RSA Authentication Agent for IIS Authentication Bypass Vulnerability

RSA Authentication Agent for IIS is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ESA-2013-067: RSA® Authentication Agent for Web for Internet Information Services (IIS) Security Controls Bypass Vulnerability

ESA-2013-067.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-067: RSA® Authentication Agent for Web for Internet Information Services IIS Security Controls Bypass Vulnerability EMC Identifier: ESA-2013-067 CVE Identifier: CVE-2013-3280 Severity Rating: CVSS v2 Base Score: 9.0...

CVE-2013-3280

EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash...

Design/Logic Flaw

EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash...

CVE-2013-3280

CVE-2013-3280 concerns the RSA Authentication Agent for Web for IIS (RSA Authentication Agent for IIS) in the 7.1.x line (pre-7.1.2). The vulnerability stems from a fail-open design that can allow an attacker to bypass access controls by triggering an agent crash, potentially leaving protected re...

CVE-2000-0478

Norton Antivirus for Exchange (NavExchange) can enter a fail-open state, causing antivirus checks to fail and allowing viruses to pass through the server. The vulnerability, CVE-2000-0478, is documented across CVE/NVD records with a MEDIUM base score on CVSS v2 (AV:N/AC:L/Au:N/C:N/I:P/A:N). The c...

CVE-2000-0478

In some cases, Norton Antivirus for Exchange NavExchange enters a "fail-open" state which allows viruses to pass through the server...

Vulnerabilities in Norton Antivirus for Exchange

Norton Antivirus for Exchange NavExchange, a product of Symantec, suffers from two major problems, with impact described below. The system tested was version 1.5. The most recent version is 2.0, which I have not had the opportunity to test, but based on information from Symantec I believe 2.0 is...

CVE-2000-0478

In some cases, Norton Antivirus for Exchange NavExchange enters a "fail-open" state which allows viruses to pass through the server...

Performance Copilot for IRIX 6.5

Hi All, I found a vulnerability in the Performance Copilot for IRIX 6.5 Summary: /usr/etc/pmcd has a fail-open security model, allowing anyone to perform queries by default. This exposes potentially sensitive information ps -efl, df, etc to anyone on the net. pmcd will accept garbage connections...

DUO-PSA-2019-001: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2019-001 Publication Date: 2019-04-16 Revision Date: 2019-04-16 Status: Confirmed, Fixed Document Revision: 1 Overview A Duo customer has identified an issue where Duo Authentication for Windows Logon could incorrectly enforce "failmode" followin...