"Wrapped" javascript: urls bypass security checks — Mozilla

Some security checks intended to prevent script injection were incorrect and could be bypassed by wrapping a javascript: url in the view-source: pseudo-protocol. Michael Krax demonstrated that a variant of his favicon exploit could still execute arbitrary code, and the same technique could also b...

CVE-2005-1158

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the search target of the Firefox sidebar...

CVE-2005-1158

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the search target of the Firefox sidebar...

CVE-2005-1158

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the search target of the Firefox sidebar...

CVE-2005-1158

CVE-2005-1158 affects Mozilla Firefox prior to 1.0.3. The issue arises from missing security checks that allow an attacker to inject arbitrary JavaScript into privileged pages by abusing the sidebar’s _search target. This could enable code execution within the context of the affected site, as des...

Arbitrary code execution from Firefox sidebar panel II — Mozilla

Sites can use the search target to open links in the Firefox sidebar. Two missing security checks allow malicious scripts to first open a privileged page such as about:config and then inject script using a javascript: url. This could be used to install malicious code or steal data without user...

firefox -- arbitrary code execution in sidebar panel

A Mozilla Foundation Security Advisory reports: Sites can use the search target to open links in the Firefox sidebar. Two missing security checks allow malicious scripts to first open a privileged page such as about:config and then inject script using a javascript: url. This could be used to...

Multiple Vendor ICMP Message Handling - Denial of Service

source: https://www.securityfocus.com/bid/13124/info Multiple vendor implementations of TCP/IP Internet Control Message Protocol ICMP are reported prone to several denial-of-service attacks. ICMP is employed by network nodes to determine certain automatic actions to take based on network failures...

HP-UX Security patch : PHSS_27783

The remote host is missing HP-UX Security Patch number PHSS27783 . SSRT2332 rev.10 Apache Server Chunk Encoding %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17485;...

HP-UX Security patch : PHKL_17012

The remote host is missing HP-UX Security Patch number PHKL17012 . Security Vulnerability with rpc.pcnfsd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17396; scriptversion"1.6";...

HP-UX Security patch : PHSS_26918

The remote host is missing HP-UX Security Patch number PHSS26918 . Sec. Vulnerability in SNMP rev. 16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17469; scriptversion"1.6";...

HP-UX Security patch : PHSS_24842

The remote host is missing HP-UX Security Patch number PHSS24842 . Sec. Vulnerability in OV NNM %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17464; scriptversion"1.6";...

SUSE-SA:2005:012: imap

The remote host is missing the patch for the advisory SUSE-SA:2005:012 imap. The University of Washington imap daemon can be used to access mails remotely using the IMAP protocol. This update fixes a logical error in the challenge response authentication mechanism CRAM-MD5 used by UW IMAP. Due to...

HP-UX Security patch : PHCO_28717

The remote host is missing HP-UX Security Patch number PHCO28717 . SSRT3483 Potential Security Vulnerability in wall1M command rev.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...

HP-UX PHCO_21567 : HPSBUX0005-113 Sec. Vulnerability with shutdown command (rev.1)

s700800 11.04 VVOS patch for shutdown1M : shutdown1M improperly handles input variables. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO21567. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHNE_16295 : s700_800 11.00 vacation patch.

s700800 11.00 vacation patch. : The vacation program erroneously passes parameters to sendmail. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE16295. The text itself is copyright C Hewlett-Packard...

HP-UX Security patch : PHSS_28173

The remote host is missing HP-UX Security Patch number PHSS28173 . Potential Sec. Vulnerability in rpc.ttdbserver %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17091;...

HP-UX Security patch : PHSS_28468

The remote host is missing HP-UX Security Patch number PHSS28468 . SSRT2429 Potential Security Vulnerability in xfs %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17038;...

HP-UX PHCO_24446 : HPSBUX0212-227 Sec. Vulnerability in ied(1)

s700800 11.00 ied1 patch : the ied1 command reveals data improperly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO24446. The text itself is copyright C Hewlett-Packard Development Company, L.P...

HP-UX Security patch : PHNE_24510

The remote host is missing HP-UX Security Patch number PHNE24510 . SSRT2370 Sec. Vulnerability with ntpd on HP-UX rev.01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16915;...