WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure

source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This information may permit an attacker to enumerate the layout of the underlying...

ZYXEL ZyWALL 10 Management Interface - Cross-Site Scripting

ZYXEL ZyWALL 10 Management Interface - Cross-Site Scripting source: https://www.securityfocus.com/bid/9373/info ZyWALL 10 firewalls are prone to cross-site scripting attacks via the web management interface of affected devices. An attacker could exploit this issue by enticing a victim user to...

Edimax AR-6004 ADSL Router - Management Interface Cross-Site Scripting

Edimax AR-6004 ADSL Router - Management Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9374/info Edimax AR-6004 ADSL Routers are prone to cross-site scripting attacks via the web management interface of affected devices. An attacker could exploit this issue by enticing a...

ZYXEL ZyWALL 10 Management Interface - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9373/info ZyWALL 10 firewalls are prone to cross-site scripting attacks via the web management interface of affected devices. An attacker could exploit this issue by enticing a victim user to follow a malicious link to a site hosting the software that...

Edimax AR-6004 ADSL Router - Management Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9374/info Edimax AR-6004 ADSL Routers are prone to cross-site scripting attacks via the web management interface of affected devices. An attacker could exploit this issue by enticing a victim user to follow a malicious link to a site hosting the software...

CVE-2003-1343

Trend Micro ScanMail for Exchange SMEX before 3.81 and before 6.1 might install a back door account in smgSmxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3"...

CVE-2003-1363

The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port 9999, which allows remote attackers to mount brute force attacks on the administration console without detection...

IBM Directory Server crossite scripting

Crossite scripting in web managment interface...

IRCXPro Default Admin Password

The remote web server is running IRCXPro. It is possible to connect to the management port of this service by default : 7100 by using the default login / password combination admin / password. An attacker may use this flaw to gain the control of this server. %NASLMINLEVEL 70300 C Tenable Network...

ArGoSoft 1.8.x - Authentication Bypass

ArGoSoft 1.8.x - Authentication Bypass source: https://www.securityfocus.com/bid/7608/info A vulnerability has been reported for ArGoSoft Mail Server FreeWare version. The problem occurs due to the FreeWare version of ArGoSoft failing to carry out sufficient authentication before granting access ...

ArGoSoft 1.8.x - Authentication Bypass

source: https://www.securityfocus.com/bid/7608/info A vulnerability has been reported for ArGoSoft Mail Server FreeWare version. The problem occurs due to the FreeWare version of ArGoSoft failing to carry out sufficient authentication before granting access to the user management interface. As a...

NSFOCUS SA2003-04 : Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-04 Topic: Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS Release Date: 2003-04-24 CVE CAN ID: CAN-2003-0210 Affected system: =================== Cisco Secure ACS 2.6.4 for Windows a...

CVE-2002-1547

Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell SCS management interface, as demonstrated via certain CRC32 exploits, a different vulnerability than CVE-2001-0144...

iDEFENSE Security Advisory 11.19.02a: Denial of Service Vulnerability in Linksys Cable/DSL Routers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 11.19.02a: http://www.idefense.com/advisory/11.19.02a.txt Denial of Service Vulnerability in Linksys Cable/DSL Routers November 19, 2002 I. BACKGROUND Linksys Group Inc. currently sells several broadband router products,...

CVE-2002-0792

The CVE-2002-0792 entry covers the Cisco Content Service Switch (CSS) 11000 series web management interface vulnerability. Reports from NVD and CERT indicate that remote attackers can trigger a denial-of-service by sending either an HTTPS POST request or malformed XML data, causing the device to ...

Cisco Content Service Switch reboots when HTTPS POST request is sent to web management interface

Overview The Cisco Content Service Switch contains a denial-of-service vulnerability that allows remote attackers to reboot affected devices. Description The Cisco Content Service Switch CSS products include support for the session and application layers. This additional functionality allows a CS...

Cisco Content Service Switch DoS

Malfromed POST request to web managment interface can cause device to reboot...

Security Advisory: Content Service Switch HTTP Processing Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Content Service Switch HTTP Processing Vulnerabilities Revision 1.0: INTERIM For Public Release 2002 May 15 18:00 GMT - ------------------------------------------------------------------------------- Please provide your feedback on this...

CVE-2001-0711

Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface ILMI SNMP community string...

CVE-2001-0270

Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed packet with the SYN-FIN and More Fragments attributes set...