Cisco ASA Adaptive Security Appliance Software Clientless SSL VPN Rot13-Encoded Cross-Site Scripting Vulnerability

Cisco ASA Adaptive Security Appliance Software versions prior to 8.0.434, 8.1.225, and 8.2.13 that have been configured to accept Clientless SSL VPN connections contain a cross-site scripting vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary script or HTML co...

Cisco ASA Adaptive Security Appliance Clientless SSL VPN DOM Cross-Site Scripting Vulnerability

Cisco ASA Adaptive Security Appliance Software versions prior to 8.0.434, 8.1.225, and 8.2.13 that are configured to accept Clientless SSL VPN connections are affected by a cross-site scripting vulnerability. Versions 7.x are not affected. The vulnerability is due to insufficient restrictions on...

Cisco ASA Adaptive Security Appliance Clientless SSL VPN CIFS and FTP Credential Theft Vulnerability

Cisco ASA Adaptive Security Appliance Software versions prior to 8.0.434, 8.1.225, and 8.2.13 that have been configured to accept Clientless SSL VPN connections contain a vulnerability that could allow an unauthenticated, remote attacker to steal user account credentials. Versions 7.x are not...

Cross site scripting

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

CVE-2009-2119

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

CVE-2009-2119

CVE-2009-2119 is an XSS vulnerability in the FirePass login interface (my.logon.php3) affecting F5 FirePass SSL VPN 5.5–5.5.2 and 6.0–6.0.3. The issue allows remote attackers to inject arbitrary script/HTML via a base64-encoded xcho parameter. The root cause is insufficient sanitization of input ...

CVE-2009-2119

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

CVE-2009-2119: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the login interface my.logon.php3 in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter...

F5 FirePass 4100 crossite scripting

SSL VPN downloadplugin.php3, page backurl parameter, my.logon.php3, my.activation.php3 crossite scripting...

New attack class exploits intranet weaknesses

A security researcher has developed an interesting new class of attacks that exploit the problems caused by organizations using non-routable IP space on their internal networks, including one attack that compromises VPN users through the use of a persistent JavaScript backdoor. The attacks rely o...

SonicWALL SSL-VPN登录页面远程格式串漏洞

BUGTRAQ ID: 35145 SonicWALL SSL-VPN可以为企业网络提供简单易用的VPN解决方案。 SonicWALL SSL-VPN的登录页面中存在格式串错误。如果远程攻击者向登录页面的cgi-bin/welcome/VirtualOffice组件提交了带有err参数格式串标识符的特制字符串，就可能在生成的出错消息中注入并执行任意代码。 SonicWALL SSL-VPN 2000/4000 3.5.0.4 SonicWALL SSL-VPN 200 3.0.0.8 厂商补丁： SonicWALL ---------...

strongSwan IKE请求多个拒绝服务漏洞

BUGTRAQ ID: 35178 strongSwan是Linux平台所使用的基于IPsec的开源VPN解决方案。 如果远程攻击者发送了特制的IKESAINIT和CREATECHILDSA请求，或发送了缺少TSi或TSr负载的IKEAUTH请求，就会在strongSwan的IKEv2 charon守护程序中触发空指针引用，导致拒绝服务。 strongSwan 4.1.0 - 4.3.0 厂商补丁： strongSwan ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

SafeNet SoftRemote IKE服务远程栈溢出漏洞

BUGTRAQ ID: 35154 SoftRemote是SafeNET VPN产品系列中的VPN客户端。 Softremote中默认监听于UDP 62514端口上的VPN服务（ireIke.exe）存在栈溢出漏洞。如果远程攻击者向该服务提交了超长请求的话，就可以触发这个溢出，导致以SYSTEM权限执行任意代码。 SafeNet SoftRemote 10.8.6 厂商补丁： SafeNet ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.safenet-inc.com/products/vpn/softRemote.asp...

Encrypted tunnels enable users to circumvent security controls

In the previous article, I talked a bit about how employees are using external proxies to hide web activity from the prying eyes of the IT department. This article discusses the use of encrypted tunnel applications to hide from detection. To someone like myself an admitted web 1.2 kinda guy, usin...

SonicWALL SSL-VPN Appliance Format String Vulnerability

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 29-May-2009 Software: SonicWALL - SSL-VPN Remote Access http://www.sonicwall.com/ Description: "SonicWALL SSL VPN appliances provide small and mid-size organizations an easy-to-use, secure and...

SonicWALL Format String Vulnerability

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 29-May-2009 Software: SonicWALL - SSL-VPN Remote Access http://www.sonicwall.com/ Description: "SonicWALL SSL VPN appliances provide small and mid-size organizations an easy-to-use, secure and...

SonicWALL SSL-VPN - cgi-binwelcomeVirtualOffice Remote Format String

SonicWALL SSL-VPN - cgi-binwelcomeVirtualOffice Remote Format String source: https://www.securityfocus.com/bid/35145/info Multiple SonicWALL SSL-VPN devices are prone to a remote format-string vulnerability because they fail to properly sanitize user-supplied input before passing it as the format...

SonicWALL SSL-VPN - 'cgi-bin/welcome/VirtualOffice' Remote Format String

source: https://www.securityfocus.com/bid/35145/info Multiple SonicWALL SSL-VPN devices are prone to a remote format-string vulnerability because they fail to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Attackers may exploit th...

SonicWALL SSL-VPN Format String Vulnerability

There is a format string vulnerability within the SonicWALL SSL-VPN Appliance - 200, 2000 and 4000 series. Arbitrary memory can be read or written to, depending on the format string used. There appears to be a length limit of 127 characters of format string data. With physical access to the devic...

SonicWALL Global VPN客户端'RampartSvc'本地特权提升漏洞

Bugraq ID: 35092 CNCAN ID：CNCAN-2009052705 SonicWALL Global VPN Client是一款许移动用户建立到SonicWALL VPN网关安全连接的应用程序。 SonicWALL Global VPN Client安装时设置权限不正确，本地攻击者可以利用漏洞提升特权。 在SonicWALL Global VPN Client安装中，安装文件夹"%ProgramFiles%\SonicWALL\SonicWALL Global VPN...