1545 matches found
CVE-2007-3097
FirePass (4100 SSL VPN) my.activation.php3 login page suffers a cross-site scripting (XSS) vulnerability due to insufficient sanitization of URL arguments, enabling attacker-controlled HTML/JavaScript when a user follows a crafted link. F5 advisory SOL6919 states this was fixed in maintenance ver...
F5 Firepass SSL VPN unfiltered shell characters security vulnerabilities
Shell characters problem via username parameter of my.activation.php3 script...
S21Sec-035: F5 FirePass command execution vulnerability
S21Sec Advisory - Title: F5 FirePass command execution vulnerability ID: S21SEC-035-en Severity: High - Intrusion History: 14.Feb.2007 Vulnerability discovered 22.Feb.2007 Vendor contacted Scope: Linux's shell Command Execution Platforms: Linux based Appliance Author: Leonardo Nve [email protected]...
SOL6999 - Web browser domain-based security and discussion of "double eval()" and FP_DO_NOT_TOUCH tags - VU#261869
This potential vulnerability is discussed in the Web browser domain-based security section of this advisory. Additionally, the January 2007 security advisory 1 discusses a potential FirePass cross-site scripting vulnerability related to the double eval Javascript and FPDONOTTOUCH tags. This...
Cisco ASA clientless SSL VPN denial of service vulnerability
Overview The Cisco ASA firewall's SSL VPN component contains an denial-of-service vulnerability. Description The Cisco Adaptive Security Appliance ASA is firewall that includes routing, intrusion prevention system IPS, and VPN components. The clientless SSL VPN allows remote users with a web...
Aventail Connect SSL VPN Client Buffer Overflow
Buffer overflow in gethostbyname family functions hoocked thorugh LSP on oversized hotname in any application...
[Full-disclosure] Aventail Connect SSL VPN Client Buffer Overflow
Hello, Aventail Connect registers a layered service provider to handle DNS queries. When resolving a hostname the software fails to check string boundaries properly. As the lsp intercepts all ws232 dns lookups every application performing these operations is vulnerable. e.g. $ ssh $perl -e 'print...
nortel-sh.txt
!/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged local user to obtain root privileges. This particular bug is as...
Nortel SSL VPN Linux Client <= 6.0.3 Local Privilege Escalation Exploit
No description provided by source. !/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged local user to obtain root...
CVE-2007-1057
The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause anoth...
CVE-2007-1057
The CVE-2007-1057 issue affects the Net Direct client for Linux before 6.0.5 in Nortel products (Application Switch 2424, VPN 3050/3070, SSL VPN Module 1000). The vulnerability arises from extracting and executing files with insecure permissions, enabling a local attacker to exploit a race condit...
CVE-2007-1057
The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause anoth...
Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation
Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation !/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged loc...
Nortel SSL VPN Linux Client <= 6.0.3 Local Privilege Escalation Exploit
Exploit for linux platform in category local exploits ======================================================================= Nortel SSL VPN Linux Client The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in...
Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation
!/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged local user to obtain root privileges. This particular bug is as...
Nortel SSL VPN Linux Client <= 6.0.3 Local Privilege Escalation Exploit
No description provided by source. !/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart [email protected] The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged local user to...
checkpoint-bypass.txt
I. INTRODUCTION Check Point Connectra is a complete Web Security Gateway that provides SSL VPN access and comprehensive endpoint and integrated intrusion prevention Security in a single unified remote access solution. By combining both SSL VPN connectivity and security in one solution,...
CheckPoint Connectra端点绕过安全检测漏洞
Check Point Connectra是一款Web安全网关，提供 SSL VPN 访问，并在一个统一的解决方案内集成了终端安全和应用安全。 Connectra在处理端点访问认证时存在漏洞，远程攻击者可能通过伪造认证信息来绕过安全检测，非授权获取访问。 Connectra的一个主要功能是综合端点安全服务，具体来讲，就是在客户端连接到内部网络之前会对客户端执行测试，检查该计算机是否存在安全风险，如果检测出风险就会提示用户风险的详细信息，并在该用户登陆到网络之前会要求再次进行测试。...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in F5 FirePass SSL VPN allow remote attackers to inject arbitrary web script or HTML via 1 the xcho parameter to my.logon.php3; the 2 topblue, 3 midblue, 4 wtopblue, and certain other Custom color parameters in a per action to...
CVE-2007-0186
Multiple cross-site scripting XSS vulnerabilities in F5 FirePass SSL VPN allow remote attackers to inject arbitrary web script or HTML via 1 the xcho parameter to my.logon.php3; the 2 topblue, 3 midblue, 4 wtopblue, and certain other Custom color parameters in a per action to...