CVE-2008-7225

Foxit Remote Access Server (WAC Server) 2.0 Build 3503 is affected by a heap-based buffer overflow that can be triggered by long SSH packets, allowing remote attackers to crash the service or potentially execute arbitrary code. The issue is identified as CVE-2008-7225 and is noted as distinct fro...

CVE-2008-7225

Heap-based buffer overflow in Foxit Remote Access Server aka WAC Server 2.0 Build 3503 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151...

CVE-2008-7031

Heap-based buffer overflow in Foxit Remote Access Server aka WAC Server 2.0 Build 3503 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151...

CVE-2008-7031

Foxit WAC Server (Foxit Remote Access Server) version 2.0 Build 3503 is affected by a heap-based buffer overflow in the SSH packet handling, leading to a potential denial of service and possibly arbitrary code execution. The vulnerability is documented as CVE-2008-7031 (and related CVE-2008-7225)...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...

CVE-2009-1464

Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...

Design/Logic Flaw

Application Access Server A-A-S 2.0.48 stores 1 passwords and 2 the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file...

CVE-2009-1466

Application Access Server A-A-S 2.0.48 stores 1 passwords and 2 the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file...

CVE-2009-1465

Application Access Server A-A-S 2.0.48 has "wildbat" as its default password for the admin account, which makes it easier for remote attackers to obtain access...

CVE-2009-1465

CVE-2009-1465 affects Application Access Server (A-A-S) 2.0.48, where the admin account uses the default password “wildbat,” enabling remote attackers to obtain administrative access. The provided documents confirm the component and default credential issue but do not specify a fixed version or o...

CVE-2009-1466

CVE-2009-1466 affects Application Access Server (A-A-S) 2.0.48, where the passwords and the port keyword are stored in cleartext in aas.ini. Local users reading aas.ini can obtain sensitive data. The issue is caused by insecure password/port storage in the configuration file. Remediation details ...

CVE-2009-1466

Application Access Server A-A-S 2.0.48 stores 1 passwords and 2 the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file...

CVE-2009-1465

Application Access Server A-A-S 2.0.48 has "wildbat" as its default password for the admin account, which makes it easier for remote attackers to obtain access...

PT-2009-3967 · A A S · Application Access Server

Name of the Vulnerable Software and Affected Versions: Application Access Server A-A-S version 2.0.48 Description: The issue allows local users to obtain sensitive information, including passwords and the port keyword, by reading the aas.ini file, as this information is stored in cleartext...

A-A-S Application Access Server Default Admin Password

The remote installation of A-A-S Application Access Server is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative control of the affected application and host. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

Syhunt: A-A-S (Application Access Server) Multiple Security Vulnerabilities

Syhunt: A-A-S Application Access Server Multiple Security Vulnerabilities Advisory-ID: 200905111 Discovery Date: 3.23.2009 Release Date: 5.11.2009 Affected Applications: A-A-S 2.0.48 and possibly older versions Class: XSRF Cross Site Request Forgery Arbitrary Command Execution, Undocumented Defau...

A A S Application Access Server Server Detection

The A A S Application Access Server is running at this port. The A A S Application Access Server makes the PC administration possible over LAN and WANs. OpenVAS Vulnerability Test $Id: aasdetect.nasl 6032 2017-04-26 09:02:50Z teissa $ A A S Application Access Server Detection Authors: Michael Mey...

A-A-S Application Access Server Detection (HTTP)

HTTP based detection of A-A-S Application Access Server. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

A-A-S Application Access Server Multiple Vulnerabilities

According to its version number, the remote version of A-A-S Application Access Server is prone to multiple security issues including a cross-site request-forgery vulnerability, an insecure-default-password vulnerability and an information-disclosure vulnerability. Attackers can exploit these...

Symantec pcAnywhere Access Server Detection

Symantec pcAnywhere Access Server supports managing multiple pcAnywhere servers thorugh a centralized access point. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid32133; scriptversion"1.13";...