PolarSSL 'asn1parse.c' Remote Code Execution Vulnerability

PolarSSL source code is the smallest ssl code base. Efficient, easy to port and integrate. Especially suitable for embedded applications. A remote code execution vulnerability exists in PolarSSL 'asn1parse.c', which can be exploited by an attacker to execute arbitrary code in the context of an...

Polar Helpdesk 3.0 Cookie Based Authentication System Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10775/info Polar Helpdesk is reported prone to a cookie based authentication system bypass vulnerability. It is reported that the authentication and privilege system for Polar Helpdesk is based entirely on the values read...

PT-2013-1213 · Openssl +6 · Polarssl +8

Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 1.3.0 OpenJDK versions prior to 1.3.0 PolarSSL versions prior to 1.3.0 Description: The issue concerns the TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, which do not properly consider timing side-channe...

CVE-2004-2736

Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cookie...

CVE-2004-2736

Polar HelpDesk 3.0 is affected by an authentication bypass vulnerability where an attacker can bypass login by manipulating the UserId and UserType cookie. The issue allows remote access without valid credentials and, per the Nessus entry, may enable administrative rights on the remote system. Th...

Polar HelpDesk Authentication Bypass

The remote server is running Polar HelpDesk. There is a flaw in the remote version of this software that may allow an attacker to bypass the authentication mechanism of this software and gain administrative access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. UNTESTED...

polarHelp.txt

Polar HelpDesk Inadequate Security Checks Summary Polar HelpDesk is "a software solution for implementation of a help desk support system on your web site". We found the product to inadequately verify whether the user logged on to the system provided username and password or the privileges that t...

[NT] Polar HelpDesk Inadequate Security Checks

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Polar Helpdesk 3.0 - Cookie Based Authentication Bypass

source: https://www.securityfocus.com/bid/10775/info Polar Helpdesk is reported prone to a cookie based authentication system bypass vulnerability. It is reported that the authentication and privilege system for Polar Helpdesk is based entirely on the values read from a cookie that is saved on th...