Solaris 10 (x86) : 119465-17 (deprecated)

Sun JavaTM System Access Manager 6 2005Q1. Date this patch was last updated by Sun : Jun/29/09 This plugin has been deprecated and either replaced with individual 119465 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Solaris 9 (sparc) : 115766-15

AM 6.2: Sun Java System Access Manager. Date this patch was last updated by Sun : Feb/05/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 119465-17

Sun JavaTM System Access Manager 6 2005Q1. Date this patch was last updated by Sun : Jun/29/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

IBM多个产品未明信任书伪造漏洞

IBM包含多系列产品，如IBM Tivoli，IBM WebSphere等。 IBM多个产品存在信任书伪造问题，远程攻击者可以利用这个漏洞访问资源和数据或可能控制应用程序。 目前报告此问题可以使攻击者利用COOKIE或伪造其他信任用户未授权访问资源，目前没有详细漏洞细节提供。 IBM Tivoli Access Manager for e-business 5.1 IBM Tivoli Access Manager for e-business 4.1 IBM Tivoli Access Manager for e-business 3.9 IBM Tivoli Access Manag...

Update Protection against Directory Traversal Vulnerability in IBM Tivoli Access Manager

A vulnerability was reported in IBM Tivoli Access Manager. IBM Tivoli Access Manager provides access control security solutions. The vulnerability can be exploited via a specially crafted filename containing '../..' sequences. An attacker may attempt to exploit this vulnerability to place files o...

Directory traversal

Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager TAM 5.1 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2006-0513

Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager TAM 5.1 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2006-0513

Concrete details: CVE-2006-0513 affects IBM Tivoli Access Manager Web Server Plug-in (pkmslogout) on TAM 5.1.0.x. The vulnerability is a directory traversal in the filename parameter (e.g., filename=../../../../etc/passwd) that lets an attacker read arbitrary files, requiring authentication to tr...

CVE-2006-0531

Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool...

Authentication flaw

Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool...

CVE-2006-0531

Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool...

[Full-disclosure] VSR Advisory: IBM Tivoli Access Manager - Web Server Plug-in File Retrieval Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Remote Directory Traversal and File Retrieval Release Date: 2006-02-03...

IBM Tivoli Access Manager directory traversal

Web server plugin directory traversal...

CVE-2006-0531

CVE-2006-0531 affects Sun Java System Access Manager 7.0. The vulnerability allows local users logged in as root to bypass authentication and gain top-level administrator privileges via the amadmin CLI. Remediation referenced in connected documents includes Sun patches 120954-12 and 120955-12 for...

IBM Tivoli Access Manager Plugin - Directory Traversal

IBM Tivoli Access Manager Plugin - Directory Traversal source: https://www.securityfocus.com/bid/16494/info Tivoli Access Manager Plugin for Web Servers is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

IBM Tivoli Access Manager Plugin - Directory Traversal

source: https://www.securityfocus.com/bid/16494/info Tivoli Access Manager Plugin for Web Servers is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...

[SA18103] Cisco Clean Access Manager Obsolete JSP Files Vulnerability

TITLE: Cisco Clean Access Manager Obsolete JSP Files Vulnerability SECUNIA ADVISORY ID: SA18103 VERIFY ADVISORY: http://secunia.com/advisories/18103/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: Cisco Clean Access CCA 3.x http://secunia.com/product/5561/ DESCRIPTION: Al...

CVE-2005-3971

Cross-site scripting XSS vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field...

CVE-2005-3971

CVE-2005-3971 affects Citrix MetaFrame Secure Access Manager 2.0–2.2 and NFuse Elite 1.0. It is a cross-site scripting (XSS) vulnerability in the login form that allows remote attackers to inject arbitrary web script or HTML via the username field. The connected sources document this vulnerabilit...

CVE-2004-2558

Technical details about CVE-2004-2558 are not provided in the connected documents. Available descriptions reference an unspecified session hijacking vulnerability in IBM Tivoli/WebSphere products. Monitor for updates and rely on official advisories for precise impact and fixes.