CVE-2005-4583

Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows "remote code execution in the Web browser" via unspecified attack vectors, probably related to cross-site scripting XSS...

CISCO Secure ACS Management Interface Login Overflow

It may be possible to make this Cisco Secure ACS web serverlogin.exe execute arbitrary code by sending it a too long login url. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2005-3182

CVE-2005-3182 : A buffer overflow in the HTTP management interface of GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code by sending overly long HTTP headers (notably Host and Accept ). The issue is described as occurring in the web/HTTP management component, with the vendor no...

CVE-2005-3182

Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as 1 Host and 2 Accept in HTTP requests. NOTE: the vendor suggests that this issues is "in an underlying Microsoft technology" which, if true, could me...

ECIrouter.txt

Title: ECI router verification bypass and DoS Date: 24/07/2005 Impact: Log in verification bypass Vendors Status: Not contacted they were mean to me Overview: The B-FOCuS Router 312+ provides users with a reliable and secured ADSL2+ connection to the Internet. The 312+ has a single Ethernet port...

Siemens SANTIS 50 Authentication Vulnerability

Secure Network - Security Research Advisory Vuln name: Siemens SANTIS 50 Authentication Vulnerability Systems affected: Siemens Santis 50 Wireless router firmware version: 4.2.8.0 Likely to be affected: Ericsson HN294dp Dynalink RTA300W Severity: medium risk Local/Remote: Remote limited to the LA...

ViRobot Linux Server addschup Multiple Overflows

The remote host is running ViRobot Linux Server, a commercial anti- virus product for Linux. According to its banner, the installed version of ViRobot Linux Server suffers from a remote buffer overflow vulnerability in its web-based management interface. By passing specially crafted data through...

CVE-2004-1789

Cross-site scripting XSS vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web script or HTML via the rpAuth1 page...

CVE-2004-1791

The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access...

CVE-2004-1789

CVE-2004-1789 affects ZyWALL 10 (firmware 4.07) and is a reflected XSS in the web management interface via the rpAuth_1 page. The underlying cause is improper handling of user-supplied input in the web interface, allowing remote attackers to inject arbitrary script/HTML. The provided documents do...

CVE-2004-1790

This CVE affects Edimax AR-6004 ADSL Routers. The issue is a Cross-site scripting (XSS) vulnerability in the web management interface, allowing remote attackers to inject arbitrary web script or HTML through the URL. The provided documents do not specify affected firmware versions, exact vulnerab...

CVE-2004-0945

The web management interface for Mitel 3300 Integrated Communications Platform ICP before 4.2.2.11 allows remote authenticated users to cause a denial of service resource exhaustion via a large number of active sessions, which exceeds ICP's maximum...

CVE-2004-0945

The web management interface for Mitel 3300 Integrated Communications Platform ICP before 4.2.2.11 allows remote authenticated users to cause a denial of service resource exhaustion via a large number of active sessions, which exceeds ICP's maximum...

CVE-2004-0945

The CVE covers Mitel 3300 ICP web management interface prior to version 4.2.2.11. The vulnerability allows remote authenticated users to exhaust resources by opening a large number of active sessions, exceeding the system’s maximum and causing a denial of service. The underlying cause is uncontro...

CVE-2004-0944

The web management interface for Mitel 3300 Integrated Communications Platform ICP before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie...

[VulnWatch] Corsaire Security Advisory - Mitel 3300 ICP web interface session hijacking issue

-- Corsaire Security Advisory -- Title: Mitel 3300 ICP web interface session hijacking issue Date: 17.08.04 Application: Mitel Web Management Interface Environment: Mitel 3300 ICP prior to 4.2.2.11 Author: Stephen de Vries [email protected] Audience: General distribution Reference: c040817-002...

CVE-2004-1637

The CVE-2004-1637 entry concerns the Hawking Technologies HAR11A modem/router. The affected component is the device itself, where remote attackers can connect to port 254 to view a management interface and information on established connections, exposing sensitive information. The NVD metrics ass...

CVE-2004-2691

Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service device reset via a crafted request to the web management interface. NOTE: the provenance of this information is unknown; details are obtained from...

CVE-2004-1789

Cross-site scripting XSS vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web script or HTML via the rpAuth1 page...

Hawking Technologies HAR11A router considered insecure

The Hawking Technologies HAR11A modem//router is shipped insecure. It suffers from the infamous Conexant security hole http://www.chiark.greenend.org.uk/theom/security/origo.html . You can find lots of references to this in a google search for "conexant port 254". You can see the Hawking...