Update Protection against Cisco Secure Access Control Server UCP Application CSuserCGI.exe Buffer Overflow Vulnerability

A buffer overflow vulnerability has been discovered in Cisco User-Changeable Password UCP application. The Cisco UCP application is used by Cisco Secure Access Control Server ACS. It allows users to change their ACS passwords with a web-based utility. A remote attacker may exploit this issue to...

Cisco Secure ACS UCP CSuserCGI.exe buffer overflow

Added: 04/07/2008 CVE: CVE-2008-0532 BID: 28222 OSVDB: 42961 Background Cisco Secure Access Control Server ACS is a centralized user access control framework which can be used with routers, switches, firewalls, VPNs, and other devices. User Changeable Passwords UCP, a utility implemented by Cisco...

CVE-2008-0533

Multiple cross-site scripting XSS vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediate...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediate...

Buffer overflow

Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and...

CVE-2008-0532

Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and...

CVE-2008-0532

CVE-2008-0532 describes a vulnerability in Cisco Secure Access Control Server (ACS) UCP, where multiple buffer overflows in CSuserCGI.exe allow remote code execution. An attacker can exploit a long argument following the Logout parameter to inject and run arbitrary code on affected systems. Affec...

RecurityLabs_Cisco_ACS_UCP_advisory.txt

Recurity Labs GmbH http://www.recurity-labs.com [email protected] Date: 12.03.2008 Vendor: Cisco Systems Product: Cisco Secure Access Control Server ACS for Windows User-Changeable Password UCP application Vulnerability: Multiple remote pre-authentication buffer overflows Cross Site...

Cisco Secure Access Control Server for Windows User-Changeable Password Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2008-1180

Cross-site scripting XSS vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to inject arbitrary web script or HTML via the deliverymode parameter...

CVE-2008-1181

Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters, which reveals the path in an "Execute failed" error message...

Information disclosure

Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters, which reveals the path in an "Execute failed" error message...

CVE-2008-1180

The vulnerability CVE-2008-1180 affects Juniper Networks Secure Access 2000, version 5.5 R1 build 11711, where a Cross-site Scripting (XSS) flaw exists in dana-na/auth/rdremediate.cgi. The issue allows remote attackers to inject arbitrary web script or HTML via the delivery_mode parameter, implyi...

CVE-2008-1181

Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters, which reveals the path in an "Execute failed" error message...

CVE-2008-1180

Cross-site scripting XSS vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to inject arbitrary web script or HTML via the deliverymode parameter...

CVE-2008-1181

CVE-2008-1181 affects Juniper Networks Secure Access 2000 5.5 R1 (build 11711). The issue is an information disclosure via a direct request to remediate.cgi without certain parameters, causing an error message that reveals the path. Exploitation details, vulnerable component depth, and concrete r...

Juniper Networks Secure Access 2000 Web Root路径泄露漏洞

BUGTRAQ ID: 28037 Juniper Networks的Secure Access 2000是企业级的SSL VPN接入设备。 Secure Access 2000处理用户请求参数时存在漏洞，远程攻击者可能利用此漏洞获取服务器相关的敏感信息。 如果向Secure Access 2000的remediate.cgi脚本提交了带有特制参数的请求的话，服务器就会在返回的Execute failed消息中包含webroot（/home/webserver/htdocs/）的物理路径。 Juniper Networks Secure Access 2000 5.5R1 build...

Juniper Networks Secure Access 2000 rdremediate.cgi跨站脚本漏洞

BUGTRAQ ID: 28034 Juniper Networks的Secure Access 2000是企业级的SSL VPN接入设备。 Secure Access 2000的/dana-na/auth/rdremediate.cgi服务器端脚本没有正确的验证对deliverymode参数的输入，如果用户向该脚本提交了恶意请求的话，就可能在服务器上执行跨站脚本攻击。 Juniper Networks Secure Access 2000 5.5R1 build 11711 厂商补丁： Juniper Networks ----------------...

PR07-42: Webroot disclosure on Juniper Networks Secure Access 2000

PR07-42: Webroot disclosure on Juniper Networks Secure Access 2000 Vulnerability found: 6th December 2007 Vendor informed: 12th December 2007 Severity: Low Description: By simply requesting the 'remediate.cgi' script omitting certain parameters, the web server returns the physical path of the...

PR07-41: XSS on Juniper Networks Secure Access 2000

PR07-41: XSS on Juniper Networks Secure Access 2000 Vulnerability found: 6th December 2007 Vendor informed: 12th December 2007 Severity: Medium-high Description: Juniper Networks Secure Access 2000 is vulnerable to a vanilla XSS. Vulnerable server-side script: '/dana-na/auth/rdremediate.cgi'...