Code injection

2008-02-2223:44:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.5%

JSON

The Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores the number of remaining allowed login attempts in a cookie, which makes it easier for remote attackers to conduct brute force attacks by manipulating this cookie’s value.

CPENameOperatorVersion
ipdivale2.2.8
ipdivale2.3.2

CPE	Name	Operator	Version
	ipdiva	le	2.2.8
	ipdiva	le	2.3.2

References

lists.grok.org.uk/pipermail/full-disclosure/2008-February/060314.html

secunia.com/advisories/28963

securityreason.com/securityalert/3692

www.securityfocus.com/archive/1/488133/100/100/threaded

www.securityfocus.com/bid/27800