777 matches found
Symantec IM Manager Administrator Console Code Injection (CVE-2011-0554)
Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. Symantec IM Manager allows the definition of...
Symantec IM Manager Administrator Interface SQL injection (CVE-2011-0553)
Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. An SQL injection vulnerability has been reporte...
Symantec IM Manager IMAdminLDAPConfig.asp SQL injection
Added: 10/31/2011 CVE: CVE-2011-0553 BID: 49738 OSVDB: 75984 Background Symantec IM Manager is a solution for managing and securing instant-messaging traffic in an enterprise. Problem An SQL injection vulnerability in IMAdminLDAPConfig.asp allows remote, authenticated attackers to execute arbitra...
Symantec IM Manager IMAdminLDAPConfig.asp SQL injection
Added: 10/31/2011 CVE: CVE-2011-0553 BID: 49738 OSVDB: 75984 Background Symantec IM Manager is a solution for managing and securing instant-messaging traffic in an enterprise. Problem An SQL injection vulnerability in IMAdminLDAPConfig.asp allows remote, authenticated attackers to execute arbitra...
Symantec IM Manager IMAdminLDAPConfig.asp SQL injection
Added: 10/31/2011 CVE: CVE-2011-0553 BID: 49738 OSVDB: 75984 Background Symantec IM Manager is a solution for managing and securing instant-messaging traffic in an enterprise. Problem An SQL injection vulnerability in IMAdminLDAPConfig.asp allows remote, authenticated attackers to execute arbitra...
Symantec IM Manager IMAdminLDAPConfig.asp SQL injection
Added: 10/31/2011 CVE: CVE-2011-0553 BID: 49738 OSVDB: 75984 Background Symantec IM Manager is a solution for managing and securing instant-messaging traffic in an enterprise. Problem An SQL injection vulnerability in IMAdminLDAPConfig.asp allows remote, authenticated attackers to execute arbitra...
Cisco ASA 5500 Series Multiple Vulnerabilities (cisco-sa-20111005-asa)
The remote Cisco ASA is missing a security patch and may be affected by the following issues : - When MSN IM inspection is enabled, inspecting malformed transit traffic could cause the device to reload. CVE-2011-3304 - TACACS+ authentication can be bypassed by an attacker with access between the...
Federal Trojan's Got A "Big Brother"
About two weeks ago, the German Chaos Computer Club CCC has published an analysis report of a backdoor trojan that they claim had been used by German police during investigations in order to capture VoIP and IM communication on a suspect’s PC. Our friends over at F-Secure published a blog post la...
Symantec IM Manager ProcessAction Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Symantec IM Manager web interface exposed by default on TCP port 80. The code ...
Symantec IM Manager Multiple Vulnerabilities
This host is installed with Symantec IM Manager and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbsymantecimmanagermultvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ Symantec IM Manager Multiple Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone...
Symantec IM Manager <= 8.4.17 Multiple Vulnerabilities
Symantec IM Manager is prone to multiple vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM
I recently discovered that various Qt applications including KSSL the KDE class library responsible for SSL negotiation, Rekonq, Arora and Psi IM are vulnerable to UI spoofing due to their use of QLabel objects to render externally controlled security critical information. The primary area of...
Symantec IM Manager < 8.4.18 Multiple Vulnerabilities (SYM11-012)
The version of Symantec IM Manager running on the remote host is earlier than 8.4.18. Such versions are affected by the following vulnerabilities in the management console : - Multiple XSS. CVE-2011-0552 - An unspecified SQL injection. CVE-2011-0553 - An unspecified code injection. CVE-2011-0554 ...
CVE-2011-0553
SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-0552
Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the 1 refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the 2 nav or 3 menuitem parameter to...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the 1 refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the 2 nav or 3 menuitem parameter to...
Sql injection
SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Code injection
The management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "code injection issue."...
CVE-2011-0554
Symantec IM Manager (web console) is affected by CVE-2011-0554. The vulnerability exists in the management console/web interface and stems from improper validation of HTTP parameters (rdProcess), allowing remote attackers to execute arbitrary code. Exploitation can occur via crafted requests sent...
