CVE-2006-5416

Cross-site scripting XSS vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

CVE-2006-5416

CVE-2006-5416 describes a cross-site scripting (XSS) vulnerability in F5 Networks FirePass 1000 SSL VPN, affecting version 5.5 and possibly earlier. The flaw is in my.acctab.php3 and can be exploited by remote attackers via the sid parameter to inject arbitrary web script or HTML. According to th...

CVE-2006-5416

Cross-site scripting XSS vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

PR06-03b: F5 Firepass 1000 SSL VPN version 5.5 vulnerable to Cross-Site Scripting

The F5 FirePass 1000 SSL VPN application version 5.5, and possibly earlier versions, is vulnerable to Cross-Site Scripting This advisory has been published following consultation with UK NISCC http://www.niscc.gov.uk The updated version of this advisory can be found on the following link...

CVE-2006-5393

Cisco Secure Desktop CSD does not require that the ClearPageFileAtShutdown aka CCE-Winv2.0-407 registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session...

CVE-2006-5394

The default configuration of Cisco Secure Desktop CSD has an unchecked "Disable printing" box in Secure Desktop Settings, which might allow local users to read data that was sent to a printer during another user's SSL VPN session...

CVE-2006-5393

Cisco Secure Desktop (CSD) is affected by CVE-2006-5393 due to the ClearPageFileAtShutdown (CCE-Winv2.0-407) registry value not being required to equal 1. The result is a local disclosure risk where a local user could read memory pages written during another user’s SSL VPN session. Affected softw...

CVE-2006-5393

Cisco Secure Desktop CSD does not require that the ClearPageFileAtShutdown aka CCE-Winv2.0-407 registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session...

CVE-2006-5394

The default configuration of Cisco Secure Desktop CSD has an unchecked "Disable printing" box in Secure Desktop Settings, which might allow local users to read data that was sent to a printer during another user's SSL VPN session...

CVE-2006-5393

Cisco Secure Desktop CSD does not require that the ClearPageFileAtShutdown aka CCE-Winv2.0-407 registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session...

CVE-2006-5394

The CVE-2006-5394 issue affects Cisco Secure Desktop (CSD) where the default configuration leaves the "Disable printing" option unchecked in Secure Desktop Settings. This could allow local users to read data sent to a printer during another user’s SSL VPN session. The vulnerability originates fro...

PT-2006-6112 · Cisco · Cisco Secure Desktop

Name of the Vulnerable Software and Affected Versions: Cisco Secure Desktop CSD affected versions not specified Description: The issue allows local users to potentially read certain memory pages that were written during another user's SSL VPN session, due to the ClearPageFileAtShutdown registry...

CVE-2006-5286

Unspecified vulnerability in IKE.NLM in Novell BorderManager 3.8 allows attackers to cause a denial of service crash via unknown attack vectors related to "VPN issues" for certain "IKE and IPsec settings."...

CVE-2006-5286

Technical details for CVE-2006-5286 are not publicly provided in the connected documents. The sources summarize an unspecified DoS risk in Novell BorderManager 3.8 related to VPN/IKE/IPsec settings, but no concrete vulnerability specifics are included here. Monitor for updates.

CVE-2006-5286

Unspecified vulnerability in IKE.NLM in Novell BorderManager 3.8 allows attackers to cause a denial of service crash via unknown attack vectors related to "VPN issues" for certain "IKE and IPsec settings."...

CVE-2006-5179

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service CPU consumption via parasitic public keys with large 1 "public exponent" or 2 "public modulus" values in X.509 certificates that require extra time to process when using RSA signature...

CVE-2006-5179

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service CPU consumption via parasitic public keys with large 1 "public exponent" or 2 "public modulus" values in X.509 certificates that require extra time to process when using RSA signature...

CVE-2006-5179

Technical details beyond the summary are not provided in the connected documents. Public details for CVE-2006-5179 (affected products, versions, root cause, or fixes) are not available here. Monitor for updates from official advisories.

CVE-2006-4313

Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.17L, and 4.7.x up to 4.72F allow attackers to execute the 1 CWD, 2 MKD, 3 CDUP, 4 RNFR, 5 SIZE, and 6 RMD FTP commands to modify files or create and delete directories via unknown vectors...

CVE-2006-4313

CVE-2006-4313 affects Cisco VPN Concentrator 3000 series (pre-4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F). The vulnerability is an FTP management issue allowing unauthorized execution of FTP commands (CWD, MKD, CDUP, RNFR, SIZE, RMD) to modify files or create/delete directories via unknown...