956 matches found
Websense Proxy - Filter Bypass
Websense Proxy Filter Bypass 1. Advisory Information Date published: 2012-11-25 Vendors contacted: Websense Release mode: Coordinated release Vendor was notified 2. Vulnerability Information Class: Filter Bypass Remotely Exploitable: Yes 3. Software Description Internet access management system...
Apache Archiva 1.3.4 Cross Site Request Forgery
Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Title: Multiple CSRF Vulnerabilities in Apache Archiva 1.3.4 --------------------------------------------------------------------...
[SECURITY] Fedora 12 Update: sudo-1.7.4p4-2.fc12
Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Sudo operates on a per-command basis. It is not a replacement for the shell. Features include: the ability to restrict...
Directory traversal
Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console aka Access Management Console in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with...
Why Bob Maley's Firing is Bad for All of Us
The news that Pennsylvania CISO Bob Maley lost his job for publicly discussing a security incident at last week’s RSA Conference really shouldn’t come as a surprise, but it does. Even for a government agency, this kind of lack of understanding of what actually matters is appalling and it is a...
Rongsoft Oday bulk to get SHELL-vulnerability warning-the black bar safety net
Author: cast Blog:http://hi. baidu. com/castblog/ Then GOOGLE search for keyword: inurl:xinwenxq. asp? biaohao= Access management address: gonggong/denglu/denglu. asp First, in the management of the landing page, with a simple'or'='or'can fool the past! In the verification file:...
Novell Access Manager管理控制台信息泄漏漏洞
Bugraq ID: 35734 Novell Access Manger是一款完整的基于角色的Web 访问管理解决方案。 Novell Access Manger管理控制台存在未明错误，远程攻击者可以利用漏洞访问系统文件获得敏感信息。 目前没有详细漏洞细节提供。 Novell Access Manager 3.1 Novell Access Manager 3 用户可参考如下安全公告获得补丁信息：...
Design/Logic Flaw
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt...
CVE-2007-1309
CVE-2007-1309 - detailed findings : The vulnerability affects Novell Access Management 3 SSLVPN Server. It allows remote authenticated users to bypass VPN restrictions by manipulating policy.txt: first set policy.txt read-only to disconnect, then modify policy.txt to alter policies. The underlyin...
CVE-2007-1309: Undefined Security Weakness
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt...
CVE-2007-1309
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt...
Novell Access Management SSLVPN Server - Security Bypass
Novell Access Management SSLVPN Server - Security Bypass source: https://www.securityfocus.com/bid/22787/info Novell Access Management SSLVPN Server is prone to a security-bypass vulnerability. A remote authenticated attacker can exploit this issue to access corporate resources normally restricte...
Novell Access Management SSLVPN Server - Security Bypass
source: https://www.securityfocus.com/bid/22787/info Novell Access Management SSLVPN Server is prone to a security-bypass vulnerability. A remote authenticated attacker can exploit this issue to access corporate resources normally restricted within VPN access policy. This may lead to other attack...
URL-Encoding Problem in Finjan SurfinGate
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUMMARY - ------- The Finjan SurfinGate use web content filtering and internet access management for protecting the network. A vulnerability in the product allows you to bypass the access management. You can download files which are normally blocked...
Trend Micro ScanMail For Exchange 3.8 - Authentication Bypass
Trend Micro ScanMail For Exchange 3.8 - Authentication Bypass source: https://www.securityfocus.com/bid/6619/info A vulnerability has been reported for ScanMail for Microsoft Exchange. The vulnerability allows a remote attacker to bypass existing authentication mechanisms and obtain access to...
