Mozilla Foundation Security Advisory 2008-61

Mozilla Foundation Security Advisory 2008-61 Title: Information stealing via loadBindingDocument Impact: Moderate Announced: December 16, 2008 Reporter: Boris Zbarsky Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.19 Thunderbird 2.0.0.19 SeaMonkey 1.1.14 Description Mozilla...

CVE-2008-5414

Unspecified vulnerability in the Feature Pack for Web Services in the Web Services Security component in IBM WebSphere Application Server WAS 7 before 7.0.0.1 has unknown impact and attack vectors related to "userNameToken."...

Security feature bypass

Unspecified vulnerability in the Feature Pack for Web Services in the Web Services Security component in IBM WebSphere Application Server WAS 7 before 7.0.0.1 has unknown impact and attack vectors related to "userNameToken."...

CVE-2008-5414

IBM WebSphere Application Server 7.0 before Fix Pack 1 (i.e., before 7.0.0.1) is affected by a vulnerability in the Feature Pack for Web Services Web Services Security component related to the userNameToken, potentially enabling information disclosure. Connective sources (NVD/NVD-derived content ...

IBM WebSphere Application Server < 6.0.2.31 Multiple Vulnerabilities

Binary data 4725.prm...

IBM WebSphere Application Server < 6.0.2.31 Multiple Vulnerabilities

IBM WebSphere Application Server 6.0.2 before Fix Pack 31 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - By sending a specially crafted HTTP request with the 'Host' header field set to more than 256 bytes, it may be possible to crash t...

Critical: Red Hat Security Advisory: java-1.6.0-ibm security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The IBM 1.6.0 Java release...

Security feature bypass

The Web Services Security component in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when Certificate Store Collections is configured to use Certificate Revocation Lists CRL, does not call the setRevocationEnabled method on the PKIXBuilderParameters object,...

Openwsman HTTP Basic Authentication buffer overflow

Added: 10/17/2008 CVE: CVE-2008-2234 BID: 30694 OSVDB: 47534 Background Openwsman is an open-source implementation of the Web Services Management specification. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted HTTP Basic...

Openwsman HTTP Basic Authentication buffer overflow

Added: 10/17/2008 CVE: CVE-2008-2234 BID: 30694 OSVDB: 47534 Background Openwsman is an open-source implementation of the Web Services Management specification. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted HTTP Basic...

Cisco IOS AIC HTTP传送报文远程拒绝服务漏洞

BUGTRAQ ID: 31354 CVE ID: CVE-2008-3812 CNCVE ID：CNCVE-20083812 防火墙是针对组织中网络资产进行访问控制的网络设备，防火墙一般放置在网络入口处，Cisco IOS软件提供一系列安全功能可提供用户配置简单或详细的防火墙策略。 HTTP默认使用80端口对Internet WEB服务进行传送，其由于在网络上的通用性，很少针对其合法性和标准一致性进行挑战，由于80通信一般在网络上都允许而不存在挑战，因此很多应用程序开发者借助HTTP通信作为替代的传送协议允许它们的应用程序通信通过或甚至绕过防火墙设置。当Cisco...

Critical: Red Hat Security Advisory: java-1.6.0-sun security update

Updated java-1.6.0-sun packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Java Runtime Environment JRE contains the...

OpenJDK JAX-WS unauthorized URL access (6542088)

Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment JRE in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or cause a denial of service via unknown vectors involving "processing of XML data" by a trusted application...

CVE-2008-2824

Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via unknown vectors...

CVE-2008-2824

CVE-2008-2824 affects Xerox WorkCentre 7655/7665/7675 via the Extensible Interface Platform (EIP) Web Services. A remote attacker can request configuration changes through an unspecified vector. The NVD entry lists a CVSS v2 base score of 10.0 (HIGH) with network access, no authentication, and im...

CVE-2008-2824

Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via unknown vectors...

WS-Management Server Detection

The remote web server supports the Web Services for Management WS-Management specification, a general web services protocol based on SOAP for managing systems, applications, and other such entities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33139;...

IBM WebSphere Application Server < 6.1.0.17 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 17 appears to be running on the remote host. As such, it is reportedly affected by multiple flaws : - An attribute in a SOAP security header may cause a security exposure in Web Services applications. PK61315 - An unspecified vulnerability in t...

CVE-2008-2550

IBM WebSphere Application Server 6.1 prior to 6.1.0.17 is affected by a vulnerability in the Web Services Security SOAP header attribute, with unspecified impact and attack vectors. The issue is associated with CVE-2008-2550. Public references note the vulnerability exists in WAS 6.1 before Fix P...