Researchers Say POODLE Attack Affects Some TLS Implementations

The POODLE attack against SSLv3 that researchers from Google revealed earlier this year also affects some implementations of TLS and vendors now are scrambling to release patches for gear affected by the vulnerability. Soon after the POODLE attack was disclosed in October, researchers began looki...

POODLE SSL Vulnerability Now Attacking TLS Security Protocol

POODLE, a critical SSL flaw discovered in October that was patched and fixed by webmasters around the world after Google alerted software and hardware vendors, has again made its way and this time the vulnerability affects implementations of the newer Transport Layer Security TLS protocol. Yes, t...

A10 Networks ACOS 2.7.0-P2(build: 53) - Buffer Overflow

No description provided by source...

A10 Networks Loadbalancer - Directory Traversal

No description provided by source. ----------- Author: ----------- xistence xistenceat0x90.nl ------------------------- Affected products: ------------------------- A10 Networks Loadbalancer SoftAX =2.6.1-GR1-P5 & =2.7.0 build 217 ------------------------- Affected vendors:...

CVE-2014-3976

Buffer overflow in A10 Networks Advanced Core Operating System ACOS before 2.7.0-p6 and 2.7.1 before 2.7.1-P155 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long session id in the URI to sysreboot.html. NOTE: some of these details are obtain...

Buffer overflow

Buffer overflow in A10 Networks Advanced Core Operating System ACOS before 2.7.0-p6 and 2.7.1 before 2.7.1-P155 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long session id in the URI to sysreboot.html. NOTE: some of these details are obtain...

CVE-2014-3976

Buffer overflow in A10 Networks Advanced Core Operating System ACOS before 2.7.0-p6 and 2.7.1 before 2.7.1-P155 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long session id in the URI to sysreboot.html. NOTE: some of these details are obtain...

CVE-2014-3976

Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) prior to 2.7.0-p6 and 2.7.1 prior to 2.7.1-P1_55 allows remote attackers to crash the system and possibly execute arbitrary code via a long session id in the URI to sys_reboot.html. Affected product: A10 ACOS. Impact per source...

A10 Networks Remote Buffer Overflow

According to the self reported version of the remote A10 appliance, it is affected by a remote buffer overflow vulnerability. By sending a specially crafted HTTP request, it may be possible to execute arbitrary code or trigger a denial service condition. C Tenable Network Security, Inc...

A10 Networks ACOS HTTP请求URI处理远程缓冲区溢出漏洞

Bugtraq ID:66588 A10 Networks ACOS是一个A10网络设备的高级核心操作系统ACOS。 A10 Networks ACOS处理HTTP请求中的URI存在错误，允许攻击者利用漏洞发送超长URI的HTTP请求触发缓冲区溢出，可使应用程序崩溃或可执行任意代码。 0 A10 Networks ACOS 2.7.0-P2build: 53 A10 Networks ACOS 2.7.1-P155或2.8.0已经修复该漏洞，建议用户下载更新： http://www.a10networks.com/products/axseries-acos-architecture.p...

Halon Security Router (SR) 3.2-winter-r1 - Multiple Vulnerabilities

Halon Security Router SR 3.2-winter-r1 - Multiple Vulnerabilities ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia...

A10 Networks ACOS 2.7.0-P2 (Build 53) - Buffer Overflow (PoC)

A10 Networks ACOS 2.7.0-P2 Build 53 - Buffer Overflow PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === Details === Advisory: http://www.quantumleap.it/a10-networks-remote-buffer-overflow-softax/ Affected Product: ACOS Version: 2.7.0-P2build: 53 older versions may be affected too Tested on...

A10 Networks ACOS 2.7.0-P2(build: 53) - Buffer Overflow

Exploit for hardware platform in category dos / poc === Details === Advisory: http://www.quantumleap.it/a10-networks-remote-buffer-overflow-softax/ Affected Product: ACOS Version: 2.7.0-P2build: 53 older versions may be affected too Tested on SoftAX2 === Executive Summary === Using a specially...

A10 Networks ACOS 2.7.0-P2 (Build 53) - Buffer Overflow (PoC)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === Details === Advisory: http://www.quantumleap.it/a10-networks-remote-buffer-overflow-softax/ Affected Product: ACOS Version: 2.7.0-P2build: 53 older versions may be affected too Tested on SoftAX2 === Executive Summary === Using a specially crafted...

A10 Networks Advanced Core OS Device Detection

Binary data a10acosdetect.nbin...

A10 Networks ACOS 2.7.0-P2 Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === Details === Advisory: http://www.quantumleap.it/a10-networks-remote-buffer-overflow-softax/ Affected Product: ACOS Version: 2.7.0-P2build: 53 older versions may be affected too Tested on SoftAX2 === Executive Summary === Using a specially crafted...

A10 Networks Loadbalancer - Directory Traversal

A10 Networks Loadbalancer versions SoftAX 2.6.1-GR1-P5 and below and 2.7.0 build 217 and below suffer from a directory traversal vulnerability. ----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- A10 Networks Loadbalancer SoftAX...

A10 Networks Loadbalancer - Directory Traversal

----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- A10 Networks Loadbalancer SoftAX /xml/downloads/?filename=/a10data/tmp/. By sending a GET request to "https:///xml/downloads/?filename=/a10data/tmp/../.." and thus keeping /a10data/tmp,...

A10 Networks Loadbalancer - Directory Traversal

A10 Networks Loadbalancer - Directory Traversal ----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- A10 Networks Loadbalancer SoftAX /xml/downloads/?filename=/a10data/tmp/. By sending a GET request to...

A10 Networks AX Loadbalancer Directory Traversal

This module exploits a directory traversal flaw found in A10 Networks Soft AX Loadbalancer version 2.6.1-GR1-P5/2.7.0 or less. When handling a file download request, the xml/downloads class fails to properly check the 'filename' parameter, which can be abused to read any file outside the virtual...