011-011: Possible enumeration of SIP users due to differing authentication responses
Asterisk Project Security Advisory - AST-2011-011 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Possible enumeration of SIP users due to | | | differing...
CVE-2011-1246
Microsoft Internet Explorer 8 does not properly handle content settings in HTTP responses, which allows remote web servers to obtain sensitive information from a different 1 domain or 2 zone via a crafted response, aka "MIME Sniffing Information Disclosure Vulnerability."...
Microsoft SMB Client Remote Code Execution Vulnerabilities (2536276)
This host is missing a critical security update according to Microsoft Bulletin MS11-043. OpenVAS Vulnerability Test $Id: secpodms11-043.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft SMB Client Remote Code Execution Vulnerabilities 2536276 Authors: Veerendra GG Updated By: Antu Sanadi on...
Nmap NSE net: broadcast-ms-sql-discover
Discovers Microsoft SQL servers in the same broadcast domain. SYNTAX: mssql.timeout: How long to wait for SQL responses. This is a number followed by 'ms' for milliseconds, 's' for seconds, 'm' for minutes, or 'h' for hours. Default: '30s'. OpenVAS Vulnerability Test $Id:...
DEBIAN-CVE-2011-1910
Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service assertion failure and daemon exit via a negative response containing large RRSIG RRsets...
CVE-2011-1910
Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service assertion failure and daemon exit via a negative response containing large RRSIG RRsets...
bind: Large RRSIG RRsets and Negative Caching can crash named
Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service assertion failure and daemon exit via a negative response containing large RRSIG RRsets...
Arachni v.0.2.3 - Open Source Web Application Security Scanner Framework
Arachni v.0.2.3 - Open Source Web Application Security Scanner Framework Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.Arachni is smart, it trains itself by learning from...
Design/Logic Flaw
The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted 1 SMBv1 or 2 SMBv2 response, aka "SMB Client Response...
USN-1108-1: DHCP vulnerability
Sebastian Krahmer discovered that the dhclient utility incorrectly filtered crafted responses. An attacker could use this flaw with a malicious DHCP server to execute arbitrary code, resulting in root privilege escalation...
DEBIAN-CVE-2010-4767
Open Ticket Request System OTRS before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an invalid charset, which allows remote attackers to cause a denial of service duplicate tickets and duplicate auto-response...
Fedora Update for perl-CGI FEDORA-2011-0640
Check for the Version of perl-CGI OpenVAS Vulnerability Test Fedora Update for perl-CGI FEDORA-2011-0640 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Design/Logic Flaw
Opera before 11.01 does not properly handle redirections and unspecified other HTTP responses, which allows remote web servers to obtain sufficient access to local files to use these files as page resources, and consequently obtain potentially sensitive information from the contents of the files,...
[SECURITY] Fedora 13 Update: perl-CGI-3.51-1.fc13
CGI.pm is a stable, complete and mature solution for processing and prepari ng HTTP requests and responses. Major features including processing form submissions, file uploads, reading and writing cookies, query string genera tion and manipulation, and processing and preparing HTTP headers. Some...
Ubuntu Update for hplip vulnerability USN-1051-1
Ubuntu Update for Linux kernel vulnerabilities USN-1051-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10511.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for hplip vulnerability USN-1051-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...
PT-2011-2559
Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01 Description The issue allows remote web servers to obtain access to local files and use them as page resources. This could lead to the disclosure of potentially sensitive information from the contents of these...
