CVE-2008-0556

Cross-site request forgery CSRF vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier versions, allows remote attackers to perform unauthorized actions as authorized users via a link or IMG tag to RAServer...

CVE-2008-0556

CVE-2008-0556 describes a cross-site request forgery (CSRF) vulnerability in the OpenCA PKI project, affecting version 0.9.2.5 and possibly earlier. The vulnerability allows an attacker to coerce an authenticated administrator to perform unauthorized actions on the Certification Authority by luri...

CVE-2008-0556: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier versions, allows remote attackers to perform unauthorized actions as authorized users via a link or IMG tag to RAServer...

Buffer overflow

Buffer overflow in the Configuration Checker ConfigChk ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method...

CVE-2007-1083

Buffer overflow in the Configuration Checker ConfigChk ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method...

CVE-2007-1083: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Configuration Checker ConfigChk ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method...

CVE-2007-1083

The CVE-2007-1083 issue affects the VeriSign Configuration Checker ActiveX control (VSCnfChk.dll, version 2.0.0.2) used in VeriSign PKI products. The Nessus entry confirms a stack/buffer overflow in VerCompare() that can allow remote code execution when a user is tricked into loading a crafted we...

CVE-2006-3551

NCP Secure Enterprise Client aka VPN/PKI client 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and...

CVE-2006-3551

CVE-2006-3551 affects NCP Secure Enterprise Client (VPN/PKI client) 8.30 Build 59 and possibly earlier. When both the Link Firewall and Personal Firewall are configured to block all inbound and outbound traffic, the client could be leveraged to send inbound UDP traffic from source port 67 to dest...

CVE-2006-2078

Multiple unspecified vulnerabilities in multiple FITELnet products, including FITELnet-F40, F80, F100, F120, F1000, and E20/E30, allow remote attackers to cause a denial of service via crafted DNS messages that trigger errors in 1 ProxyDNS or 2 PKI-Resolver, as demonstrated by the OUSPG PROTOS DN...

CVE-2006-2078: Undefined Security Weakness

Multiple unspecified vulnerabilities in multiple FITELnet products, including FITELnet-F40, F80, F100, F120, F1000, and E20/E30, allow remote attackers to cause a denial of service via crafted DNS messages that trigger errors in 1 ProxyDNS or 2 PKI-Resolver, as demonstrated by the OUSPG PROTOS DN...

Cross site scripting

Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...

CVE-2006-1344

Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...

CVE-2006-1344

CVE-2006-1344 describes a cross-site scripting (XSS) flaw in VeriSign’s haydn.exe CGI used by MPKI 6.0. The vulnerability stems from lack of input validation in the VHTML_FILE parameter, allowing an attacker to inject arbitrary HTML/JavaScript that is returned to the user’s browser. CORE Security...

CVE-2006-1344

Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...

CVE-2006-1344: Undefined Security Weakness

Cross-site scripting XSS vulnerability in VeriSign haydn.exe, as used in Managed PKI MPKI 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTMLFILE parameter...

Multipl NCP Secure Communications VPN / PKI client security vulnerabilities

Local buffer overflows and privilege escalations, remote DoS...

CVE-2003-1005

CVE-2003-1005 affects Mac OS X 10.2.8 and 10.3.2 PKI functionality. The vulnerability allows remote attackers to cause a denial of service (service crash) by sending malformed ASN.1 sequences. Exploitation is indicated as network-based with low complexity and no authentication required, resulting...

CVE-2003-1005

The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service service crash via malformed ASN.1 sequences...

CVE-2003-1005: Undefined Security Weakness

The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service service crash via malformed ASN.1 sequences...