7859 matches found
PT-2010-4252
Name of the Vulnerable Software and Affected Versions Microsoft Forefront Unified Access Gateway UAG versions 2010 Gold through 2010 Update 2 Description A cross-site scripting XSS issue in the Web Monitor component allows remote attackers to inject arbitrary web script or HTML via unspecified...
CVE-2010-3936: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway UAG 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability."...
Design/Logic Flaw
/usr/local/cm/bin/pktCapprotectData in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CSCti52041 and...
CVE-2010-3039
CVE-2010-3039 affects Cisco Unified Communications Manager (CUCM) 6–8. A setuid binary (/usr/local/cm/bin/pktCap_protectData) fails to validate command-line arguments, allowing a local, authenticated administrator to inject shell metacharacters and execute arbitrary commands. The vulnerability en...
Microsoft Forefront Unified Access Gateway Spoofing Vulnerability
Description Microsoft Forefront Unified Access Gateway UAG is prone to a spoofing vulnerability. An attacker can exploit this issue to spoof a UAG server or redirect legitimate network traffic intended for a UAG server. This may allow the attacker to masquerade as a legitimate server, aiding in...
Microsoft Forefront Unified Access Gateway 'Signurl.asp' Cross-Site Scripting Vulnerability
Description Microsoft Forefront Unified Access Gateway is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...
CVE-2010-3039: Improper Neutralization of Special Elements used in an OS Command
/usr/local/cm/bin/pktCapprotectData in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CSCti52041 and...
PT-2010-4511
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 6 through 8 Description The issue allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface. This is related to...
Cisco Unified Communications Manager shell characters vulnerability
Shell characters vulnerability in /usr/local/cm/bin/pktCapprotectData suid binary...
PT-2010-1169
Name of the Vulnerable Software and Affected Versions Microsoft Forefront Unified Access Gateway versions 2010 Gold, 2010 Update 1, and 2010 Update 2 Description The issue is related to a lack of protection for the web page structure in the Signurl.asp component. This allows a remote attacker to...
ZDI-10-234: Cisco ICM Setup Manager Agent.exe HandleQueryNodeInfoReq Remote Code Execution Vulnerability
ZDI-10-234: Cisco ICM Setup Manager Agent.exe HandleQueryNodeInfoReq Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-234 November 7, 2010 -- CVE ID: CVE-2010-3040 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco...
Microsoft Forefront Unified Access Gateway Installed
Microsoft Forefront Unified Access Gateway formerly known as Microsoft Intelligent Application Gateway, or IAG is installed on the remote host. This software provides secure remote access to corporate networks for remote employees and business partners. C Tenable Network Security, Inc...
MS10-089: Vulnerabilities in Forefront Unified Access Gateway (UAG) Could Allow Elevation of Privilege (2316074)
The version of Forefront Unified Access Gateway UAG running on the remote host has multiple vulnerabilities : - An unspecified redirection spoofing vulnerability, which could result in users being redirected from the UAG server to a similar looking, malicious server. CVE-2010-2732 - An unspecifie...
Cisco ICM Setup Manager Agent.exe AgentUpgrade Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Unified ICM. Authentication is not required to exploit this vulnerability. The flaw exists within the Agent.exe component which listens by default on TCP port 40078. When handling the...
Microsoft To Patch Critical Office Flaw
Microsoft will use its monthly patch to fix a critical security hole in versions of its Microsoft Office suit that could allow attackers to run malicious code on vulnerable systems. The company announced details of its upcoming monthly patch for November on Thursday. This months patch also includ...
Microsoft Releases Advance Notification for November Security Bulletin
Microsoft has issued an Security Bulletin Advance Notification indicating that its November release will contain three bulletins. One of these bulletins will have the severity rating of critical and will be for Microsoft Office. The remaining two bulletins will have the severity rating of importa...
Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability Advisory ID: cisco-sa-20101027-cs Revision 1.0 For Public Release 2010 October 27 1600 UTC GMT...
Microsoft Windows Common Control Library Remote Heap Buffer Overflow Vulnerability
Description Microsoft Windows Common Control Library is prone to a remote heap-based buffer-overflow vulnerability because the library fails to perform adequate boundary-checks on user-supplied data. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted web...
Alcatel-Lucent OmniPCX Enterprise - masterCGI Arbitrary Command Execution (Metasploit)
$Id: alcatelomnipcxmastercgiexec.rb 10556 2010-10-05 23:13:04Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...