CloudEngine 12800,CloudEngine 5800,CloudEngine 6800,CloudEngine 7800, Security Vulnerabilities

CVE-2005-0783

Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached...

CVE-2005-0784

Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control...

CVE-2005-0784

Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control...

CVE-2005-0783

Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached...

CVE-2005-0784

Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control...

Phorum < 5.0.15 Multiple XSS

The version of Phorum installed on the remote host is prone to multiple cross-site scripting vulnerabilities due to its failure to sanitize user input. An attacker can exploit these flaws to potentially cause arbitrary script and HTML code to be rendered by a user's browser in the context of the...

Multiple Microsoft Internet Explorer browser security vulnerabilities

Drag-n-Drop vulnerability, URL Decoding Zone Spoofing Vulnerability, DHTML Method Heap Memory Corruption Vulnerability, Channel Definition Format (CDF) Cross Domain Vulnerability. This vulnerability can potentially be used for silent spyware or adware...

Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection Vulnerabilities

Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection...

Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection Vulnerabilities

...

[Full-Disclosure] Secunia Research: Microsoft Internet Explorer &quot;createControlRange&#40;&#41;&quot; Memory Corruption

====================================================================== Secunia Research 09/02/2005 Microsoft Internet Explorer "createControlRange()" Memory Corruption ====================================================================== Table of Contents Affected...

[Full-Disclosure] WinHKI - CAB File Directory Transversal

Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: CAB File Directory Transversal Exploitation: Local &#40;extract file&#41; Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1) Intro...

[Full-Disclosure] WinHKI - BH File Directory Transversal

Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: BH File Directory Transversal Exploitation: Local &#40;extract file&#41; Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1) Introd...

CVE-2004-2377

Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scans, as demonstrated using a Nessus port scan of ports 1 through 1024 with safe-checks...

CVE-2004-2641

Unspecified vulnerability in Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280 allows remote attackers to cause a denial of service (system controller hang) via IP Packets With Type of Service (TOS) Bits...

[SA13143] RealVNC Multiple Connections Denial of Service Vulnerability

Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l TITLE: RealVNC Multiple Connections Denial of Service Vulnerability SECUNIA...

CVE-2004-0846

Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly...

CVE-2004-0846

Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly...

CVE-2004-0846

Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly...

[RLSA_04-2004] QNX crrtrap possible race condition vulnerability

*** rfdslabs security advisory *** Title: QNX crrtrap possible race condition vulnerability [RLSA_04-2004] Versions: QNX RTP 6.1 (possibly others) Vendor: http://www.qnx.com Date: Sep 13 2004 Author: Julio Cesar Fort &lt;julio at rfdslabs com br&gt; Introduction crrtrap is a tool to detect video...

Multipel QNX utilities bugs

Buffer overflow in Photon, format string in FTP client, race conditions in...

CVE-2002-1272

Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative...

CVE-2002-1272

Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative...

Solaris 2.5.1 (x86) : 104655-05

SunOS 5.5.1_x86: automount/automountd patch. Date this patch was last updated by Sun :...

Alcatel Omniswitch 7000 ВщЫ

No description...

Alcatel Omniswitch 7000 series

Running Nessus 2.0.9 against Alcatel 7000 series causing a swith to reboot via buffer overflow(?). Alcatel has multiple services running on the background, with no option to shut them down. Vulnerable ports: 80, 260, 261, 443. Disabling a service via qos policy (suggested by Alcatel) does just...

PSOProxy buffer overflow

Buffer overflow on oversized GET...

[NEWS] PSOProxy Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source....

CVE-2003-1375

Buffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall with a large file as an...

I2S-LAB-10-15-03.Shell32-Do.txt

...

HMAP Web Server Fingerprinting

Nessus was able to identify the remote web server type by sending several valid and invalid HTTP requests. In some cases, its version can also be approximated, as well as some...

Gopherd 3.0.5 - FTP Gateway Remote Overflow

Gopherd 3.0.5 - FTP Gateway Remote...

Gopherd <= 3.0.5 FTP Gateway Remote Overflow Exploit

Exploit for linux platform in category remote...

Gopherd &lt;= 3.0.5 FTP Gateway Remote Overflow Exploit

No description provided by...

Gopherd 3.0.5 - FTP Gateway Remote Overflow

...

[SECURITY] [DSA-368-1] New xpcd packages fix buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Debian Security Advisory DSA 368-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 8th, 2003 http://www.debian.org/security/faq Package : xpcd...

[SECURITY] [DSA-368-1] New xpcd packages fix buffer overflow

Debian Security Advisory DSA 368-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 8th, 2003 http://www.debian.org/security/faq Package : xpcd Vulnerability : buffer overflow Problem-Type :...

UMN gopherd[2.x.x/3.x.x]: ftp gateway, and GSisText&#40;&#41; buffer overflow exploits.

bordom/fun audit time... been awhile since i did an audit of UMN(University of Minnesota) gopherd+ daemon. figured i would check out the newer v3.0.x series, which has cleaned up the past security issues... while the old issues are resolved, still a few leftovers. two exploits follow... original...

University of Minnesota Gopherd 2.0.x2.33.0.x - FTP Gateway Buffer Overflow

University of Minnesota Gopherd 2.0.x2.33.0.x - FTP Gateway Buffer...

University of Minnesota Gopherd 2.0.x/2.3/3.0.x - FTP Gateway Buffer Overflow

...

LBreakout2 2.x - Login Remote Format String

...

LBreakout2 2.x - Login Remote Format String

LBreakout2 2.x - Login Remote Format...

HPUX 10.2011 Wall Message - Local Buffer Overflow

HPUX 10.2011 Wall Message - Local Buffer...

HPUX 10.20/11 Wall Message - Local Buffer Overflow

...

5861 IP Filtering issues

Product: Efficient Networks 5861 DSL Router http://www.efficient.com/ebz/5800.html Tested version: 5.3.80 (Latest firmware) Advisory date: 10/01/2003 Severity: Moderate Details When using the built in IP filtering to block incoming TCP SYN flags, a...

[VulnWatch] Efficient Networks 5861 DSL Router

Product: Efficient Networks 5861 DSL Router http://www.efficient.com/ebz/5800.html Tested version: 5.3.80 (Latest firmware) Advisory date: 10/01/2003 Severity: Moderate Background "Efficient Networks® Business Class IDSL, ADSL, or SDSL Routers...

CVE-2002-1272

Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative...

Alcatel OmniSwitch 7700/7800 Switches Backdoor Access (deprecated)

This plugin has been deprecated due to excessive false positives since it flags any telnet banner discovered on TCP...

CERT Advisory CA-2002-32 Backdoor in Alcatel OmniSwitch AOS

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-32 Backdoor in Alcatel OmniSwitch AOS Original release date: November 21, 2002 Last revised: -- Source: CERT/CC, Alcatel A complete revision history can be found at the end of this file. Systems Affected * Alcatel OmniSwitch ...

Alcatel OmniSwitch backdoor unauthorized access

TCP/6778 port allows full device...

Alcatel Operating System (AOS) does not require a password for accessing the telnet server

Overview The OmniSwitch 7700/7800 running Alcatel Operating System (AOS) version 5.1.1 has TCP port 6778 listening as a telnet server. This gives anyone access to the OmniSwitch's Vx-Works operating system without requiring a password. Description During an NMAP audit of the AOS 5.1.1 code that...