CVE-2012-3308

Cross-site scripting XSS vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat...

CVE-2012-3308

Cross-site scripting XSS vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat...

CVE-2012-3308

IBM Sametime 8.0.2–8.5.2.1 is vulnerable to cross-site scripting (XSS) via an IM chat, per CVE-2012-3308. The connected documents confirm the affected version range and the basic impact (arbitrary script/HTML injection), but do not provide explicit root-cause details, affected component names, or...

CVE-2012-3308: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat...

PT-2012-4641

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.0.2 through 8.5.2.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via an IM chat. This could potentially lead to unauthorized actions on the vulnerable syste...

[SECURITY] Fedora 16 Update: pidgin-2.10.5-1.fc16

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Fedora Update for pidgin FEDORA-2012-8686

Check for the Version of pidgin OpenVAS Vulnerability Test Fedora Update for pidgin FEDORA-2012-8686 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 15 Update: pidgin-2.10.4-1.fc15

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

IBM Lotus Sametime配置Servlet验证安全绕过漏洞

Bugtraq ID: 50410 CVE ID：CVE-2011-1370 IBM Lotus Sametime Server是一款实时协作和网络会议解决方案。 IBM Lotus Sametime配置servlet没有对请求进行正确验证，远程攻击者可利用漏洞获得对某些配置数据的读访问，导致敏感信息泄露。 IBM Lotus Sametime 8.5.1 IBM Lotus Sametime 8.0.2 IBM Lotus Sametime 8.0.1 IBM Lotus Sametime 7.5.1 FP 1 IBM Lotus Sametime 7.5.1 IBM Lotus...

CVE-2011-1370

The default configuration of the Sametime configuration servlet SCS in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message...

Default configuration

The default configuration of the Sametime configuration servlet SCS in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message...

CVE-2011-1370

The vulnerability CVE-2011-1370 affects IBM Lotus Sametime Server, specifically the Sametime configuration servlet (SCS) in versions 7.0 through 8.5.2. The root cause is lack of authentication on the configuration servlet, enabling remote readers to access configuration settings via responses. Im...

CVE-2011-1370

The default configuration of the Sametime configuration servlet SCS in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message...

CVE-2011-1370: Undefined Security Weakness

The default configuration of the Sametime configuration servlet SCS in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message...

PT-2011-3089

Name of the Vulnerable Software and Affected Versions IBM Lotus Sametime versions 7.0 through 8.5.2 Description The default configuration of the Sametime configuration servlet SCS in the server does not enable an authentication requirement. This allows remote attackers to read the configuration...

[SECURITY] Fedora 15 Update: pidgin-2.7.11-1.fc15

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

[SECURITY] Fedora 14 Update: pidgin-2.7.11-1.fc14

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

IBM Lotus Sametime Server stconf.nsf messageString Parameter XSS

The version of Lotus Sametime on the remote host contains a cross-site scripting vulnerability because it fails to sanitize input to the 'messageString' parameter of the 'stconf.nsf' script before including it in a web page. An attacker can leverage this issue by enticing a user to follow a...

IBM Sametime Detection

IBM Sametime, a web conferencing, instant messaging, and scheduling application, is running on the remote web server. Note that IBM Sametime was formerly known as Lotus Sametime. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid52658; scriptversion"1.5";...