CVE-2016-8201

CVE-2016-8201 is a CSRF vulnerability in Brocade Virtual Traffic Manager (vTM) affecting versions up to 11.0. An attacker could trick a logged-in admin into performing administrative changes on the traffic-manager cluster. Remediation and confirmed fixes are available in later releases: vTM 11.1,...

CVE-2016-8204

A Directory Traversal vulnerability in FileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed...

CVE-2016-8206

A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files...

CVE-2016-8201

A CSRF vulnerability in Brocade Virtual Traffic Manager versions released prior to and including 11.0 could allow an attacker to trick a logged-in user into making administrative changes on the traffic manager cluster...

CVE-2016-8206

CVE-2016-8206 is a Directory Traversal vulnerability in Brocade/IBM Network Advisor, affecting the SoftwareImageUpload servlet in versions up to and including 14.0.2. A remote attacker could write to arbitrary files and, in related notes, delete files via crafted requests. IBM and related advisor...

CVE-2016-8204

CVE-2016-8204 affects Brocade Network Advisor (FileReceiveServlet). A directory-traversal flaw in versions up to and including 14.0.2 could let a remote attacker upload a malicious file to a location where it can be executed, enabling remote code execution. IBM advisories indicate fixes in IBM Ne...

CVE-2016-8205

Brocade Network Advisor (DashboardFileReceiveServlet) contains a Directory Traversal vulnerability (CVE-2016-8205) in versions up to and including 14.0.2. A remote attacker could upload a malicious file to a location where it can be executed. IBM and other advisories confirm the issue across rela...

CVE-2016-8205

A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed...

BSA-2017-180

Security Advisory ID : BSA-2017-180 Component : BNA Revision : 1.0: Final A Directory Traversal Vulnerability inCliMonitorReportServletin the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with sensitive...

BSA-2017-177

Security Advisory ID : BSA-2017-177 Component : BNA Revision : 1.0: Final A Directory Traversal Vulnerability inFileReceiveServletin the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload malicious file in a section of the file system...

BSA-2017-179

Security Advisory ID : BSA-2017-179 Component : BNA Revision : 1.0: Final A Directory Traversal Vulnerability in servletSoftwareImageUploadin the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently dele...

BSA-2016-209

Security Advisory ID : BSA-2016-209 Component : Web UI Revision : 1.0: Final A CSRF vulnerability in Brocade Virtual Traffic Manager versions released prior to and including 11.0, could allow an attacker to trick a logged-in user into making administrative changes on the traffic manager cluster...

BSA-2017-178

Security Advisory ID : BSA-2017-178 Component : BNA Revision : 1.0: Final A Directory Traversal Vulnerability inDashboardFileReceiveServletin the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload malicious file in a section of the file...

BSA-2016-198

Security Advisory ID : BSA-2016-198 Component : curl/libcurl Revision : 2.0: Final Use-after-free vulnerability inlibcurlbefore 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors...

Brocade NetIron OS Detection (SNMP)

SNMP based detection of Brocade NetIron OS. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Brocade Security Advisory BSA-2016-168 (Memory Corruption Vulnerability)

A memory corruption in the IPsec code path of Brocade NetIron OS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00 and 6.0.00a images could allow attackers to causse a denial of service DoS line card reset via certain constructed IPsec control packets SPDX-FileCopyrightText:...

Brocade Security Advisory BSA-2015-002 (NTP)

The receive function in ntpproto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger an unintended association change via crafted packets SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...

Brocade NetIron OS Denial of Service Vulnerability

NetIron OS is a power service network solution. NetIron OS has a memory corruption vulnerability in the IPsec code path that could allow an attacker to cause a denial of service via a constructed IPsec control packet...

CVE-2016-8203

A memory corruption in the IPsec code path of Brocade NetIron OS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00, and 6.0.00a images could allow attackers to cause a denial of service line card reset via certain constructed IPsec control packets...

CVE-2016-8203

A memory corruption in the IPsec code path of Brocade NetIron OS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00, and 6.0.00a images could allow attackers to cause a denial of service line card reset via certain constructed IPsec control packets...