CVE-2011-1102

Cross-site scripting XSS vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to inject arbitrary web script or HTML...

CVE-2011-1103

The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to obtain sensitive information via a request to an invalid report, which reveals...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to inject arbitrary web script or HTML...

Design/Logic Flaw

The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to obtain sensitive information via a request to an invalid report, which reveals...

CVE-2011-1102

Cross-site scripting XSS vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to inject arbitrary web script or HTML...

CVE-2011-1102

CVE-2011-1102 affects the F-Secure Policy Manager WebReporting module. The vulnerability enables cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product versions include Policy Manager 7.x, 8.00 before hotfix 2, 8.1x...

CVE-2011-1103

CVE-2011-1103 affects the notmuch package in Fedora (Fedora 15–17) with updates FEDORA-2012-3312/3315 addressing a tag information disclosure flaw. Root cause: information disclosure via tag metadata. Impact stated as information disclosure; no exploitation details provided. Remediation: apply th...

CVE-2011-1103

The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to obtain sensitive information via a request to an invalid report, which reveals...

Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability Advisory ID: cisco-sa-20101027-cs Revision 1.0 For Public Release 2010 October 27 1600 UTC GMT...

McAfee Policy Manager 'naPolicyManager.dll'任意文件覆盖漏洞

Bugraq ID: 35404 McAfee ePolicy Orchestrator是一款业界领先的系统安全管理解决方案，能够帮助企业有效抵御各种恶意威胁和攻击。 McAfee Policy Manager 'naPolicyManager.dll'控件存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 问题存在于WriteTaskDataToIniFile方法中，提交恶意文件作为参数，可导致以应用程序权限覆盖系统文件。 0 McAfee Policy Manager 目前没有解决方案提供： a href="http://www.mcafee.com/"...

McAfee 3.6.0.608 naPolicyManager.dll ActiveX Arbitrary Data Write Vuln

No description provided by source. GOODFELLAS Security Research TEAM http://goodfellas.shellcode.com.ar Greetings to str0ke McAfee, Inc. 3.6.0.608 Policy Manager naPolicyManager.dll Arbitrary Data Write ============================================================================== Internal ID:...

McAfee 3.6.0.608 - naPolicyManager.dll ActiveX Arbitrary Data Write

McAfee 3.6.0.608 - naPolicyManager.dll ActiveX Arbitrary Data Write GOODFELLAS Security Research TEAM http://goodfellas.shellcode.com.ar Greetings to str0ke McAfee, Inc. 3.6.0.608 Policy Manager naPolicyManager.dll Arbitrary Data Write...

Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability Advisory ID: cisco-sa-20090520-cw http://www.cisco.com/warp/public/707/cisco-sa-20090520-cw.shtml Revision 1.0 For Public Release 2009 May 20 1600 UTC GMT Summary =======...

F-Secure Policy Manager Server < 7.0.1 'fsmsh.dll module' DoS Vulnerability

F-Secure Policy Manager Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

F-Secure Policy Manager Server fsmsh.dll module DoS

The remote host is an F-Secure Policy Manager Server. Description : The remote host is running a version a F-Secure Policy Manager Server which is vulnerable to a denial of service. A malicious user can forge a request to query a MS-DOS device name through the 'fsmsh.dll' CGI module, which will...

F-Secure Policy Manager Server fsmsh.dll module DoS

The remote host is running a version a F-Secure Policy Manager Server that is vulnerable to a denial of service. A malicious user can forge a request to query a MS-DOS device name through the 'fsmsh.dll' CGI module, which will prevent legitimate users from accessing the service using the Manager...

F-Secure Policy Manager fsmsh.dll程拒绝服务漏洞

F-Secure Policy Manager是基于WEB的策略管理器。 F-Secure Policy Manager服务器的fsmsh.dll主机模块存在安全漏洞，允许远程攻击者通过将NTFS保留的名称指定为URL文件名导致拒绝服务。 但由于该产品主要在企业内网使用，因此不太可能通过Internet发动攻击。 F-Secure Policy Manager = 7.00 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.f-secure.com/security/fsc-2007-4.shtml...

CVE-2007-2964

The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...

CVE-2007-2964

The CVE concerns F-Secure Policy Manager Server (7.00 and earlier) where the fsmsh.dll host module can be triggered to cause a denial of service (application crash) by sending URLs containing NTFS reserved words. The vulnerability is a DoS condition affecting the server via the fsmsh.dll CGI modu...

CVE-2007-2964

The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...