Alcatel-Lucent OmniSwitch - Cross-Site Request Forgery

Alcatel-Lucent OmniSwitch - Cross-Site Request Forgery Advisory: Alcatel-Lucent OmniSwitch Web Interface Cross-Site Request Forgery During a penetration test, RedTeam Pentesting discovered a vulnerability in the management web interface of an Alcatel-Lucent OmniSwitch 6450. The management web...

Webgate Buffer Overflow

Webgate technology is focused on digital image processing, embedded system design and networking to produce embedded O/S and web server cameras providing real time images. We are also making superior network stand-alone DVRs by applying our accumulated network and video solution knowledge. WEBGAT...

Adtran AOS Compliance Checks

Binary data adtrancompliancecheck.nbin...

Design/Logic Flaw

Microsoft Dynamics AX 4.0 SP2, 2009 SP1, 2012, and 2012 R2 allows remote authenticated users to cause a denial of service instance outage via crafted data to an Application Object Server AOS instance, aka "Query Filter DoS Vulnerability."...

CVE-2014-0261

CVE-2014-0261 affects Microsoft Dynamics AX platforms: 4.0 SP2, 2009 SP1, 2012, and 2012 R2. The issue is a remote denial of service via crafted data to the Application Object Server (AOS), also called the Query Filter DoS vulnerability. Exploitation requires remote authenticated access. Impact i...

CVE-2014-0261

Microsoft Dynamics AX 4.0 SP2, 2009 SP1, 2012, and 2012 R2 allows remote authenticated users to cause a denial of service instance outage via crafted data to an Application Object Server AOS instance, aka "Query Filter DoS Vulnerability."...

PT-2014-1278

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics AX versions 4.0 SP2, 2009 SP1, 2012, and 2012 R2 Description The issue is related to the improper handling of specially crafted messages in the AOS format, leading to a denial of service instance outage. This can be caused b...

CVE-2013-5210

Cross-site scripting XSS vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5210

CVE-2013-5210 affects the ADTRAN AOS NetVanta 7100: a cross-site scripting (XSS) vulnerability in the GUI login page present before R10.8.1 that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The public sources identify the affected product as the NetVanta...

CVE-2013-5210

Cross-site scripting XSS vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-5447

Name of the Vulnerable Software and Affected Versions ADTRAN AOS versions prior to R10.8.1 Description A cross-site scripting XSS issue exists in the GUI login page, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized access or control of...

CVE-2013-5210: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Layered Defense Research Advisory: Alcatel-Lucent OmniSwitch products, Stack Buffer Overflow

================================================== Layered Defense Research Advisory 12 August 2008 ================================================== 1 Affected Product Alcatel-Lucent OmniSwitch products OS7000 OS6600 OS6800 OS6850 OS9000 ================================================== 2...

CVE-2007-6226: Improper Authentication

The American Power Conversion APC AP7932 0u 30amp Switched Rack Power Distribution Unit PDU, with rpdu 3.5.5 and aos 3.5.6, allows remote attackers to bypass authentication and obtain login access by making a login attempt while a different client is logged in, and then resubmitting the login...

Alcatel OmniSwitch 7700/7800 switches backdoor

The remote host seems to be a backdoored Alcatel OmniSwitch 7700/7800. SPDX-FileCopyrightText: 2005 deepquest Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2002-1272

Alcatel OmniSwitch 7700/7800 with AOS 5.1.1 contains a backdoor Telnet server on TCP 6778 that was left in code from development, allowing remote privileged access. Affected devices can be compromised to gain full admin control. Remediation per CERT/vendor guidance: upgrade to AOS 5.1.1.R02 or 5....

CVE-2002-1272: Undefined Security Weakness

Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative privileges...

CERT Advisory CA-2002-32 Backdoor in Alcatel OmniSwitch AOS

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-32 Backdoor in Alcatel OmniSwitch AOS Original release date: November 21, 2002 Last revised: -- Source: CERT/CC, Alcatel A complete revision history can be found at the end of this file. Systems Affected Alcatel OmniSwitch 7700/7800 switche...