HP SiteScope Remote Code Execution

This module exploits a code execution flaw in HP SiteScope. The vulnerability exists in the opcactivate.vbs script, which is reachable from the APIBSMIntegrationImpl AXIS service, and uses WScript.Shell.run to execute cmd.exe with user provided data. Note that the opcactivate.vbs component is...

Oracle Linux 5 : libxml2 (ELSA-2012-0017)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0017 advisory. - Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008 - Fix an off by one error in encoding CVE-2011-0216 - Fix some potential...

Oracle Linux 6 : axis (ELSA-2013-0269)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0269 advisory. 0:1.2.1-7.3 - Add missing connection hostname check against X.509 certificate name - Resolves: CVE-2012-5784 Tenable has extracted the preceding description blo...

Oracle Linux 5 : axis (ELSA-2013-0683)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0683 advisory. - Resolves: CVE-2012-5784 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not teste...

MGASA-2013-0200 Updated axis package fixes security vulnerability

Apache Axis did not verify that the server hostname matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name CVE-2012-578...

Updated axis package fixes security vulnerability

Apache Axis did not verify that the server hostname matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name CVE-2012-578...

AXIS Media Control 6.2.10.11 - Unsafe ActiveX Method

AXIS Media Control 6.2.10.11 - Unsafe ActiveX Method ======================================================================== AXIS ==================================================================== ======================================================================== 1.Advisory Information...

AXIS Media Control 6.2.10.11 - Unsafe ActiveX Method

Exploit for windows platform in category dos / poc 1.Advisory Information Title: AXIS Media Control ActiveX vulnerability Date Published: 12/06/2013 Date of last updated: 12/06/2013 2.Vulnerability Description A vulnerability has been found in this devices: -CVE-2013-3543. Exposed Unsafe ActiveX...

AXIS Media Control Active-X File Corruption

======================================================================== AXIS ==================================================================== ======================================================================== 1.Advisory Information Title: AXIS Media Control ActiveX vulnerability Date...

AXIS Media Control 6.2.10.11 - Unsafe ActiveX Method

======================================================================== AXIS ==================================================================== ======================================================================== 1.Advisory Information Title: AXIS Media Control ActiveX vulnerability Date...

SOL14371 - Apache Axis vulnerability CVE-2012-5784

Vulnerability Recommended Actions If you are using iControl Assembly 11.2 and earlier, the Apache axis.jar file is vulnerable to CVE-2012-5784. To eliminate this vulnerability, upgrade to iControl Assembly 11.3. To do so, download the latest version of the iControl Assembly package at . Note: A...

CentOS Update for axis CESA-2013:0683 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for axis RHSA-2013:0683-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for axis RHSA-2013:0683-01

Check for the Version of axis OpenVAS Vulnerability Test RedHat Update for axis RHSA-2013:0683-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CentOS Update for axis CESA-2013:0683 centos5

Check for the Version of axis OpenVAS Vulnerability Test CentOS Update for axis CESA-2013:0683 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS 5 : axis (CESA-2013:0683)

Updated axis packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Scientific Linux Security Update : axis on SL5.x i386/x86_64 (20130325)

Apache Axis did not verify that the server hostname matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name. CVE-2012-57...

RHEL 5 : axis (RHSA-2013:0683)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0683 advisory. Apache Axis is an implementation of SOAP Simple Object Access Protocol. It can be used to build both web service clients and servers. Apache Axis did...

axis security update

CentOS Errata and Security Advisory CESA-2013:0683 Updated axis packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score...

axis: missing connection hostname check against X.509 certificate name

Apache Axis did not verify that the server host name matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name...