CVE-2010-3398

CVE-2010-3398 affects IBM Lotus Sametime Connect 8.5.1 before CF1, via an unspecified vulnerability in the webcontainer implementation (SPR LXUU87S57H and LXUU87S93W). The connected documents do not disclose impact, attack vectors, exploitation details, or a remediation. Information aligns on the...

CVE-2010-0386

The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing XST attack, a related issue to CVE-2004-2763 and CVE-2005-3398...

Design/Logic Flaw

The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing XST attack, a related issue to CVE-2004-2763 and CVE-2005-3398...

CVE-2008-7253

The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing XST attack, a related issue to CVE-2004-2763 and...

Design/Logic Flaw

The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing XST attack, a related issue to CVE-2004-2763 and...

CVE-2008-7253

The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing XST attack, a related issue to CVE-2004-2763 and...

Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116808-02

Check for the Version of /usr/sadm/lib/smc/lib/preload/jsdk21.jar OpenVAS Vulnerability Test Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116808-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

CVE-2008-3398

CVE-2008-3398 refers to multiple XSS flaws in XRMS CRM 1.99.2. The affected component is XRMS CRM, with the vulnerability allowing remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components (potentially including login.php). The root cause is insuffici...

CVE-2007-3398

CVE-2007-3398 affects LiteWEB 2.7. The issue allows a remote attacker to cause a denial of service (hang) by issuing a large number of requests for pages that do not exist. The connected documents do not provide explicit exploit details, impact beyond the hang, or remediation/patch information. N...

CVE-2007-3008

Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing XST attacks, a related issue to CVE-2004-2320 and CVE-2005-3398...

CVE-2006-3398

The "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden form fields, which allows remote attackers to obtain sensitive information from the 1 Category Editor and 2 User Information editor...

CVE-2006-3398

The CVE-2006-3398 entry involves Taskjitsu prior to 2.0.1, where password hashes are embedded in hidden fields of the change password forms. This allows remote attackers to obtain sensitive information from the Category Editor and the User Information editor. The issue is tied to versions before ...

CVE-2005-3398

CVE-2005-3398 relates to the Solaris Management Console web server in Solaris 8/9/10 where the HTTP TRACE method is enabled by default. The effect is potential cross-site tracing information leakage (e.g., cookies or headers) through TRACE requests. Connected docs confirm the TRACE issue as a rec...

Solaris 9 (x86) : 116808-02

SunOS 5.9x86: /usr/sadm/lib/smc/lib/preload/jsdk21.jar patch. Date this patch was last updated by Sun : Sep/15/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 116807-02

SunOS 5.9: /usr/sadm/lib/smc/lib/preload/jsdk21.jar patch. Date this patch was last updated by Sun : Sep/15/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...