The vulnerability of the NameSurfer IP address management server allows a malicious actor to inject malicious code that interacts with the web server.

The vulnerability of the Nixu NameSurfer software lies in errors in the program’s code. Exploiting this vulnerability allows a malicious individual to inject malicious code into the web page displayed by the web system. This malicious code will be executed on the user’s computer when the user ope...

The vulnerability of the NameSurfer IP address management server allows a malicious actor to perform unauthorized privilege escalation within the system.

The vulnerability of the Nixu NameSurfer software lies in errors in the program’s code. Exploiting this vulnerability allows a malicious individual to unauthorizedly elevate privileges within the system by writing a path to their file into the $PATH variable, and having that application executed...

The vulnerability of the NameSurfer IP address management server allows a malicious actor to gain unauthorized access to confidential information of the target system.

The vulnerability of the Nixu NameSurfer software lies in errors that occur when working with SOAP interfaces. Exploiting this vulnerability allows a malicious individual to gain access to confidential information of the target system...

The vulnerability of the NameSurfer IP address management server allows attackers to gain access to files on the server with user namesurf privileges.

The vulnerability of the Nixu NameSurfer software lies in errors in the program’s code. Exploiting this vulnerability allows a malicious individual to gain access to files on the server with user privileges of namesurf...

Nixu NameSurfer多个安全漏洞

CVE ID:CVE-2014-0060、CVE-2014-0061、CVE-2014-0062、CVE-2014-0063、CVE-2014-0064、CVE-2014-0065、CVE-2014-0066 Nixu NameSurfer是一个实现集中地址管理覆盖的IPAM软件应用解决方案。 Nixu NameSurfer存在多个安全漏洞： 1，部分输入在使用之前缺少过滤，允许攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 2，解析XML实体时存在错误，允许攻击者利用特制的包含外部实体引用的XML文档来获取本地资源数据或消耗服务器资源。...

PT-2014-05

Name of the Vulnerable Software and Affected Versions Nixu NameSurfer affected versions not specified Description The issue is related to errors in the code of the program, allowing an attacker to exploit it and gain unauthorized privilege escalation in the system. This is achieved by writing the...

PT-2014-03

Name of the Vulnerable Software and Affected Versions Nixu NameSurfer affected versions not specified Description The issue is related to errors in the code of the Nixu NameSurfer software. Exploitation of this issue allows an attacker to access files on the server with the privileges of the...

PT-2014-02

Name of the Vulnerable Software and Affected Versions Nixu NameSurfer affected versions not specified Description The issue is related to errors occurring when working with the SOAP interface, allowing an attacker to gain access to confidential information of the target system. Recommendations At...

PT-2014-04: Single Sign-On Vulnerability in Nixu Namesurfer

The specialists of the Positive Research center have detected a Single Sign-On vulnerability in Nixu Namesurfer. All services used by the Nixu Namesurfer software PostgreSQL, Apache use the same user account to operate. Therefore, a weakness in one of the services will affect all of them. For...