136 matches found
Directory traversal
Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...
CVE-2011-3685
Tembria Server Monitor (before 6.0.5 Build 2252) is vulnerable due to a substitution cipher used to encrypt application credentials, enabling local users with read access to authentication.dat or exports XML files to obtain sensitive information. This CVE (CVE-2011-3685) affects the confidentiali...
CVE-2011-3684
Tembria Server Monitor is affected by multiple XSS vulnerabilities (CVE-2011-3684) prior to version 6.0.5 Build 2252. The flaws allow remote attackers to inject arbitrary script/HTML via numerous parameters (e.g., siteid in logbook.asp, monitor-events.asp, reports-config-by-device.asp, and others...
CVE-2011-3685
Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...
CVE-2011-3684
Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...
PT-2011-4575
Name of the Vulnerable Software and Affected Versions Tembria Server Monitor versions prior to 6.0.5 Build 2252 Description The issue allows local users to obtain sensitive information by leveraging read access to certain files. This is due to the use of a substitution cipher to encrypt applicati...
PT-2011-4574
Name of the Vulnerable Software and Affected Versions Tembria Server Monitor versions prior to 6.0.5 Build 2252 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters to different ASP pages, including siteid to multiple pages, action to...
CVE-2011-3685: Undefined Security Weakness
Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...
CVE-2011-3684: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...
Tembria Server Monitor security vulnerability
Weak cryptography, crossite scripting...
Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability
Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability Solutionary ID: SERT-VDN-1004 Solutionary Disclosure URL: http://www.solutionary.com/index/SERT/Vuln-Disclosures/Tembria-Server-Monitor-Weak-Xpto-Pwd-Storage.html CVE ID: Pending Product: Tembria Server Monitor Application...
Tembria Server Monitor Detection
The remote Windows host is running Tembria Server Monitor. Tembria Server Monitor is a server- and network-monitoring application that contains a built-in web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46202; scriptversion"1.8"; scriptcvsdate"Date:...
Tembria Server Monitor < 5.6.1 Denial of Service
The remote host is running a version of Tembria Server Monitor earlier than 5.6.1. Such versions are reportedly affected by a buffer overflow vulnerability when handling specially crafted HTTP requests. An attacker, exploiting this flaw, could crash the affected service. C Tenable Network Securit...
Tembria Server Monitor HTTP Request Denial of Service Vulnerability
The host is running Tembria Server Monitor and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodtembriaservermonitordosvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Tembria Server Monitor HTTP Request Denial of Service Vulnerability Authors: Sooraj KS Copyright:...
Tembria Server Monitor HTTP Request Denial of Service Vulnerability
Tembria Server Monitor is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Tembria Server Monitor Version Detection
This script finds the Tembria Server Monitor version. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-1316
Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted 1 GET, 2 PUT, or 3 HEAD request, as demonstrated by a malformed GET request containing a long PATHINFO to...
Stack overflow
Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted 1 GET, 2 PUT, or 3 HEAD request, as demonstrated by a malformed GET request containing a long PATHINFO to...