5894 matches found
SOL6922 - Decimal-encoded IP address circumvents Accessibility Scope
It is possible to bypass the Deny list configured in the Accessibility Scope section of the Portal Access: Web Applications: Master Group Settings page using a URL with a decimal-encoded IP address. When you log in to the FirePass Webtop, you can enter a URL into the Webtop Address Bar if the...
SOL6920 - Cross-site scripting vulnerabilities
Multiple cross-site scripting XSS vulnerabilities exist in the FirePass Administrative Console pages. The affected FirePass URLs fail to fully sanitize certain URL arguments before the requested web page content is returned to the browser. It is possible for an attacker to create web pages, email...
CVE-2006-5416
Cross-site scripting XSS vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the sid parameter...
CVE-2006-5416
Cross-site scripting XSS vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the sid parameter...
CVE-2006-5416
CVE-2006-5416 describes a cross-site scripting (XSS) vulnerability in F5 Networks FirePass 1000 SSL VPN, affecting version 5.5 and possibly earlier. The flaw is in my.acctab.php3 and can be exploited by remote attackers via the sid parameter to inject arbitrary web script or HTML. According to th...
F5 Firepass crossite scripting
my.acctab.php3 sid parameter crossite scripting...
SOL6634 - pam_ldap vulnerability - CVE-2005-2641
This security advisory describes a pamldap vulnerability. Clients who are referred to a different server than the server on which they were originally authenticated, with a different TLS encryption requirement, could possibly bypass the new server's TLS requirements. Information about this adviso...
PR06-03b: F5 Firepass 1000 SSL VPN version 5.5 vulnerable to Cross-Site Scripting
The F5 FirePass 1000 SSL VPN application version 5.5, and possibly earlier versions, is vulnerable to Cross-Site Scripting This advisory has been published following consultation with UK NISCC http://www.niscc.gov.uk The updated version of this advisory can be found on the following link...
SOL6736 - OpenSSH vulnerabilities CAN-2006-5051, CAN-2006-4924
This security advisory describes an OpenSSH Signal Handling vulnerability CVE-2006-5051. A remote attacker could possibly leverage this flaw to cause a denial of service. This security advisory also describes a denial of service bug CVE-2006-4924 in the OpenSSH sshd server. A remote attacker can...
SOL6701 - Possible logon through native RSA SecurID authentication without valid passcode
An issue with the FirePass controller could permit logins without valid RSA SecurID passcodes. Under heavy load conditions, the FirePass controller can enter into a state where an invalid password in the form of the SecurID passcode is accepted if the username is a valid user in a master group...
SOL2593 - Buffer overflow in zlib - CAN-2003-0107
Note: Versions that are not listed in this Solution have not been evaluated for vulnerability to this security advisory. For information about F5 Networks' security policy regarding evaluating older and unsupported versions of F5 Networks products, refer to SOL4602: Overview of F5 Networks securi...
OpenSSL SSL_get_shared_ciphers() vulnerable to buffer overflow
Overview A buffer overflow vulnerability in an OpenSSL library function could allow a remote attacker to execute code on an affected system. Description The OpenSSL toolkit implements the Secure Sockets Layer SSL versions 2 and 3 and Transport Layer Security TLS version 1 protocols as well as a...
SOL6612 - BIND 9: Multiple DoS vulnerabilities VU#697164 and VU#915404
This security advisory describes multiple BIND 9 denial of service vulnerabilities. For information about this advisory, refer to the Internet Systems Consortium website at the following location: F5 Networks Product Development is tracking this issue as ID 314714 formerly CR68956 and ID 264730...
SOL6592 - Cross-Site Scripting vulnerability in the logon page
A cross-site scripting XSS vulnerability exists in the FirePass logon page. The affected FirePass logout URL fails to fully sanitize URL input before the web page content is sent to the browser. It is possible for an attacker to create web pages or emails with URLs that include executable code or...
SOL6535 - Denial of service vulnerability in GnuPG - CVE-2006-3082
F5 Product Development tracked this issue as CR66994, CR66995, and CR66996 and it was fixed in BIG-IP 9.1.3, 9.3.0, and 9.4.0. For information about upgrading, refer to the BIG-IP LTM, ASM, GTM, Link Controller, or WebAccelerator release notes. F5 Product Development tracked this issue and it was...
SOL5794 - Security Advisory: Perl integer sign error in format string processing - CVE-2005-3962
Although F5 Networks products contain versions of Perl that are subject to this vulnerability, this vulnerability can only be exploited by an attacker that has root access. As a result, F5 Networks products are not considered vulnerable. Integer overflow in the format string functionality...
CVE-2006-3550
Multiple cross-site scripting XSS vulnerabilities in F5 Networks FirePass 4100 5.x allow remote attackers to inject arbitrary web script or HTML via unspecified "writable form fields and hidden fields," including "authentication frontends."...
CVE-2006-3550
Multiple cross-site scripting XSS vulnerabilities in F5 Networks FirePass 4100 5.x allow remote attackers to inject arbitrary web script or HTML via unspecified "writable form fields and hidden fields," including "authentication frontends."...
CVE-2006-3550
CVE-2006-3550 concerns multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x . The affected component is the web interface, with the flaw enabling remote attackers to inject arbitrary web script or HTML via unspecified "writable form fields and hidden fields," inclu...