8508 matches found
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Desktop
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Desktop Advisory ID: cisco-sa-20061108-csd Revision 1.0 For Public Release 2006 November 08 1600 UTC GMT - ----------------------------------------------------------------------- Summar...
Cisco Secure Desktop多个安全漏洞
Cisco Secure Desktop CSD可以通过加密降低远程用户注销或SSL VPN会话超时后Cookies、浏览器历史记录、临时文件和下载内容在系统上所遗留的风险。 CSD受以下漏洞的影响： 生成的浏览器导致信息泄漏 +-------------------------------------- 如果在创建了SSL VPN会话之后，所自动生成的用于显示主页的Internet浏览器使用了CSD所维护库文件之外目录来储存其会话信息的话，就会出现这个漏洞。这个漏洞还允许用户将在这个Internet浏览会话期间所下载的文件保存到CSD库文件之外，导致在SSL...
CVE-2006-5806
SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not...
CVE-2006-5806
SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not...
CVE-2006-5806
The CVE-2006-5806 issue affects the SSL VPN Client in Cisco Secure Desktop prior to version 3.1.1.45. The underlying flaw stores sensitive browser session information in a directory outside the CSD vault and does not restrict saving outside the vault, and the data is not cleared when the VPN conn...
Solaris 2.6 (i386) : 105650-01
The remote host is missing Sun Security Patch number 105650-01 Solstice FireWall-1 3.0: x86 Patch VPN+DES. Date this patch was last updated by Sun : Sun Dec 07 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...
Solaris 2.6 (sparc) : 105647-01
The remote host is missing Sun Security Patch number 105647-01 Solstice FireWall-1 3.0: Sparc Patch VPN+DES. Date this patch was last updated by Sun : Sun Dec 07 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has bee...
Solaris 2.5.1 (sparc) : 105647-01
The remote host is missing Sun Security Patch number 105647-01 Solstice FireWall-1 3.0: Sparc Patch VPN+DES. Date this patch was last updated by Sun : Sun Dec 07 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has bee...
Solaris 2.5.1 (sparc) : 104748-01
The remote host is missing Sun Security Patch number 104748-01 Solstice FireWall-1 2.1c: FD leak in fwd VPN. Date this patch was last updated by Sun : Thu Mar 27 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has bee...
Solaris 2.5.1 (i386) : 105650-01
The remote host is missing Sun Security Patch number 105650-01 Solstice FireWall-1 3.0: x86 Patch VPN+DES. Date this patch was last updated by Sun : Sun Dec 07 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...
Solaris 2.5.1 (sparc) : 105646-01
The remote host is missing Sun Security Patch number 105646-01 Solstice FireWall-1 3.0: Sparc Patch VPN. Date this patch was last updated by Sun : Sun Dec 07 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...
Solaris 2.5.1 (i386) : 104749-01
The remote host is missing Sun Security Patch number 104749-01 Solstice FireWall-1 2.1c: FD leak in fwd Non-VPN. Date this patch was last updated by Sun : Thu Mar 27 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...
Solaris 2.6 (i386) : 105649-01
The remote host is missing Sun Security Patch number 105649-01 Solstice FireWall-1 3.0: x86 Patch VPN. Date this patch was last updated by Sun : Sun Dec 07 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...
Cisco Secure Desktop SSL VPN会话多个信息泄露漏洞
Cisco Secure Desktop CSD可以通过加密降低远程用户注销或SSL VPN会话超时后cookies、浏览器历史记录、临时文件和下载内容在系统上所遗留的风险。 CSD的实现上存在如下一些问题，可能导致在SSL VPN会话相关的敏感信息泄露。 1. Windows页面文件信息泄露 由于Windows虚拟内存子系统运行的方式，任何应用程序所使用的虚拟物理内存，包括在Secure...
Cisco VPN Concentrator 3000 FTP Server Remote Manipulation (Exploit)
No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...
Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit
No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...
k Point VPN-1/FireWall-1 4.1 SP2 Blocked Port Bypass Exploit
No description provided by source. / Summary A vulnerability exists in Check Point VPN-1/FireWall-1 4.1 SP2 that enables an attacker to establish connections to blocked TCP services through the firewall in certain configurations. We expect many deployed FireWall-1 installations to be immune to th...
Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit
Exploit for hardware platform in category remote exploits ================================================================ Cisco VPN 3000 Concentrator = 4.1.7, 4.7.2 FTP Remote Exploit ================================================================ / Cisco VPN Concentrator 3000 FTP remote exploi...
Cisco VPN 3000 Concentrator 4.1.7/4.7.2 - 'FTP' Remote File System Access
/ Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An unauthenticated user can use the following...
Cisco VPN 3000 Concentrator <= 4.1.7 4.7.2 (FTP) Remote Exploit
No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...