CVE-2005-4197

The vulnerability CVE-2005-4197 affects Nortel SSL VPN 4.2.1.6, specifically the tunnelform.yaws component. The issue allows remote attackers to execute arbitrary commands via a crafted link in the a parameter, and these commands run with extra privileges inside a cryptographically signed Java Ap...

Nortel SSL VPN multiple vulnerabilities

Crossite scripting, code execution...

CVE-2005-4197: Undefined Security Weakness

tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is executed with extra privileges in a cryptographically signed Java Applet...

SEC Consult SA-20051211-0 :: Nortel SSL VPN Cross Site Scripting/Command Execution

SEC-CONSULT Security Advisory 20051212-0 ========================================================================== title: Nortel SSL VPN Cross Site Scripting/Command Execution program: Nortel SSL VPN vulnerable version: 4.2.1.6 homepage: www.nortel.com found: 2005-05-30 by: Daniel Fabian /...

Nortel SSL VPN 4.2.1.6 - Web Interface Input Validation

source: https://www.securityfocus.com/bid/15798/info Nortel SSL VPN is prone to an input validation vulnerability. This issue could be exploited to cause arbitrary commands to be executed on a user's computer. Cross-site scripting attacks are also possible. Nortel SSL VPN 4.2.1.6 is vulnerable to...

Nortel SSL VPN 4.2.1.6 - Web Interface Input Validation

Nortel SSL VPN 4.2.1.6 - Web Interface Input Validation source: https://www.securityfocus.com/bid/15798/info Nortel SSL VPN is prone to an input validation vulnerability. This issue could be exploited to cause arbitrary commands to be executed on a user's computer. Cross-site scripting attacks ar...

Aventail ASAP detection

The remote host seems to be an Aventail SSL VPN appliance, connections are allowed to the web console management. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. In addition to this, an attacker may attempt to s...

Aventail ASAP Detection (HTTP)

HTTP based detection of Aventail SSL VPN appliance. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Aventail ASAP Platform Management Console Detection

The remote host seems to be an Aventail SSL VPN appliance, and it allows connections to its web console management. Letting attackers know that you are using such a device will help them to focus their attacks or will make them change their strategy. In addition to this, an attacker may attempt a...

03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance

TITLE: 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance SUMMARY Cross Site Scripting bug in the 'delhomepage.cgi' CGI binary in the NetScreen-SA 5000 Series SSL VPN appliance. DETAILS There exists a cross-site scripting bug in 'row' parameter of the 'delhomepage.cgi' CGI binary...