1747 matches found
CVE-2014-3596
The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subjec...
PT-2014-5412 · Apache +3 · Apache Axis +3
Name of the Vulnerable Software and Affected Versions: Apache Axis versions 1.4 and earlier Description: The issue arises from the getCN function not properly verifying that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate...
CVE-2014-3596
CVE-2014-3596 affects Apache Axis 1.4 and earlier. The getCN function fails to properly verify that the server hostname matches a domain name in the certificate’s CN or subjectAltName, enabling a man-in-the-middle to spoof SSL servers using a crafted certificate. Public advisories confirm this is...
CVE-2014-3596
The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subjec...
Axis Commerce (E-Commerce System) Stored XSS
No description provided by source. Exploit Title: Axis Commerce E-Commerce System Stored XSS Date: 19.08.2011 Author: Eyup CELIK Software Link: https://github.com/downloads/axis/axiscommerce/axis-0.8.1.zip Version: 0.8.1 and previus Tested on: Apache For Windows ISSUE Vulnerable Modules = Search...
Axis Network Camera 2.x HTTP Authentication Bypass Vulnerability
No description provided by source...
Axis Communications 207W Network Camera Web Interface axis-cgi/admin/restart.cgi CSRF
No description provided by source. source: http://www.securityfocus.com/bid/25678/info Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a cross-site scripting vulnerability, a cross-site request-forgery vulnerability, a...
Axis Print Server 6.15/6.20 Web Interface Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8096/info Axis Print Server web interface could expose the device to a denial of service vulnerability. It has been reported that an attacker may make a malicious HTTP request that will trigger an exception in the affecte...
Axis Communications 207W Network Camera Web Interface admin/restartMessage.shtml server Parameter CSRF
No description provided by source...
AXIS Media Control 6.2.10.11 - Unsafe ActiveX Method
No description provided by source...
Axis Communications StorPoint CD Authentication Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1025/info Axis StorPoint CD and Axis StorPoint CD/T are CD ROM servers actual hardware unitssold by Axis Communications. Both of these appliances support remote management via SNMP MIB-II and private enterprise MIB as wel...
Apache AXIS 1.0 Non-Existent WSDL Path Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23687/info Apache AXIS is prone to a path-information-disclosure vulnerability. Remote unauthorized attackers may be able to determine webserver directory paths. Information obtained may aid attackers in launching further...
Axis Communications HTTP Server 2.x Messages Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6980/info It has been reported that the Axis Video Server does not properly secure sensitive information. Because of this, an attacker may be able to gather details about server operation and traffic that could lead to...
Axis Network Camera 2.x And Video Server 1-3 HTTP Authentication Bypass
No description provided by source. source: http://www.securityfocus.com/bid/11011/info A hardcoded backdoor administrative-user issue allows remote attackers to administer affected devices. This likely cannot be disabled. This issue is reported to affect: - Axis StorePoint CD E100 CD-ROM Server...
Axis Communications Video Server 2.x Command.CGI File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6987/info It has been reported that the Axis Video Servers do not properly handle input to the 'command.cgi' script. Because of this, an attacker may be able to create arbitrary files that would result in a denial of...
Axis Network Camera 2.x And Video Server 1-3 virtualinput.cgi Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/11011/info 1. A shell metacharacter command-execution vulnerability allows an anonymous user to download the contents of the '/etc/passwd' file on the device. Other commands are also likely to work, facilitating other...
Axis Communications 207W Network Camera Web Interface axis-cgi/admin/pwdgrp.cgi Multiple Parameter CSRF
No description provided by source. source: http://www.securityfocus.com/bid/25678/info Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a cross-site scripting vulnerability, a cross-site request-forgery vulnerability, a...
AXIS Camera Control (AxisCamControl.ocx 1.0.2.15) - BoF Exploit
No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------------------------- bPoC AXIS Camera Control AxisCamControl.ocx v. 1.0.2.15 SaveBMP Method Buffer Overflow/b original...
axis network camera 2.x and video server 1-3 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authentication checks and gives anonymous user...
