Fedora 19 : php-5.5.3-1.fc19 (2013-14998)

Version 5.5.3, 22 Aug 2013 Openssl: + Fixed UMR in fix for CVE-2013-4248. Version 5.5.2, 15-Aug-2013 Core : - Fixed bug 65372 Segfault in gczvalpossibleroot when return reference fails. - Fixed value of FILTERSANITIZEFULLSPECIALCHARS constant previously was erroneously set to...

Session fixation

Puppet Enterprise before 3.0.1 does not sufficiently invalidate a session when a user logs out, which might allow remote attackers to hijack sessions by obtaining an old session ID...

Session fixation

Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

PHP < 5.5.2 Session Fixation Vulnerability (Aug 2013)

PHP is prone to a session fixation vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

CVE-2011-4718

Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID...

Session fixation

Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID...

CVE-2011-4718

Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID...

CVE-2011-4718

Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID...

CVE-2011-4718

Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID...

CVE-2011-4718

CVE-2011-4718 refers to a session fixation vulnerability in PHP’s Sessions subsystem, affecting PHP versions prior to 5.5.2. An attacker can hijack a user’s web session by specifying a session ID, potentially impacting confidentiality and integrity of sessions. Public details explicitly state the...

CVE-2011-4718: Undefined Security Weakness

Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID...

PT-2013-1331

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.2 Description The issue is related to a session fixation vulnerability in the Sessions subsystem, allowing remote attackers to hijack web sessions by specifying a session ID. This is also associated with errors in...

remote-naming: Session fixation due improper connection caching

Red Hat JBoss Enterprise Application Platform EAP 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client...

ejb-client: Session fixation due improper connection caching

Red Hat JBoss Enterprise Application Platform EAP 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client...

Один сервер, Tor и Bitcoin

Всем доброго времени суток. В последнее время достаточно много новостей о Tor и Bitcoin, обе системы в достаточной мере направлены на безопасность и анонимность, однако их преимущества могут одновременно стать и недостатками. Структура Tor не позволяет определять местоположение клиента и сервера,...

Debian DSA-2725-1 : tomcat6 - several vulnerabilities

Two security issues have been found in the Tomcat servlet and JSP engine : - CVE-2012-3544 The input filter for chunked transfer encodings could trigger high resource consumption through malformed CRLF sequences, resulting in denial of service. - CVE-2013-2067 The FormAuthenticator module was...

[SECURITY] [DSA 2725-1] tomcat6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2725-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 18, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2725-1 (tomcat6 - several vulnerabilities)

Two security issues have been found in the Tomcat servlet and JSP engine: CVE-2012-3544 The input filter for chunked transfer encodings could trigger high resource consumption through malformed CRLF sequences, resulting in denial of service. CVE-2013-2067 The FormAuthenticator module was vulnerab...

DSA-2725-1 tomcat6 - several

Bulletin has no description...

Oracle Linux 6 : tomcat6 (ELSA-2013-0964)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0964 advisory. - Related: CVE-2013-2067 Session fixation Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...