WebShield Appliance Detection (HTTP)

HTTP based detection of the WebShield Appliance. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-3327

Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security Start mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity...

CVE-2005-3327

CVE-2005-3327 affects Network Appliance Data ONTAP 7.0 and earlier. A modified iSCSI client can bypass authentication by skipping the Security (Start) mode required by the Login Negotiation protocol and operating in Operational mode without proving identity, exposing partial confidentiality, inte...

CVE-2005-3327

Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security Start mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity...

CVE-2004-2539

Unknown vulnerability in Network Appliance NetCache 5.2 and Data ONTAP 6.0 allows remote attackers to cause a denial of service panic and reboot and possibly other impacts via unknown attack vectors, possibly related to unspecified worms, as identified by bug ID...

CVE-2004-2539

Technical details are not publicly available in the provided documents. Monitor for updates.

Symantec Brightmail AntiSpam: Nested Zip File, Denial of Service

SUMMARY Risk Impact Low Remote Access | Yes incoming mail ---|--- Local Access | No Authentication Required | No Exploit publicly available | NA AFFECTED PRODUCTS Product | Version | Build | Solution ---|---|---|--- Symantec Brightmail AntiSpam | 6.0 | 1 | Update Symantec Brightmail AntiSpam | 6....

CVE-2004-2326

The CVE-2004-2326 entry documents a SQL injection vulnerability in the IP3 Networks NetAccess Appliance that allows remote attackers to bypass authentication via the login or password fields. Affected firmware versions are listed as before 3.1.18b13, with a note that 4.0.34 is also affected. The ...

CVE-2004-2326

SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to bypass authentication via the 1 login or 2 password. NOTE: this issue was later reported to also affect firmware 4.0.34...

CVE-2002-1937

The vulnerability CVE-2002-1937 affects Symantec Firewall/VPN Appliance 100 through 200R, where the administrator’s MAC address is hardcoded into the firewall’s configuration. This allows remote attackers to spoof the administrator’s MAC address and perform an ARP poisoning man-in-the-middle atta...

[NEWS] Clavister Firewall Multiple Vulnerabilities (Multiple DoS, Password String Filtering)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-0618

The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network...

SonicWALL SOHO/10 - XSS vulnerability

SonicWALL SOHO/10 - XSS and Code Injection vulnerability ======================================================== Product: ======== SonicWall SOHO/10 is the 2nd generation Internet Security Appliance from Sonicwall, with firewall-, vpn-, contentfiltering- and other capabilities. Vulnerability:...

WebShield Appliance Detection

The remote host appears to be a WebShield appliance. Connections are allowed to the management console. A remote attacker could exploit this to gather information which could be used to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17368;...

CVE-2005-0618

The issue is a load-balancing defect in SMTP binding on several Symantec/Nexland devices that can cause outbound SMTP traffic intended for a trusted network to be sent over an untrusted path when two WANs are used. Affected products and firmware: Symantec Firewall/VPN Appliance 200/200R (before 1...

CVE-2004-1474

This CVE pertains to Symantec Enterprise Firewall/VPN Appliances (models 100, 200, 200R) with firmware before 1.63 and Gateway Security appliances (320, 360, 360R) with firmware before 622. The underlying issue is a default read/write SNMP community string, which lets an unauthenticated remote at...

CVE-2004-2539

Unknown vulnerability in Network Appliance NetCache 5.2 and Data ONTAP 6.0 allows remote attackers to cause a denial of service panic and reboot and possibly other impacts via unknown attack vectors, possibly related to unspecified worms, as identified by bug ID...

Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Security Advisory SYM04-013 22 September, 2004 Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues Revision History None Risk Impact High Overview Symantec resolved three high-risk vulnerabilities that...

CVE-2004-0190

The CVE concerns the Symantec FireWall/VPN Appliance model 200 where the password for the password administration page is recorded in cleartext. This could be cached on an administrator’s local system or in a proxy, enabling an attacker to steal the password and gain privileges. The provided sour...

CVE-2002-1519

Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter...