Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object. NOTE: this description was based on a report that has since been retracted by the original authors. The authors misinterpreted their test results. Other third parties also disputed the original report. Therefore, this is not a vulnerability. It is being assigned a candidate number to provide a clear indication of its status

s700_800 11.04 Virtualvault 4.7 (Apache 1.x) OWS update : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - Two potential security vulnerabilities have been     reported in HP-UX VirtualVault Apache HTTP server     versions prior to Apache 1.3.37 that may allow a Denial     of Service (DoS) attack and execution of arbitrary code.
    (HPSBUX02164 SSRT061265)

  - A security vulnerability has been identified in OpenSSL     used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy     that may allow remote unauthorized access. (HPSBUX02165     SSRT061266)

s700_800 11.04 Virtualvault 4.6 OWS update : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - Two potential security vulnerabilities have been     reported in HP-UX VirtualVault Apache HTTP server     versions prior to Apache 1.3.37 that may allow a Denial     of Service (DoS) attack and execution of arbitrary code.
    (HPSBUX02164 SSRT061265)

  - A security vulnerability has been identified in OpenSSL     used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy     that may allow remote unauthorized access. (HPSBUX02165     SSRT061266)

s700_800 11.04 Virtualvault 4.5 OWS update : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - Two potential security vulnerabilities have been     reported in HP-UX VirtualVault Apache HTTP server     versions prior to Apache 1.3.37 that may allow a Denial     of Service (DoS) attack and execution of arbitrary code.
    (HPSBUX02164 SSRT061265)

  - A security vulnerability has been identified in OpenSSL     used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy     that may allow remote unauthorized access. (HPSBUX02165     SSRT061266)

s700_800 11.04 Virtualvault 4.7 IWS update : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - Two potential security vulnerabilities have been     reported in HP-UX VirtualVault Apache HTTP server     versions prior to Apache 1.3.37 that may allow a Denial     of Service (DoS) attack and execution of arbitrary code.
    (HPSBUX02164 SSRT061265)

  - A security vulnerability has been identified in OpenSSL     used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy     that may allow remote unauthorized access. (HPSBUX02165     SSRT061266)

s700_800 11.04 Virtualvault 4.6 IWS update : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - Two potential security vulnerabilities have been     reported in HP-UX VirtualVault Apache HTTP server     versions prior to Apache 1.3.37 that may allow a Denial     of Service (DoS) attack and execution of arbitrary code.
    (HPSBUX02164 SSRT061265)

  - A security vulnerability has been identified in OpenSSL     used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy     that may allow remote unauthorized access. (HPSBUX02165     SSRT061266)

s700_800 11.04 Virtualvault 4.5 IWS Update : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A security vulnerability has been identified in OpenSSL     used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy     that may allow remote unauthorized access. (HPSBUX02165     SSRT061266)

  - Two potential security vulnerabilities have been     reported in HP-UX VirtualVault Apache HTTP server     versions prior to Apache 1.3.37 that may allow a Denial     of Service (DoS) attack and execution of arbitrary code.
    (HPSBUX02164 SSRT061265)

s700_800 11.04 Webproxy 2.1 (Apache 1.x) update : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A security vulnerability has been identified in OpenSSL     used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy     that may allow remote unauthorized access. (HPSBUX02165     SSRT061266)

  - Two potential security vulnerabilities have been     reported in HP-UX VirtualVault Apache HTTP server     versions prior to Apache 1.3.37 that may allow a Denial     of Service (DoS) attack and execution of arbitrary code.
    (HPSBUX02164 SSRT061265)

s700_800 11.04 Webproxy server 2.0 update : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - Two potential security vulnerabilities have been     reported in HP-UX VirtualVault Apache HTTP server     versions prior to Apache 1.3.37 that may allow a Denial     of Service (DoS) attack and execution of arbitrary code.
    (HPSBUX02164 SSRT061265)

  - A security vulnerability has been identified in OpenSSL     used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy     that may allow remote unauthorized access. (HPSBUX02165     SSRT061266)

ID	Name	Product	Family	Severity
23721	HP-UX PHSS_35463 : s700_800 11.04 Virtualvault 4.7 (Apache 1.x) OWS update	Nessus	HP-UX Local Security Checks	high
23720	HP-UX PHSS_35462 : s700_800 11.04 Virtualvault 4.6 OWS update	Nessus	HP-UX Local Security Checks	high
23719	HP-UX PHSS_35461 : s700_800 11.04 Virtualvault 4.5 OWS update	Nessus	HP-UX Local Security Checks	high
23718	HP-UX PHSS_35460 : s700_800 11.04 Virtualvault 4.7 IWS update	Nessus	HP-UX Local Security Checks	high
23717	HP-UX PHSS_35459 : s700_800 11.04 Virtualvault 4.6 IWS update	Nessus	HP-UX Local Security Checks	high
23716	HP-UX PHSS_35458 : s700_800 11.04 Virtualvault 4.5 IWS Update	Nessus	HP-UX Local Security Checks	high
23713	HP-UX PHSS_35111 : s700_800 11.04 Webproxy 2.1 (Apache 1.x) update	Nessus	HP-UX Local Security Checks	high
23712	HP-UX PHSS_35110 : s700_800 11.04 Webproxy server 2.0 update	Nessus	HP-UX Local Security Checks	high

Detections

Analytics

CVE-2006-3352

medium

Tenable Plugins

high

high

high

high

high

high

high

high