CVE-2012-5417

Cisco Prime Data Center Network Manager DCNM before 6.11 does not properly restrict access to certain JBoss MainDeployer functionality, which allows remote attackers to execute arbitrary commands via JBoss Application Server Remote Method Invocation RMI services, aka Bug ID CSCtz44924...

CVE-2012-5417

CVE-2012-5417 affects Cisco Prime Data Center Network Manager (DCNM) up to version 6.1(1). The issue is improper access restriction on JBoss MainDeployer functionality, enabling remote attackers to execute arbitrary commands via JBoss Application Server RMI services (Bug CSCtz44924). The NVD note...

PT-2012-5973

Name of the Vulnerable Software and Affected Versions Cisco Prime Data Center Network Manager DCNM versions prior to 6.11 Description The issue allows remote attackers to execute arbitrary commands via JBoss Application Server Remote Method Invocation RMI services due to improper access restricti...

CVE-2012-5417: Undefined Security Weakness

Cisco Prime Data Center Network Manager DCNM before 6.11 does not properly restrict access to certain JBoss MainDeployer functionality, which allows remote attackers to execute arbitrary commands via JBoss Application Server Remote Method Invocation RMI services, aka Bug ID CSCtz44924...

Cisco Releases Security Advisory for Cisco Prime Data Center Network Manager

Cisco Prime Data Center Network Manager DCNM contains a remote command execution vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary commands on the computer that is running the Cisco Prime DCNM application. Cisco has released software updates that address this...

Cisco Patches Vulnerabilities in Data Center and Web Conferencing Products

Cisco is warning its customers about a remote command execution vulnerability in its Cisco Prime Data Center Network Manager.The product manages Ethernet and storage networks and troubleshoots for performance issues on Cisco products running NX-OS software. Versions prior to 6.1.1 are vulnerable ...

Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability

Cisco Prime Data Center Network Manager DCNM contains a remote command execution vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands on the computer that is running the Cisco Prime DCNM application. Cisco has released software updates that address this...

Cisco ASA-CX Context-Aware Security appliance / Cisco Prime Security Manager DoS

File resources exhaustion...

Cisco Prime Security Manager Web Detection

The web interface for Cisco Prime Security Manager PRSM was detected on the remote host. PRSM is the management tool used for Cisco ASA CX. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62181; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

Cisco Prime Security Manager Log Retention DoS (cisco-sa-20120912-asacx)

According to its self-reported version number, the version of Cisco Prime Security Manager running on the remote is affected by a denial of service vulnerability. Making unspecified requests can cause log files to exhaust the /var/log partition. A remote, unauthenticated attacker can exploit this...

PT-2012-5526

Name of the Vulnerable Software and Affected Versions Cisco ASA-CX Context-Aware Security module versions prior to 9.0.2-103 Prime Security Manager versions prior to 9.0.2-103 Description The issue allows remote attackers to cause a denial of service, resulting in disk consumption and application...

CVE-2012-4629: Undefined Security Weakness

The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances ASA devices, and Prime Security Manager aka PRSM before 9.0.2-103, allows remote attackers to cause a denial of service disk consumption and application hang via unspecified IPv4 packets that trigger...

Blackberry Cross Site Scripting

Exploit Title: blackberry xss Date: 15.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ------------------------------------------------------------------ http://es.blackberry.com/newsroom/success/casestudy.jsp?title=TheOfficeoftheSpanishPrimeMinister&case= "...

Debian Security Advisory DSA 2502-1 (python-crypto)

The remote host is missing an update to python-crypto announced via advisory DSA 2502-1. OpenVAS Vulnerability Test $Id: deb25021.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2502-1 python-crypto Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft...

FreeBSD Ports: py-pycrypto

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Mandriva Update for python-pycrypto MDVSA-2012:117 (python-pycrypto)

Check for the Version of python-pycrypto OpenVAS Vulnerability Test Mandriva Update for python-pycrypto MDVSA-2012:117 python-pycrypto Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Mandriva Update for python-pycrypto MDVSA-2012:117 (python-pycrypto)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Design/Logic Flaw

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key...

PYSEC-2012-16

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key...

CVE-2012-2417

CVE-2012-2417 : PyCrypto before 2.6 generates ElGamal keys using inappropriate prime numbers, reducing the signature/public key space and enabling brute-force attacks to derive the private key. Connected sources confirm the issue affects PyCrypto ElGamal key generation and that fixed versions exi...