PT-2012-4961

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.5 Description The issue concerns improper authentication for the Device Management private interface in Profile Manager. This allows attackers to enumerate managed devices. Recommendations For versions pri...

Security Advisory-Buffer Overflow on Stack in HTTP Module

Branch Intelligent Management System BIMS and Web management is provided by Huawei for network and device management. Both BIMS and Web management use HTTP. Therefore, to use BIMS and Web management, you must enable HTTP. Attackers can make stack overflow by sending messages with the URI whose...

Security Advisory-HTTP Session Management Vulnerability in HTTP Module

Branch Intelligent Management System BIMS and Web management is provided by Huawei for network and device management. Both BIMS and Web management use HTTP. Therefore, to use BIMS and Web management, you must enable HTTP. Because HTTP session ID generation is weak and predictable, an attacker can...

MDM Mobile Device Dependency Lock

Binary data mdmdependencylock.nbin...

Are You 'Siri-less'? Security Firm Urges Closer Look at Popular Personal Assistant App

The Finland-based security firm F-Secure is warning companies to beware of Siri, the voice-activated personal assistant app that last month was banned by IBM for security purposes. The potential for Siri-based data disclosures was cited at a Helsinki press conference, in which F-Secure’s vice...

GarrettCom - Use of Hard-Coded Password

Overview Independent security researcher Justin W. Clarke of Cylance Inc. has identified a privilege-escalation vulnerability in the GarrettCom Magnum MNS-6K Management Software application via the use of a hard-coded password. This vulnerability could allow a remote attacker with any level of...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 31116 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. The attacker must still be an...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can execute arbitrary code as root using the device management command line interface. Ref 34896 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.0.8 and...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 34502 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.1.1 an...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can execute arbitrary code as root using the device management command line interface. Ref 35249 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.0.8 and...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 34299 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. The attacker must still be an...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 33476 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.1.0 an...

PT-2012-6294

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.10 and earlier Palo Alto Networks PAN-OS versions 4.0.8 and earlier Description A vulnerability exists in the device-management command-line interface, allowing remote authenticated users to execute...

PT-2012-6290

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.11 and earlier Palo Alto Networks PAN-OS versions 4.0.9 and earlier Palo Alto Networks PAN-OS versions 4.1.3 and earlier Description A vulnerability exists in the device-management command-line interface,...

PT-2012-6289

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.0.x and earlier are not affected, but the following are: PAN-OS versions 4.0.0 through 4.0.8 PAN-OS versions 4.1.0 through 4.1.1 Description The device-management command-line interface allows remote...

PT-2012-6288

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.0.x and earlier are not affected, but the following are: PAN-OS versions 4.0.0 through 4.0.7 PAN-OS versions 4.1.0 Description A vulnerability exists in the device-management command-line interface, allowin...

PT-2012-6280

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.9 and earlier Palo Alto Networks PAN-OS versions 4.0.4 and earlier Description A vulnerability exists in the device-management command-line interface, allowing remote authenticated administrators to execu...

PT-2012-6283

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.10 and earlier Palo Alto Networks PAN-OS versions 4.0.7 and earlier Palo Alto Networks PAN-OS versions 4.1.0 and earlier Description A vulnerability exists in the device-management command-line interface,...

PT-2012-6287

Name of the Vulnerable Software and Affected Versions PAN-OS versions 4.0.0 through 4.0.7 Description A vulnerability exists in the device-management command-line interface, allowing remote authenticated users to execute arbitrary commands. This can result in arbitrary command execution and total...

PT-2012-6291

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.9 and earlier Palo Alto Networks PAN-OS versions 4.0.3 and earlier Description A vulnerability exists in the device-management command-line interface, allowing remote authenticated users to execute...