CVE-2009-4509

The TANDBERG Video Communication Server (VCS) web management interface in versions around x4.2.1 (and possibly earlier) uses forged/predictable session cookies in tandberg/web/lib/secure.php and tandberg/web/user/lib/secure.php, enabling an unauthenticated attacker to bypass authentication and po...

CVE-2009-4509

The administrative web console on the TANDBERG Video Communication Server VCS before X4.3 uses predictable session cookies in 1 tandberg/web/lib/secure.php and 2 tandberg/web/user/lib/secure.php, which makes it easier for remote attackers to bypass authentication, and execute arbitrary code by...

CVE-2010-1356

Unspecified vulnerability on the TANDBERG Video Communication Server VCS before X5.0 allows remote attackers to execute arbitrary code via unknown vectors, aka Reference ID 69773...

TANDBERG Video Communication Server 4.2.14.3.0 - Multiple Remote Vulnerabilities

TANDBERG Video Communication Server 4.2.14.3.0 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/39389/info TANDBERG Video Communication Server is prone to multiple remote vulnerabilities, including: 1. A file-disclosure vulnerability. 2. A security vulnerability that ma...

TANDBERG Video Communication Server 4.2.1/4.3.0 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/39389/info TANDBERG Video Communication Server is prone to multiple remote vulnerabilities, including: 1. A file-disclosure vulnerability. 2. A security vulnerability that may allow attackers to conduct server impersonation and man-in-middle attacks. 3. A...

[SECURITY] Fedora 13 Update: pidgin-sipe-1.9.1-1.fc13

A third-party plugin for the Pidgin multi-protocol instant messenger. It implements the extended version of SIP/SIMPLE used by various products: Microsoft Office Communications Server OCS 2007/2007 R2 and newer Microsoft Live Communications Server LCS 2003/2005 Reuters Messaging With this plugin...

[SECURITY] Fedora 11 Update: ocsinventory-1.02.3-1.fc11

Open Computer and Software Inventory Next Generation is an application designed to help a network or system administrator keep track of the computers configuration and software that are installed on the network. OCS Inventory is also able to detect all active devices on your network, such as...

[SECURITY] Fedora 12 Update: ocsinventory-1.02.3-1.fc12

Open Computer and Software Inventory Next Generation is an application designed to help a network or system administrator keep track of the computers configuration and software that are installed on the network. OCS Inventory is also able to detect all active devices on your network, such as...

Bopup Communication Server Version Detection

This script detects the version of Bopup Communication Server and sets the result in KB. OpenVAS Vulnerability Test $Id: secpodbopupserverdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ Bopup Communication Server Version Detection Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

Bopup Communication Server Remote Buffer Overflow Vulnerability

Bopup Communication Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stack overflow

Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810...

CVE-2009-2227

CVE-2009-2227 is a stack-based buffer overflow in Blabsoft Bopup Communication Server 3.2.26.5460. A crafted request sent to TCP port 19810 can allow a remote attacker to execute arbitrary code. Root cause is a stack overflow in the server process; public exploit activity exists (e.g., Metasploit...

CVE-2008-6578

Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain privileges, obtain sensitive information, or cause a denial of service via unknown vectors...

CVE-2008-6579

Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to "web resources to phones and administrators."...

Command injection

Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain privileges, obtain sensitive information, or cause a denial of service via unknown vectors...

Design/Logic Flaw

Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to "web resources to phones and administrators."...

CVE-2008-6578

Technical details are not publicly available in the provided documents. The connected sources do not specify affected components, root cause, impact, or remediation for CVE-2008-6578. Monitor for updates.

CVE-2008-6578

Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain privileges, obtain sensitive information, or cause a denial of service via unknown vectors...

CVE-2008-6579

The vulnerability CVE-2008-6579 affects Nortel Communication Server 1000 4.50.x. It allows remote attackers to obtain the web application structure via unknown vectors related to web resources accessible to phones and administrators. No concrete exploit details, impact, affected components beyond...

CVE-2008-6579

Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to "web resources to phones and administrators."...