networkEverywhere.txt

NetworkEverywhere router Model NR041 latest firmware rev 1.2 Release 03 suffers a "script injection over dhcp" vulnerability. The NR041 does not filter DHCP HOSTNAME options coming from its clients. Because of that, we can inject a web script into the web based administrative interface and wait...

ZaireWeb Solutions NewsLetter ZWS - Administrative Interface Authentication Bypass

ZaireWeb Solutions NewsLetter ZWS - Administrative Interface Authentication Bypass source: https://www.securityfocus.com/bid/10605/info Newsletter ZWS is reported prone to an administrative interface authentication bypass vulnerability. The vulnerability exists due to a design error in the...

ZaireWeb Solutions NewsLetter ZWS - Administrative Interface Authentication Bypass

source: https://www.securityfocus.com/bid/10605/info Newsletter ZWS is reported prone to an administrative interface authentication bypass vulnerability. The vulnerability exists due to a design error in the implementation of the authentication system for the interface. The flaw allows a user to...

IBM Lotus Domino 67 - HTTP webadmin.nsf Directory Traversal

IBM Lotus Domino 67 - HTTP webadmin.nsf Directory Traversal source: https://www.securityfocus.com/bid/9900/info It has been reported that Lotus Domino may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The...

[SECURITY] [DSA 436-1] New mailman packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 436-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 8th, 2004 http://www.debian.org/security/faq -...

CVE-2003-1286

HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection: keep-alive" request before the proxy requests...

Macromedia JRun 4.0 build 61650 - Administrative Interface Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/9112/info A number of cross-site scripting vulnerabilities have been reported for Macromedia Jrun, specifically in the administrative interface. The problem is said to occur due to insufficient sanitization of URI parameters that may be passed to the page...

Macromedia JRun 4.0 build 61650 - Administrative Interface Multiple Cross-Site Scripting Vulnerabilities

Macromedia JRun 4.0 build 61650 - Administrative Interface Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/9112/info A number of cross-site scripting vulnerabilities have been reported for Macromedia Jrun, specifically in the administrative interface. The...

Fortigate Firewall 2.x - selector Admin Interface Cross-Site Scripting

Fortigate Firewall 2.x - selector Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an...

Fortigate Firewall 2.x - Policy Admin Interface Cross-Site Scripting

Fortigate Firewall 2.x - Policy Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an...

Fortigate Firewall 2.x - dlg Admin Interface Cross-Site Scripting

Fortigate Firewall 2.x - dlg Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an...

Fortigate Firewall 2.x - listdel Admin Interface Cross-Site Scripting

Fortigate Firewall 2.x - listdel Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an...

Fortigate Firewall 2.x - selector Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

Fortigate Firewall 2.x - dlg Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

Fortigate Firewall 2.x - listdel Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

Fortigate Firewall 2.x - Policy Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

FloosieTek FTGatePro 1.22 - Mail Server Cross-Site Scripting

source: https://www.securityfocus.com/bid/8528/info FloosieTek FTGatePro Mail Server is prone to a cross-site scripting vulnerability. A remote attacker could exploit this issue by enticing a legitimate user of the mail server to follow a malicious link with embedded HTML and script code. The...

FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure

source: https://www.securityfocus.com/bid/8527/info FloosieTek FTGatePro Mail Server may disclose its installation path to remote attackers. This information could be useful when mounting further attacks against the system. This issue exists in the web administrative interface, which listens on...

3Com DSL Router 812 1.1.71.1.92.0 - Administrative Interface Long Request Denial of Service

3Com DSL Router 812 1.1.71.1.92.0 - Administrative Interface Long Request Denial of Service // source: https://www.securityfocus.com/bid/8248/info A problem in the 3Com 812 OfficeConnect has been reported that may result in the router becoming unstable. Because of this, an attacker may be able to...

3Com DSL Router 812 1.1.7/1.1.9/2.0 - Administrative Interface Long Request Denial of Service

// source: https://www.securityfocus.com/bid/8248/info A problem in the 3Com 812 OfficeConnect has been reported that may result in the router becoming unstable. Because of this, an attacker may be able to deny service to legitimate users of the vulnerable router by submitting an excessively long...