CVE-2014-5359

SafeNet SAS OWA Agent (formerly CRYPTOCard) is affected by CVE-2014-5359. The vulnerability is a directory traversal in the GetFile parameter to owa/owa, allowing remote attackers to read arbitrary files. Affected product: SafeNet Authentication Service Outlook Web Access (OWA) Agent; vulnerable ...

CVE-2014-5359

Directory traversal vulnerability in SafeNet Authentication Service SAS Outlook Web Access Agent formerly CRYPTOCard before 1.03.30109 allows remote attackers to read arbitrary files via a .. dot dot in the GetFile parameter to owa/owa...

Debian Security Advisory DSA 3017-1 (php-cas - security update)

Marvin S. Addison discovered that Jasig phpCAS, a PHP library for the CAS authentication protocol, did not encode tickets before adding them to an URL, creating a possibility for cross site scripting. OpenVAS Vulnerability Test $Id: deb3017.nasl 6692 2017-07-12 09:57:43Z teissa $ Auto-generated...

Access Control Bypass in Spring Security

When using Spring Security's CAS Proxy ticket authentication a malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated. This is due to the fact that the proxy ticket authentication uses the information from the HttpServletRequest which is...

OpenJDK: insecure subject principals set handling (JAAS, 8024306)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the...

Microsoft Internet Authentication Service MS-CHAP Security Bypass (MS09-071) - Ver2 (CVE-2009-3677)

An elevation of privilege vulnerability has been reported in the Internet Authentication Service. Internet Authentication Service IAS is the Microsoft implementation of a Remote Authentication Dial-in User Service RADIUS server and proxy. As a RADIUS server, IAS performs centralized connection...

Configuring Veeam Backup Cloud Edition with HP Cloud

Challenge Specifying a container in HP Cloud account settings results in the following error: Incorrect HTTP method used in the request 26301 Fault Name: IncorrectHTTPMethod Error Type: MethodValidationFailure Description: Incorrect HTTP method used in the request Service: publiccsservices...

VMSA-2013-0001 VMware vSphere security updates for the authentication service and third party libraries

The remote ESXi is missing one or more security related Updates from VMSA-2013-0001. Summary VMware vSphere security updates for for the authentication service and third party libraries Relevant releases vCenter Server 4.1 without Update 3a vSphere Client 4.1 without Update 3a ESXi 4.1 without...

VMSA-2013-0001:VMware vSphere security updates for the authentication service and third party libraries

VMSA-2013-0001.5 VMware vSphere security updates for the authentication service and third party libraries VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0001.5 VMware Security Advisory Synopsis: VMware vSphere security updates for the authentication service and third par...

[SECURITY] Fedora 18 Update: php-pear-CAS-1.3.2-1.fc18

This package is a PEAR library for using a Central Authentication Service...

Fedora Update for php-pear-CAS FEDORA-2012-21106

Check for the Version of php-pear-CAS OpenVAS Vulnerability Test Fedora Update for php-pear-CAS FEDORA-2012-21106 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for php-pear-CAS FEDORA-2012-21122

Check for the Version of php-pear-CAS OpenVAS Vulnerability Test Fedora Update for php-pear-CAS FEDORA-2012-21122 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 17 Update: php-pear-CAS-1.3.2-1.fc17

This package is a PEAR library for using a Central Authentication Service...

[SECURITY] Fedora 16 Update: php-pear-CAS-1.3.2-1.fc16

This package is a PEAR library for using a Central Authentication Service...

CA ARCserve Backup Authentication Service Invalid Call Remote Code Execution (CVE-2012-2971)

An input validation vulnerability has been reported in the CA ARCserve Backup authentication service...

CA ARCserve Backup Authentication Service Denial of Service (CVE-2012-2972)

A denial of service vulnerability has been reported in the CA ARCserve Backup authentication service...

CA ARCserve Backup Authentication service invalid virtual function call

Added: 11/09/2012 CVE: CVE-2012-2971 BID: 56116 OSVDB: 86416 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. Problem An invalid virtual function call in the authentication service allows remote attackers to execute arbitrary commands. Resolutio...

CA ARCserve Backup Authentication service invalid virtual function call

Added: 11/09/2012 CVE: CVE-2012-2971 BID: 56116 OSVDB: 86416 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. Problem An invalid virtual function call in the authentication service allows remote attackers to execute arbitrary commands. Resolutio...

CA ARCserve Backup Authentication service invalid virtual function call

Added: 11/09/2012 CVE: CVE-2012-2971 BID: 56116 OSVDB: 86416 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. Problem An invalid virtual function call in the authentication service allows remote attackers to execute arbitrary commands. Resolutio...

CA ARCserve Backup Authentication service invalid virtual function call

Added: 11/09/2012 CVE: CVE-2012-2971 BID: 56116 OSVDB: 86416 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. Problem An invalid virtual function call in the authentication service allows remote attackers to execute arbitrary commands. Resolutio...