Cyberoam UTM v10.01.2 b59 - File Include Vulnerabilities

Document Title: =============== Cyberoam UTM v10.01.2 b59 - File Include Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=498 Release Date: ============= 2012-04-14 Vulnerability Laboratory ID VL-ID: ==================================== 49...

Cyberoam Unified Threat Management: Insecure Password Handling

Hi, Please find below the details of a vulnerability I discovered in Cyberoam UTM device. The Vendor was notified, however I did not receive any response from Vendor despite repeated email reminders. SECURITY ADVISORY: cyberoam-utm-insecure-password-handling Affected Software: Cyberoam CR50ia...

Cyberoam UTM - Multiple Vulnerabilities

Cyberoam UTM - Multiple Vulnerabilities SECURITY ADVISORY: cyberoam-utm-command-executaion Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured...

Cyberoam UTM - Multiple Vulnerabilities

SECURITY ADVISORY: cyberoam-utm-command-executaion Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and productivity to...

Cyberoam UTM Multiiple Vulnerabilities

Exploit for hardware platform in category web applications Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and...

Cyberoam UTM Credential Disclosure

SECURITY ADVISORY: cyberoam-utm-insecure-password-handling Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: Insecure Password Handling Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and...

Cyberoam UTM Command Execution

SECURITY ADVISORY: cyberoam-utm-command-executaion Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and productivity to...

Endian UTM Firewall v2.4.x & v2.5.0 - Multiple Web Vulnerabilities

Title: ====== Endian UTM Firewall v2.4.x & v2.5.0 - Multiple Web Vulnerabilities Date: ===== 2012-03-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=228 VL-ID: ===== 228 Introduction: ============= Einfach, schnell und zukunftssicher! Die ideale Losung, um Ihre...

Endian UTM Firewall security vulnerabilities

XSS, CSRF...

Endian UTM Firewall 2.4.x < 2.5.0 - Multiple Web Vulnerabilities

Title: ====== Endian UTM Firewall v2.4.x & v2.5.0 - Multiple Web Vulnerabilities Date: ===== 2012-03-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=228 VL-ID: ===== 228 Introduction: ============= Einfach, schnell und zukunftssicher! Die ideale Lösung, um Ihre...

Endian UTM Firewall v2.4.x &amp; v2.5.0 多个Web安全漏洞

Endian Firewall可提供路由/防火墙和统一威胁管理的开源GNU/Linux发行版 Endian Firewall v2.4.x & v2.5.0实现上存在多个输入验证漏洞和跨站请求伪造漏洞，远程攻击者可利用这些漏洞操作特定应用请求，强制客户端模块请求应用函数 0 endian UTM Firewall Appliance Application v2.5.x endian UTM Firewall Appliance Application v2.4.x 厂商补丁： endian ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Endian UTM Firewall 2.4.x 2.5.0 - Multiple Web Vulnerabilities

Endian UTM Firewall 2.4.x 2.5.0 - Multiple Web Vulnerabilities Title: ====== Endian UTM Firewall v2.4.x & v2.5.0 - Multiple Web Vulnerabilities Date: ===== 2012-03-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=228 VL-ID: ===== 228 Introduction: ============= Einfac...

Endian UTM Firewall 2.4.x / 2.5.0 CSRF / XSS

Title: ====== Endian UTM Firewall v2.4.x & v2.5.0 - Multiple Web Vulnerabilities Date: ===== 2012-03-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=228 VL-ID: ===== 228 Introduction: ============= Einfach, schnell und zukunftssicher! Die ideale Lösung, um Ihre...

Endian UTM Firewall 2.4.x / 2.5.0 CSRF / XSS

Exploit for php platform in category web applications Title: ====== Endian UTM Firewall v2.4.x & v2.5.0 - Multiple Web Vulnerabilities Introduction: ============= Einfach, schnell und zukunftssicher! Die ideale Lösung, um Ihre Filialen und industriellen Zweigstellen rund um den Globus zu schützen...

Endian UTM Firewall v2.5.0 - Multiple Web Vulnerabilities

Document Title: =============== Endian UTM Firewall v2.5.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=228 Release Date: ============= 2012-03-01 Vulnerability Laboratory ID VL-ID: ==================================== 2...

Endian UTM Firewall v2.5.0 - Multiple Web Vulnerabilities

Document Title: =============== Endian UTM Firewall v2.5.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=228 Release Date: ============= 2012-03-01 Vulnerability Laboratory ID VL-ID: ==================================== 2...

Endian UTM Firewall 2.4.x Cross Site Scripting

Title: ====== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities Date: ===== 2012-02-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=436 VL-ID: ===== 436 Introduction: ============= The Endian Firewall is an open source GNU/Linux distribution that specializes on...

Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities

Document Title: =============== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=436 Release Date: ============= 2012-02-17 Vulnerability Laboratory ID VL-ID: ==================================== 436...

Pandora Fms 4.0.1 - Local File Inclusion

Pandora Fms 4.0.1 - Local File Inclusion Title: ====== Pandora FMS v4.0.1 - Local File Include Vulnerability Date: ===== 2012-02-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=435 VL-ID: ===== 435 Introduction: ============= Pandora FMS is a monitoring Open Source...

Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities

Document Title: =============== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=436 Release Date: ============= 2012-02-17 Vulnerability Laboratory ID VL-ID: ==================================== 436...