[scip_Advisory 4020] Check Point Connectra R62 Login Script Injection Vulnerability

Check Point Connectra R62 Login Script Injection Vulnerability scip AG Vulnerability ID 4020 09/04/2009 http://www.scip.ch/?vuldb.4020 I. INTRODUCTION Check Point Connectra is a so-called SSL-VPN solution, which allows users to access a remote system using a regular web browser. More information ...

Juniper SSL-VPN IVE JuniperSetupDLL.dll ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the JuniperSetupDLL.dll library which is called by the JuniperSetup.ocx ActiveX control, as part of the Juniper SSL-VPN IVE appliance. By specifying an overly long string to the ProductName object parameter, the stack is overwritten. This module...

Cisco ASA Adaptive Security Appliance Software Clientless SSL VPN Rot13-Encoded Cross-Site Scripting Vulnerability

Cisco ASA Adaptive Security Appliance Software versions prior to 8.0.434, 8.1.225, and 8.2.13 that have been configured to accept Clientless SSL VPN connections contain a cross-site scripting vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary script or HTML co...

Cisco ASA Adaptive Security Appliance Clientless SSL VPN DOM Cross-Site Scripting Vulnerability

Cisco ASA Adaptive Security Appliance Software versions prior to 8.0.434, 8.1.225, and 8.2.13 that are configured to accept Clientless SSL VPN connections are affected by a cross-site scripting vulnerability. Versions 7.x are not affected. The vulnerability is due to insufficient restrictions on...

Cisco ASA Adaptive Security Appliance Clientless SSL VPN CIFS and FTP Credential Theft Vulnerability

Cisco ASA Adaptive Security Appliance Software versions prior to 8.0.434, 8.1.225, and 8.2.13 that have been configured to accept Clientless SSL VPN connections contain a vulnerability that could allow an unauthenticated, remote attacker to steal user account credentials. Versions 7.x are not...

CVE-2009-2119

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

CVE-2009-2119

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

CVE-2009-2119

CVE-2009-2119 is an XSS vulnerability in the FirePass login interface (my.logon.php3) affecting F5 FirePass SSL VPN 5.5–5.5.2 and 6.0–6.0.3. The issue allows remote attackers to inject arbitrary script/HTML via a base64-encoded xcho parameter. The root cause is insufficient sanitization of input ...

F5 FirePass 4100 crossite scripting

SSL VPN downloadplugin.php3, page backurl parameter, my.logon.php3, my.activation.php3 crossite scripting...

SonicWALL SSL-VPN登录页面远程格式串漏洞

BUGTRAQ ID: 35145 SonicWALL SSL-VPN可以为企业网络提供简单易用的VPN解决方案。 SonicWALL SSL-VPN的登录页面中存在格式串错误。如果远程攻击者向登录页面的cgi-bin/welcome/VirtualOffice组件提交了带有err参数格式串标识符的特制字符串，就可能在生成的出错消息中注入并执行任意代码。 SonicWALL SSL-VPN 2000/4000 3.5.0.4 SonicWALL SSL-VPN 200 3.0.0.8 厂商补丁： SonicWALL ---------...

SonicWALL SSL-VPN Appliance Format String Vulnerability

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 29-May-2009 Software: SonicWALL - SSL-VPN Remote Access http://www.sonicwall.com/ Description: "SonicWALL SSL VPN appliances provide small and mid-size organizations an easy-to-use, secure and...

SonicWALL Format String Vulnerability

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 29-May-2009 Software: SonicWALL - SSL-VPN Remote Access http://www.sonicwall.com/ Description: "SonicWALL SSL VPN appliances provide small and mid-size organizations an easy-to-use, secure and...

SonicWALL SSL-VPN - 'cgi-bin/welcome/VirtualOffice' Remote Format String

source: https://www.securityfocus.com/bid/35145/info Multiple SonicWALL SSL-VPN devices are prone to a remote format-string vulnerability because they fail to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Attackers may exploit th...

SonicWALL SSL-VPN - cgi-binwelcomeVirtualOffice Remote Format String

SonicWALL SSL-VPN - cgi-binwelcomeVirtualOffice Remote Format String source: https://www.securityfocus.com/bid/35145/info Multiple SonicWALL SSL-VPN devices are prone to a remote format-string vulnerability because they fail to properly sanitize user-supplied input before passing it as the format...

Microsoft IAG 2007 ActiveX控件栈缓冲区溢出漏洞

BUGTRAQ ID: 34532 CVE ID：CVE-2007-2238 CNCVE ID：CNCVE-20072238 Microsoft Intelligent Application Gateway是一款智能应用程序网关，提供SSL VPN功能。 Microsoft Whale Intelligent Application Gateway Whale客户端组件ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...

Microsoft Whale Intelligent Application Gateway Whale Client Components ActiveX control stack buffer overflows

Overview The Microsoft Whale Intelligent Application Gateway Whale Client Components ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Whale Communications Intelligent...

CVE-2009-1156

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

CVE-2009-1156

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...