1964 matches found
Palo Alto Networks PAN-OS < 4.0.14 / 4.1.x < 4.1.11 / 5.0.x < 5.0.2 Security Bypass
The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.14 / 4.1.11 / 5.0.2. It is, therefore, affected by a security bypass vulnerability due to a flaw in the App-ID cache function. A remote attacker can exploit this vulnerability to run blocked applications. C Tenable...
Palo Alto Networks PAN-OS < 3.1.10 / 4.x < 4.0.4 Multiple Command Injections
The remote host is running a version of Palo Alto Networks PAN-OS prior to 3.1.10 / 4.0.4. It is, therefore, affected by multiple command injection vulnerabilities : - A vulnerability exists that allows an unauthenticated user to inject commands as root on the device. CVE-2012-6593 /...
Palo Alto Networks PAN-OS Version Detection
Binary data paloaltoversion.nbin...
Palo Alto Networks PAN-OS 5.0.9 Multiple Vulnerabilities
The remote host is running version 5.0.9 of Palo Alto Networks PAN-OS. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists due to an inability to handle IP packets larger than 1480 bytes through an Active/Active VWire setup. An attacker can exploit...
Palo Alto Networks PAN-OS < 4.0.9 / 4.1.x < 4.1.2 Multiple Command Injections
The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.9 / 4.1.2. It is, therefore, affected by multiple command injection vulnerabilities : - A vulnerability exists that allows an authenticated user to inject arbitrary shell commands via the CLI. CVE-2012-6595 /...
Palo Alto Networks PAN-OS < 4.0.8 Multiple Vulnerabilities
The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.8. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to overly verbose error messages. An attacker can exploit this vulnerability by sending specially crafted...
Palo Alto Networks PAN-OS 5.x < 5.0.9 Multiple Vulnerabilities
The remote host is running a version of Palo Alto Networks PAN-OS 5.x prior to 5.0.9. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists due to a failure to properly enforce RADIUS users' permissions. An authenticated attacker can exploit this to...
Palo Alto Networks PAN-OS < 4.0.8 / 4.1.x < 4.1.1 Command Injection
The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.8 / 4.1.1. It is, therefore, affected by a command injection vulnerability that allows an authenticated user to inject arbitrary shell commands via the CLI. Note that the 3.0 branch is not affected by this vulnerabilit...
Palo Alto Networks PAN-OS < 3.1.12 / 4.0.x < 4.0.10 / 4.1.x < 4.1.4 Multiple Vulnerabilities
The remote host is running a version of Palo Alto Networks PAN-OS prior to 3.1.12 / 4.0.10 / 4.1.4. It is, therefore, affected by multiple vulnerabilities : - A vulnerability exists that allows an unauthenticated user to inject commands as root on the device. CVE-2012-6601 / PAN-SA-2012-0012 - A...
Palo Alto Networks PAN-OS < 3.1.11 / 4.0.x < 4.0.9 Multiple Vulnerabilities
The remote host is running a version of Palo Alto Networks PAN-OS prior to 3.1.11 / 4.0.9. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists that allows an authenticated attacker to crash the device via a specially crafted command sent to the CLI...
Palo Alto Networks PAN-OS 3.1.10 / 4.x < 4.0.5 Multiple Command Injections
The remote host is running a version of Palo Alto Networks PAN-OS prior to 3.1.10 / 4.0.5. It is, therefore, affected by multiple command injection vulnerabilities : - A vulnerability exists that allows an authenticated user to inject arbitrary shell commands via the CLI. CVE-2012-6591 /...
Palo Alto Networks PAN-OS拒绝服务及多个安全措施绕过漏洞
BUGTRAQ ID: 64627 PAN-OS用于控制 Palo Alto Networks 新一代防火墙的作业系统，它提供丰富的防火墙、管理及网路的功能。 Palo Alto Networks PAN-OS 5.0.9版本在实现上存在多个安全漏洞，成功利用后可使攻击者绕过某些安全限制或造成拒绝服务。 0 Palo Alto Network PAN-OS 5.0.9 Palo Alto Network PAN-OS 厂商补丁： Palo Alto Network ----------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Palo Alto Networks PAN-OS Firewall/Panorama Web UI Detection
Binary data paloaltowebuidetect.nbin...
Palo Alto Networks Pan-OS 5.0.8 - Multiple Vulnerabilities
Exploit for php platform in category web applications A couple of bugs exist in Palo Alto Networks PANOS These issues have been fixed in PANOS 5.0.9 . Example html source code to CSRF POST a rogue cert : 1. PA: 2. 3. 4. 5. 6. ----------------------------- 7. Content-Disposition: form-data;...
Palo Alto Networks Pan-OS 5.0.8 - Multiple Vulnerabilities
from http://thomaspollet.blogspot.be/2013/11/Palo-Alto-XSS.html : A couple of bugs exist in Palo Alto Networks PANOS These issues have been fixed in PANOS 5.0.9 . Example html source code to CSRF POST a rogue cert : 1. PA: 2. 3. 4. 5. 6. ----------------------------- 7. Content-Disposition:...
CVE-2012-6601
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983...
CVE-2012-6603
The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to bypass authentication and obtain administrator privileges via unspecified vectors, aka Ref ID 37034...
CVE-2012-6602
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 30122...