Ubuntu 9.10 : xmlrpc-c vulnerabilities (USN-890-5)

USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for XML-RPC for C and C++. Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked against Expat were tricked into opening ...

Changing system locale means users with non-ASCII characters in their passwords cannot authenticate

The OSUser and Atlassian-User authenticators used by Confluence convert a password into bytes before hashing it. This conversion doesn't specify which encoding should be used, so the system's default encoding is used. If the system administrator changes the locale settings on the server or change...

Changing system locale means users with non-ASCII characters in their passwords cannot authenticate

The OSUser and Atlassian-User authenticators used by Confluence convert a password into bytes before hashing it. This conversion doesn't specify which encoding should be used, so the system's default encoding is used. If the system administrator changes the locale settings on the server or change...

Changing system locale means users with non-ASCII characters in their passwords cannot authenticate

The OSUser and Atlassian-User authenticators used by Confluence convert a password into bytes before hashing it. This conversion doesn't specify which encoding should be used, so the system's default encoding is used. If the system administrator changes the locale settings on the server or change...

Ubuntu Update for python2.4 vulnerabilities USN-890-3

Ubuntu Update for Linux kernel vulnerabilities USN-890-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN8903.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for python2.4 vulnerabilities USN-890-3 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu Update for python2.5 vulnerabilities USN-890-2

Ubuntu Update for Linux kernel vulnerabilities USN-890-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN8902.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for python2.5 vulnerabilities USN-890-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Mandriva Update for php MDVSA-2010:009 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:009 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Linux Security Advisory : php (MDVSA-2010:008)

Multiple vulnerabilities has been found and corrected in php : The zendrestoreinientrycb function in zendini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information memory contents and cause a PHP crash by using the iniset function to declare...

RedHat Update for PyXML RHSA-2010:0002-01

Check for the Version of PyXML OpenVAS Vulnerability Test RedHat Update for PyXML RHSA-2010:0002-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

[SECURITY] [DSA-1953-2] New expat packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1953-2 [email protected] http://www.debian.org/security/ Stefan Fritsch December 31, 2009 http://www.debian.org/security/faq -...

CVE-2009-4142

The htmlspecialchars function in PHP before 5.2.12 does not properly handle 1 overlong UTF-8 sequences, 2 invalid ShiftJIS sequences, and 3 invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting XSS attacks by placing a crafted byte sequence before a special...

Tomcat 6.0.16 UTF-8 目录穿越漏洞

No description provided by source...

[SECURITY] [DSA-1953-1] New expat packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1953-1 [email protected] http://www.debian.org/security/ Stefan Fritsch December 15, 2009 http://www.debian.org/security/faq -...

Mozilla Firefox UTF-8 URL Handling Stack Buffer Overflow - Improved Performance (CVE-2008-0016)

Firefox is an open source web browser developed by Mozilla Foundation. The application is capable of interpreting and rendering many types of Internet content, including various versions of HTML, XML, CSS Cascade Style Sheet, JavaScript, various graphic formats, and so on. Firefox is made availab...

CVE-2009-4250

CVE-2009-4250 affects CuteNews/CuteNews UTF-8 workflows (CuteNews 1.4.6 and UTF-8 CuteNews before 8b). It describes multiple cross-site scripting (XSS) vulnerabilities allowing injection of arbitrary script/HTML via: register.php (result), search.php (user), editnews/index.php (cat_msg, source_ms...

RedHat Security Advisory RHSA-2009:1625

The remote host is missing updates announced in advisory RHSA-2009:1625. Expat is a C library written by James Clark for parsing XML documents. Two buffer over-read flaws were found in the way Expat handled malformed UTF-8 sequences when processing XML files. A specially-crafted XML file could...

Fedora Core 12 FEDORA-2009-12737 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-12737. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-12716 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-12716. OpenVAS Vulnerability Test $Id: fcore200912716.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12716 expat Authors: Thomas Reinke Copyright: Copyright c 2009...

CVE-2009-4250

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject arbitrary web script or HTML via 1 the result parameter to register.php; 2 the user parameter to search.php; the 3 catmsg, 4 sourcemsg, 5 postponedselected, 6...

Fedora Core 11 FEDORA-2009-12716 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-12716. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...