SEC Consult SA-20090415-1 :: Nortel Application Gateway 2000 Password Disclosure Vulnerability

SEC Consult Security Advisory 20090415-1 ========================================================================== title: Nortel Application Gateway 2000 Password Disclosure Vulnerability program: Nortel Application Gateway 2000 vulnerable version: 6.3.1 and prior homepage:...

Nortel Application Gateway information leak

Web page contains login and password for administrative access...

Stack overflow

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...

CVE-2007-2238

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...

Nortel Application Gateway 2000 'adminDownloads.htm'密码泄漏漏洞

BUGTRAQ ID: 34520 CNCAN ID：CNCAN-2009041501 Nortel Application Gateway 2000是一款应用网关，包括融合语音和数据通信的应用。 Nortel Application Gateway存在设计错误，远程攻击者可以利用漏洞获得敏感信息。 Nortel Application Gateway提供管理员接口"Nortel Administration Tool powered by Citrix"，在部分条件下，接口会应答敏感信息给未授权用户，通过访问URL "https://server:3001/"，子帧...

CVE-2007-2238: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the Whale Client Components ActiveX control WhlMgr.dll, as used in Microsoft Intelligent Application Gateway IAG before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the 1 CheckForUpdates or 2 UpdateComponents methods...

Nortel Application Gateway 2000 Password

SEC Consult Security Advisory ========================================================================== title: Nortel Application Gateway 2000 Password Disclosure Vulnerability program: Nortel Application Gateway 2000 vulnerable version: 6.3.1 and prior homepage: http://www.nortel.com/ag2000...

Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Microsoft Whale Intelligent Application Gateway Whale Client. When sending an overly long string to CheckForUpdates method of WhlMgr.dll 3.1.502.64 an attacker may be able to execute arbitrary code. Module Options msf use...

CVE-2008-5882

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

Sql injection

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

CVE-2008-5882

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

CVE-2008-5882

CVE-2008-5882 describes a SQL injection in login.asp of Citrix Application Gateway – Broadcast Server (BCS) before 6.1, used by Avaya AG250 – Broadcast Server before 2.0 and possibly other products. The vulnerability arises via the txtUID parameter and could allow remote execution of arbitrary SQ...

CVE-2008-5882: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

Through the different structure of the firewall to the back door of the place-vulnerability warning-the black bar safety net

This article describes the different configuration of the firewall is placed back door. Anyway, this article can tell you in other environments, the hackers is how to hide them into a system. Hackers always want to retain into their already compromised capacity of the system, even if the target...

[0xbadc0ded #03] DeleGate (SSL-filter) <= 8.9.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================================== 0xbadc0ded Advisory 03 - 2004/05/06 - DeleGate = 8.9.2 SSL-filter ========================================================================== Reference...