CVE-2009-1465

CVE-2009-1465 affects Application Access Server (A-A-S) 2.0.48, where the admin account uses the default password “wildbat,” enabling remote attackers to obtain administrative access. The provided documents confirm the component and default credential issue but do not specify a fixed version or o...

CVE-2009-1464

Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...

A-A-S Application Access Server Default Admin Password

The remote installation of A-A-S Application Access Server is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative control of the affected application and host. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

Klinzmann A-A-S 2.0.48 XSRF Exploit

!-- AASHack 1.0 By Felipe M. Aragon Affected Versions: AAS 2.0.48 and possibly older versions This is an exploit demonstration code for the A-A-S Application Access Server index.aas job parameter XSRF vulnerability CVE-2009-1464 This script has been successfully tested on IE 7.0 and Firefox 3.08...

Klinzmann A-A-S XSRF / Code Execution

Syhunt: A-A-S Application Access Server Multiple Security Vulnerabilities Advisory-ID: 200905111 Discovery Date: 3.23.2009 Release Date: 5.11.2009 Affected Applications: A-A-S 2.0.48 and possibly older versions Class: XSRF Cross Site Request Forgery Arbitrary Command Execution, Undocumented Defau...

Syhunt: A-A-S (Application Access Server) Multiple Security Vulnerabilities

Syhunt: A-A-S Application Access Server Multiple Security Vulnerabilities Advisory-ID: 200905111 Discovery Date: 3.23.2009 Release Date: 5.11.2009 Affected Applications: A-A-S 2.0.48 and possibly older versions Class: XSRF Cross Site Request Forgery Arbitrary Command Execution, Undocumented Defau...

A-A-S Application Access Server Multiple Vulnerabilities

According to its version number, the remote version of A-A-S Application Access Server is prone to multiple security issues including a cross-site request-forgery vulnerability, an insecure-default-password vulnerability and an information-disclosure vulnerability. Attackers can exploit these...

CVE-2004-2169

CVE-2004-2169 affects Application Access Server (A-A-S) 1.0.37 and earlier. Remote authenticated users can trigger a denial of service (application crash) by issuing a long file request. No remediation or fixes are detailed in the provided documents.

A-A-S Server Detection

Binary data 5022.prm...