CVE-2009-2865

Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express CME component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka B...

Buffer overflow

Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express CME component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka B...

CVE-2009-2865

CVE-2009-2865 reports a buffer overflow in the login portion of Cisco CME’s Extension Mobility, allowing remote attackers to trigger arbitrary code execution or DoS via crafted HTTP requests. The vulnerability affects Cisco IOS CME with Extension Mobility; exploitation requires HTTP requests from...

CVE-2009-2865

Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express CME component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka B...

CVE-2009-2865: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express CME component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka B...

Cisco Security Advisory: Cisco Unified Communications Manager Express Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Express Vulnerability Advisory ID: cisco-sa-20090923-cme Revision 1.0 For Public Release 2009 September 23 +--------------------------------------------------------------------- Summary...

Code injection

The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to 1 read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName 1.3.6.1.6.3.18.1.1.1.2 or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName 1.3.6.1.6.3.16.1.2.1.3 with...

CVE-2008-7095

The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to 1 read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName 1.3.6.1.6.3.18.1.1.1.2 or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName 1.3.6.1.6.3.16.1.2.1.3 with...

CVE-2008-7095

The CVE-2008-7095 entry affects ArubaOS 3.3.2.6 on Aruba Mobility Controller, where the SNMP daemon does not restrict SNMP access. This allows remote attackers to read SNMP data: (1) all community strings via SNMP-COMMUNITY-MIB::snmpCommunityName or vacmGroupName via SNMP-VIEW-BASED-ACM-MIB with ...

CVE-2008-7095: Undefined Security Weakness

The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to 1 read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName 1.3.6.1.6.3.18.1.1.1.2 or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName 1.3.6.1.6.3.16.1.2.1.3 with...

CVE-2008-7023

Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authentication. NOTE: this is only a vulnerability when the administrator does not follow recommendations in...

CVE-2008-7023

The CVE-2008-7023 entry describes an authentication bypass in Aruba Mobility Controller (ArubaOS 3.3.1.16 and possibly other versions) caused by the use of the same default X.509 certificate across installations. This enables remote bypass of authentication. No exploitation details or remediation...

CVE-2008-7023

Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authentication. NOTE: this is only a vulnerability when the administrator does not follow recommendations in...

CVE-2008-7023: Undefined Security Weakness

Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authentication. NOTE: this is only a vulnerability when the administrator does not follow recommendations in...

Update Protection against Cisco IOS Administrative Interface HTTP Authentication

Cisco Wireless LAN Controllers WLCs are responsible for system-wide wireless LAN functions, such as security policies, intrusion prevention, RF management, quality of service QoS, and mobility. An attacker with access to the administrative web interface via HTTP or HTTPS may cause the device to...

Aruba Mobility Controller基于公钥SSH认证绕过安全限制漏洞

BUGTRAQ ID: 34711 Aruba Mobility Controller可为企业提供移动接入解决方案。 Aruba Mobility Controller允许使用SSH访问控制器的用户通过公钥进行认证。基于密钥的SSH认证组件中的安全漏洞允许用户获得对Aruba Mobility Controller管理帐号的非授权SSH访问。请注意这种认证方式不是默认的，必须手动配置。 Aruba Networks Mobility Controllers 3.3.2.x Aruba Networks Mobility Controllers 3.3.1.x Aruba Networks...

Aruba Advisory ID: AID-42309 Management User Authentication Bypass Vulnerability When Using Public Key Based SSH Authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aruba Networks Security Advisory Title: Management User Authentication Bypass Vulnerability When Using Public Key Based SSH Authentication. Aruba Advisory ID: AID-42309 Revision: 1.0 For Public Release on 4/23/2009...

Aruba Mobility Controller unauthorized access

Vulnerability in SSH key check allows unauthenticated SSH access to device...

Mobile viruses hampered by lack of dominant mobile OS

Malware that attacks mobile phones and other handheld devices has been the Next Big Threat for most of the last decade. And much like the Year of PKI, it’s never really materialized. Security experts have postulated that this is mainly because there’s not enough valuable data on these devices to...

Authentication flaw

Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a denial of service device crash via a malformed Extensible Authentication Protocol EAP frame...