Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistanc...

CVE-2007-5383

The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows remote attackers on an intranet to bypass authentication and gain administrative access via vectors including a '/' slash character at the end of the PATHINFO to cgi/b, aka "double-slash auth bypass....

CVE-2007-5384

Multiple cross-site request forgery CSRF vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistanc...

CVE-2007-5385

Multiple cross-site scripting XSS vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-5385

Technical details about CVE-2007-5385 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2007-5384

CVE-2007-5384 involves CSRF flaws in the Thomson/Alcatel SpeedTouch 7G router (used by BT Home Hub 6.2.6.B and earlier). The vulnerabilities allow remote attackers to perform administrator actions via unspecified POST requests, demonstrated by enabling an inbound remote‑assistance HTTPS session o...

CVE-2007-5385: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-5384: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistanc...

CVE-2007-5383: Improper Authentication

The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows remote attackers on an intranet to bypass authentication and gain administrative access via vectors including a '/' slash character at the end of the PATHINFO to cgi/b, aka "double-slash auth bypass....

BT Home Flub: Pwnin the BT Home Hub

http://www.gnucitizen.org/blog/bt-home-flub-pwnin-the-bt-home-hub The BT Home Hub, which is probably the most popular home router in the UK, is susceptible to critical vulnerabilities. BT's plan is to sneak one of this boxes into every UK home. Not only does the BT Home Hub support broadband but...

Symantec Mail Security for SMTP libdayzero.dll Executable Parsing DoS

Symantec Mail Security for SMTP, which provides antispam and antivirus protection for the IIS SMTP Service, is installed on the remote Windows host. The version of Symantec Mail Security for SMTP installed on the remote host contains boundary errors in its detection of executable packers in...

Code injection

libdayzero.dll in the Filter Hub Service filter-hub.exe in Symantec Mail Security for SMTP before 5.0.1 Patch 181 and Mail Security Appliance before 5.0.0-36 allows remote attackers to cause a denial of service crash via a crafted executable attachment in an e-mail, involving the detection of...

CVE-2007-1792

libdayzero.dll in the Filter Hub Service filter-hub.exe in Symantec Mail Security for SMTP before 5.0.1 Patch 181 and Mail Security Appliance before 5.0.0-36 allows remote attackers to cause a denial of service crash via a crafted executable attachment in an e-mail, involving the detection of...

CVE-2007-1792

libdayzero.dll in the Filter Hub Service filter-hub.exe in Symantec Mail Security for SMTP before 5.0.1 Patch 181 and Mail Security Appliance before 5.0.0-36 allows remote attackers to cause a denial of service crash via a crafted executable attachment in an e-mail, involving the detection of...

CVE-2007-1792

The CVE-2007-1792 issue affects Symantec Mail Security for SMTP and its SMS Filter Hub (filter-hub.exe) where libdayzero.dll fails to safely parse executable packers. Remote attackers can send an email with a crafted executable attachment that triggers boundary errors when detecting PE-Shield v0....

CVE-2006-6810

Unspecified vulnerability in the clearuserlist function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service application crash via crafted network traffic, which triggers memory corruption...

CVE-2006-6810

Unspecified vulnerability in the clearuserlist function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service application crash via crafted network traffic, which triggers memory corruption...

CVE-2006-6810

DB Hub 0.3 contains an unspecified vulnerability in the clear_user_list function (src/main.c) that allows remote attackers to cause an application crash via crafted network traffic, due to memory corruption. The available sources do not specify affected subcomponents, versions beyond 0.3, exploit...

CVE-2006-6810: Undefined Security Weakness

Unspecified vulnerability in the clearuserlist function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service application crash via crafted network traffic, which triggers memory corruption...