Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability Advisory ID: cisco-sa-20090520-cw http://www.cisco.com/warp/public/707/cisco-sa-20090520-cw.shtml Revision 1.0 For Public Release 2009 May 20 1600 UTC GMT Summary =======...

CVE-2009-0630

The 1 Cisco Unified Communications Manager Express; 2 SIP Gateway Signaling Support Over Transport Layer Security TLS Transport; 3 Secure Signaling and Media Encryption; 4 Blocks Extensible Exchange Protocol BEEP; 5 Network Admission Control HTTP Authentication Proxy; 6 Per-user URL Redirect for...

Authentication flaw

The 1 Cisco Unified Communications Manager Express; 2 SIP Gateway Signaling Support Over Transport Layer Security TLS Transport; 3 Secure Signaling and Media Encryption; 4 Blocks Extensible Exchange Protocol BEEP; 5 Network Admission Control HTTP Authentication Proxy; 6 Per-user URL Redirect for...

CVE-2009-0630

The 1 Cisco Unified Communications Manager Express; 2 SIP Gateway Signaling Support Over Transport Layer Security TLS Transport; 3 Secure Signaling and Media Encryption; 4 Blocks Extensible Exchange Protocol BEEP; 5 Network Admission Control HTTP Authentication Proxy; 6 Per-user URL Redirect for...

[SECURITY] Fedora 9 Update: evolution-data-server-2.22.3-3.fc9

The evolution-data-server package provides a unified backend for programs t hat work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

CVE-2009-0632

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...

Code injection

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...

CVE-2009-0632

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...

CVE-2009-0632

CVE-2009-0632 affects Cisco Unified Communications Manager (CUCM) IP Phone Personal Address Book (PAB) Synchronizer. The vulnerability leaks privileged directory-service credentials to the client during PAB sync, allowing an attacker who intercepts credentials to modify CUCM configuration and esc...

Cisco CallManager / Unified Communications Manager privilege escalation

During authentication process for address book synchronization, full access account credentials are leaked to client...

Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability Advisory ID: cisco-sa-20090311-cucmpab Revision 1.0 For Public Release 2009 March 11 1600 UTC GMT...

CVE-2009-0632: Undefined Security Weakness

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...

CVE-2009-0743

Cross-site scripting XSS vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0517.0 aka 6.0 MR4 and 7.0 before 7.02 aka 7.0 MR1 allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field...

CVE-2009-0743

The CVE-2009-0743 issue is an XSS vulnerability in Cisco Unified MeetingPlace Web Conferencing’s Web Server, specifically on the edit account page. The flaw allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field in versions 6.0 prior to 6.0(517.0) (6...

CVE-2009-0743

Cross-site scripting XSS vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0517.0 aka 6.0 MR4 and 7.0 before 7.02 aka 7.0 MR1 allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field...

Fedora Update for evolution-data-server FEDORA-2007-595

Check for the Version of evolution-data-server OpenVAS Vulnerability Test Fedora Update for evolution-data-server FEDORA-2007-595 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Cisco Unified MeetingPlace视频会议系统E-Mail Address字段远程跨站脚本漏洞

BUGTRAQ ID: 33915 Cisco Unified MeetingPlace是思科的网络会议解决方案。 Unified MeetingPlace允许用户修改自己的帐号设置，如名称、电话分机、邮件地址等。如果用户在配置文件页面设置了特制的E-mail Address字段的话，则其他用户在查看该用户的配置文件或该用户所创建会议的详细信息时就会导致跨站脚本攻击，在浏览器会话中执行所嵌入的恶意代码。 Cisco Unified MeetingPlace 7.0 Cisco Unified MeetingPlace 6.0 厂商补丁： Cisco -----...

CVE-2009-0743: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0517.0 aka 6.0 MR4 and 7.0 before 7.02 aka 7.0 MR1 allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field...

Fedora Update for evolution-data-server FEDORA-2007-484

Check for the Version of evolution-data-server OpenVAS Vulnerability Test Fedora Update for evolution-data-server FEDORA-2007-484 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for evolution-data-server FEDORA-2007-0464

Check for the Version of evolution-data-server OpenVAS Vulnerability Test Fedora Update for evolution-data-server FEDORA-2007-0464 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...