10000 matches found
CVE-2007-1309
CVE-2007-1309 - detailed findings : The vulnerability affects Novell Access Management 3 SSLVPN Server. It allows remote authenticated users to bypass VPN restrictions by manipulating policy.txt: first set policy.txt read-only to disconnect, then modify policy.txt to alter policies. The underlyin...
CVE-2007-1309
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt...
CVE-2007-1309: Undefined Security Weakness
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt...
Novell Access Management SSLVPN Server - Security Bypass
source: https://www.securityfocus.com/bid/22787/info Novell Access Management SSLVPN Server is prone to a security-bypass vulnerability. A remote authenticated attacker can exploit this issue to access corporate resources normally restricted within VPN access policy. This may lead to other attack...
CVE-2002-2225
CVE-2002-2225 affects SafeNet VPN client. The vulnerability arises from processing Internet Key Exchange (IKE) response packets, potentially causing buffer overflows when an attacker supplies crafted parameters such as a large SPI field, a large number of payloads, or a long payload. This can lea...
CVE-2002-2225
SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly involving buffer overflows using 1 a large Security Parameter Index SPI field, 2 a large number of payloads, or 3 a long...
CVE-2002-2225: Undefined Security Weakness
SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly involving buffer overflows using 1 a large Security Parameter Index SPI field, 2 a large number of payloads, or 3 a long...
nortel-sh.txt
!/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged local user to obtain root privileges. This particular bug is as...
Nortel SSL VPN Linux Client <= 6.0.3 Local Privilege Escalation Exploit
No description provided by source. !/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged local user to obtain root...
Race condition
The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause anoth...
CVE-2007-1057
The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause anoth...
CVE-2007-1057
The CVE-2007-1057 issue affects the Net Direct client for Linux before 6.0.5 in Nortel products (Application Switch 2424, VPN 3050/3070, SSL VPN Module 1000). The vulnerability arises from extracting and executing files with insecure permissions, enabling a local attacker to exploit a race condit...
CVE-2007-1057
The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause anoth...
Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation
!/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged local user to obtain root privileges. This particular bug is as...
Nortel SSL VPN Linux Client <= 6.0.3 Local Privilege Escalation Exploit
Exploit for linux platform in category local exploits ======================================================================= Nortel SSL VPN Linux Client The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in...
Nortel SSL VPN Linux Client <= 6.0.3 Local Privilege Escalation Exploit
No description provided by source. !/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart [email protected] The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged local user to...
Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation
Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation !/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged loc...
MDKA-2006:056 : drakxtools
Several bugs were fixed in drakxtools: - it was not possible to start rpmdrake from the menu 26383 - it was not possible to set up updates media and then distro media or the reverse in edit-urpm-sources - drakauth: o add encrypted home and pammount support o hide password when calling 'net join' ...