203 matches found
Sophos Web Protection Appliance patience.cgi Directory Traversal
This module abuses a directory traversal in Sophos Web Protection Appliance, specifically on the /cgi-bin/patience.cgi component. This module has been tested successfully on the Sophos Web Virtual Appliance v3.7.0. Module Options msf use auxiliary/admin/http/sophos/wpatraversal msf...
Sophos Web Protection Appliance 3.7.8.1 XSS / Command Execution
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Sophos Web Protection Appliance vulnerable version: = 3.7.8.1 fixed version: 3.7.8.2 impact: Critical CVE number: CVE-2013-2641,...
Microsoft Releases Anti-XSS Web Protection Library
Microsoft has released an open-source Web Protection Library WPL to help developers protect web sites from cross-site scripting attacks. The WPL, which is a set of .NET assemblies, is being offered as part of a defense in depth strategy to add an extra layer to any validation or secure coding...
CVE-2008-4515
Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection mechanism, which allows remote attackers to bypass authentication and access the 1 summary, 2 detail, 3 overrides, and 4 pwemail pages by disabling JavaScript...
CVE-2008-4515
The CVE-2008-4515 entry describes a vulnerability in Blue Coat K9 Web Protection 4.0.230 Beta where protection relies on client-side JavaScript. Disabling JavaScript can allow remote attackers to bypass authentication and access pages (summary, detail, overrides, pwemail). The available documenta...
K9 Web保护验证绕过漏洞
BUGTRAQ ID: 31584 CNCAN ID：CNCAN-2008100704 K9 Web Protection是一款桌面电脑上所使用的内容过滤解决方案，允许用户控制可访问的Internet内容。 K9 Web Protection存在验证绕过问题，本地攻击者可以利用漏洞未授权访问受影响的应用程序。 Blue Coat K9 Web Protection V4.0.230 Beta存在漏洞允许任何用户绕过位于http://127.0.0.1:2372的本地管理平台。 只要简单的禁用JavaScript可导致无需要密码访问应用程序。 Blue Coat Systems K9 We...
bluecoat-bypass.txt
Blue Coat K9 Web Protection V4.0.230 Beta Vulnerability Set 5, 2008 -- Affected Vendors: Blue Coat -- Affected Products: K9 Web Protection V4.0.230 Beta -- Download at: http://www1.k9webprotection.com/getk9/beta.php -- Vulnerability Details: A vulnerability exists in the Blue Coat K9 Web Protecti...
Blue Coat K9 Web Protection Multiple Buffer Overflow Vulnerabilities
Blue Coat K9 Web Protection is prone to a stack based buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Blue Coat K9 Web Protection Referer头栈溢出漏洞
BUGTRAQ ID: 30463 CVECAN ID: CVE-2007-2952 K9 Web Protection是家用电脑上所使用的内容过滤解决方案，允许用户控制可访问的Internet内容。 在访问基于Web的管理接口时K9 Web Protection的过滤服务（k9filter.exe）没有正确地处理Referer头。如果用户访问了恶意站点并向该接口返回了超长的Referer头，就可以触发栈溢出，导致执行任意指令。 Blue Coat Systems K9 Web Protection 3.2.44 Blue Coat Systems -----------------...
Blue Coat K9 Web Protection HTTP响应栈溢出漏洞
BUGTRAQ ID: 30464 CVECAN ID: CVE-2007-2952 K9 Web Protection是家用电脑上所使用的内容过滤解决方案，允许用户控制可访问的Internet内容。 K9 Web Protection的过滤服务（k9filter.exe）没有正确地处理从中央服务器（sp.cwfservice.net）所返回的HTTP版本信息，如果远程攻击者劫持了发送给中央服务器的请求并重新定向到恶意服务的话，则包含有超长HTTP版本信息的响应就可以触发栈溢出，导致在用户系统上执行任意指令。 Blue Coat Systems K9 Web Protection...
Stack overflow
Multiple stack-based buffer overflows in the filter service aka k9filter.exe in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow 1 remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and 2 man-in-the-middle attacke...
DSquare Exploit Pack: D2SEC_K9WEB
Name| d2seck9web ---|--- CVE| CVE-2007-2952 Exploit Pack| D2ExploitPack Description| Blue Coat K9 Web Protection 'Referer' Header Stack Overflow Vulnerability Notes|...
CVE-2007-2952
Multiple stack-based buffer overflows in the filter service aka k9filter.exe in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow 1 remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and 2 man-in-the-middle attacke...
CVE-2007-2952
Multiple stack-based buffer overflows in the filter service aka k9filter.exe in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow 1 remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and 2 man-in-the-middle attacke...
CVE-2007-2952
Blue Coat K9 Web Protection 3.2.44 (Filter 3.2.32) has concrete stack-based buffer overflow vulnerabilities in k9filter.exe. An attacker can trigger remote code execution: (1) via a crafted long Referer header to the Web Protection Administration interface, and (2) via an HTTP response with an ov...
Blue Coat K9 Web Protection buffer overflow
Buffer overflow on Referer header parsing. Buffer overflow on control server response parsing...
Secunia Research: Blue Coat K9 Web Protection Response Handling Buffer Overflows
====================================================================== Secunia Research 31/07/2008 - Blue Coat K9 Web Protection Response Handling Buffer Overflows - ====================================================================== Table of Contents Affected...
Secunia Research: Blue Coat K9 Web Protection "Referer" Header Buffer Overflow
====================================================================== Secunia Research 31/07/2008 - Blue Coat K9 Web Protection "Referer" Header Buffer Overflow - ====================================================================== Table of Contents Affected...
CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow
CSIS Security Group has discovered a remote exploitable arbitrary overwrite, in the Blue Coat K9 Web Protection local Web configuration manager on 127.0.0.1 and port 2372. This allows an attacker to perform at least a Denial of Service condition, on the usage of internet. Since the overflow can...