CVE-2007-0383

WDaemon 9.5.4 allows remote attackers to access the /WorldClient.dll URI on TCP port 3000, which has unknown impact. NOTE: The researcher reports that the vendor response was "this is not a security bug...

CVE-2007-0383

CVE-2007-0383 concerns WDaemon 9.5.4, where remote attackers can access the "/WorldClient.dll" URI on TCP port 3000. The impact is described as unknown in the sources, with the vendor reportedly stating this is not a security bug. The connected documents provide concrete details about the affecte...

PT-2007-1854 · Alt N · Wdaemon +1

Name of the Vulnerable Software and Affected Versions: WDaemon version 9.5.4 Description: The issue allows remote attackers to access the "/WorldClient.dll" URI on TCP port 3000, which has unknown impact. The vendor has responded by stating that this is not considered a security bug...

CVE-2007-0383: Undefined Security Weakness

WDaemon 9.5.4 allows remote attackers to access the /WorldClient.dll URI on TCP port 3000, which has unknown impact. NOTE: The researcher reports that the vendor response was "this is not a security bug...

Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit

No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...

Cisco VPN 3000 Concentrator 4.1.74.7.2 - FTP Remote File System Access

Cisco VPN 3000 Concentrator 4.1.74.7.2 - FTP Remote File System Access / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation...

Cisco VPN 3000 Concentrator 4.1.7/4.7.2 - 'FTP' Remote File System Access

/ Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An unauthenticated user can use the following...

Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit

Exploit for hardware platform in category remote exploits ================================================================ Cisco VPN 3000 Concentrator = 4.1.7, 4.7.2 FTP Remote Exploit ================================================================ / Cisco VPN Concentrator 3000 FTP remote exploi...

CVE-2006-4313

Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.17L, and 4.7.x up to 4.72F allow attackers to execute the 1 CWD, 2 MKD, 3 CDUP, 4 RNFR, 5 SIZE, and 6 RMD FTP commands to modify files or create and delete directories via unknown vectors...

CVE-2006-4313

Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.17L, and 4.7.x up to 4.72F allow attackers to execute the 1 CWD, 2 MKD, 3 CDUP, 4 RNFR, 5 SIZE, and 6 RMD FTP commands to modify files or create and delete directories via unknown vectors...

CVE-2006-4313: Undefined Security Weakness

Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.17L, and 4.7.x up to 4.72F allow attackers to execute the 1 CWD, 2 MKD, 3 CDUP, 4 RNFR, 5 SIZE, and 6 RMD FTP commands to modify files or create and delete directories via unknown vectors...

CVE-2006-3906

Internet Key Exchange IKE version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service resource exhaustion via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that...

CVE-2006-3906

Internet Key Exchange IKE version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service resource exhaustion via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that...

CVE-2006-3906

CVE-2006-3906 describes a DoS in the IKEv1 implementation on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls. The root cause is improper handling of large volumes of IKE Phase-1 requests, leading to resource exhaustion and degraded availability. Exploitation is possible without valid credent...

RE: [Full-disclosure] Cisco VPN Concentrator IKE resource exhaustionDoS Advisory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello: This is a Cisco PSIRT response to an advisory published by an unaffiliated third party, Roy Hills, of NTA Monitor Ltd posted as of July 26, 2006 at http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html, and entitled: Cisco VPN...

CVE-2006-3906: Undefined Security Weakness

Internet Key Exchange IKE version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service resource exhaustion via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that...

CVE-2006-3073

Multiple cross-site scripting XSS vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances ASA, when in WebVPN clientless mode, allow remote attackers to inject arbitrary web script or HTML via the domain parameter in ...

CVE-2006-3073

CVE-2006-3073 describes multiple XSS vulnerabilities in Cisco WebVPN for VPN 3000 Series Concentrators and ASA 5500 Series in WebVPN clientless mode. The flaw allows remote attackers to inject arbitrary web script or HTML via the domain parameter in dnserror.html and connecterror.html (bug IDs CS...

CVE-2006-3073: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances ASA, when in WebVPN clientless mode, allow remote attackers to inject arbitrary web script or HTML via the domain parameter in ...

CVE-2006-3000

CVE-2006-3000 affects OkScripts OkArticles 1.0. The vulnerability is in search.php where the q parameter enables cross-site scripting (XSS), allowing remote attackers to inject arbitrary web script or HTML that could execute in a victim’s browser. The NVD notes a MEDIUM base score (4.3) with limi...