CVE-2006-3551

NCP Secure Enterprise Client aka VPN/PKI client 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and...

CVE-2006-3551

CVE-2006-3551 affects NCP Secure Enterprise Client (VPN/PKI client) 8.30 Build 59 and possibly earlier. When both the Link Firewall and Personal Firewall are configured to block all inbound and outbound traffic, the client could be leveraged to send inbound UDP traffic from source port 67 to dest...

CVE-2006-2078

Multiple unspecified vulnerabilities in multiple FITELnet products, including FITELnet-F40, F80, F100, F120, F1000, and E20/E30, allow remote attackers to cause a denial of service via crafted DNS messages that trigger errors in 1 ProxyDNS or 2 PKI-Resolver, as demonstrated by the OUSPG PROTOS DN...

CVE-2006-1344

Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...

CVE-2006-1344

CVE-2006-1344 describes a cross-site scripting (XSS) flaw in VeriSign’s haydn.exe CGI used by MPKI 6.0. The vulnerability stems from lack of input validation in the VHTML_FILE parameter, allowing an attacker to inject arbitrary HTML/JavaScript that is returned to the user’s browser. CORE Security...

CVE-2006-1344

Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...

Multipl NCP Secure Communications VPN / PKI client security vulnerabilities

Local buffer overflows and privilege escalations, remote DoS...

CVE-2003-1005

CVE-2003-1005 affects Mac OS X 10.2.8 and 10.3.2 PKI functionality. The vulnerability allows remote attackers to cause a denial of service (service crash) by sending malformed ASN.1 sequences. Exploitation is indicated as network-based with low complexity and no authentication required, resulting...

CVE-2003-1005

The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service service crash via malformed ASN.1 sequences...

Cain & Abel sniffer buffer overflow

Heap buffer overflow on oversized PKI ID parameter...

Firewall-1 usernames detection

PKI aggressive mode replies are different for existing and non-existing usernames...

CVE-2000-0741

CVE-2000-0741 refers to a format-string vulnerability in the NAI Net Tools PKI Server’s web server component (strong.exe), version 1.0 before HotFix 3. The issue occurs when user-supplied data is passed to the server’s logging routines via a URL (notably with a .XUDA extension), enabling remote c...

CVE-2000-0739

CVE-2000-0739 concerns the NAI Net Tools PKI Server 1.0. The vulnerability is a directory traversal in the strong.exe web server component that processes enrollment HTTPS requests, allowing a remote attacker to read arbitrary files via a .. path. The issue is present before HotFix 3. This is a re...

CVE-2000-0740

Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port...

CVE-2000-0529

CVE-2000-0529 affects Net Tools PKI Server. The vulnerability permits remote denial-of-service via an excessively long HTTP request. The provided documents do not specify the exact root cause, affected versions, or remediation steps. Exploitation status or in-the-wild details are not stated in th...

CVE-2000-0529

Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request...

CVE-2000-0528

Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files...

CVE-2000-0528

The CVE-2000-0528 entry concerns the Net Tools PKI Server. The issue is that when XUDA template files do not contain absolute pathnames for other files, access is not properly restricted, potentially allowing remote attackers to access restricted resources. The provided documents do not include e...

NAI Net Tools PKI Server 1.0 - strong.exe Remote Buffer Overflow

NAI Net Tools PKI Server 1.0 - strong.exe Remote Buffer Overflow source: https://www.securityfocus.com/bid/1536/info Certain versions of Network Associates Inc.'s Net Tools PKI Public Key Infrastructure server ship with a buffer overflow vulnerability which could lead to a remote compromise of th...