Microsoft Forefront Unified Access Gateway 2010 External DNS Interaction Vulnerability

Microsoft Forefront Unified Access Gateway is an SSL VPN gateway server from Microsoft. Microsoft Forefront Unified Access Gateway 2010 external DNS interaction vulnerability allows remote attackers to Trigger URLs in the outbound DNS query origurl parameter from arbitrary hosts via a...

Microsoft Forefront Unified Access Gateway 2010 External DNS Interaction Vulnerability

Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the origurl parameter, possibly causing a traffic amplification and/or SSRF outcome...

Microsoft Forefront Unified Access Gateway 2010 External DNS Interaction

Exploit Title: Microsoft Forefront Unified Access Gateway 2010 External DNS Interaction Vendor Homepage: https://www.microsoft.com/ Version: 2010 CVE : CVE-2018-12571 Proof of Concept 1 Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for...

The vulnerability of the Horizon View virtualization platform and the Unified Access Gateway access server is caused by a buffer overflow in the dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Horizon View virtualization platform and the Unified Access Gateway access server stems from a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code on the device...

CVE-2017-4907

VMware Unified Access Gateway 2.5.x, 2.7.x, 2.8.x prior to 2.8.1 and Horizon View 7.x prior to 7.1.0, 6.x prior to 6.2.4 contain a heap buffer-overflow vulnerability which may allow a remote attacker to execute code on the security gateway...

Heap overflow

VMware Unified Access Gateway 2.5.x, 2.7.x, 2.8.x prior to 2.8.1 and Horizon View 7.x prior to 7.1.0, 6.x prior to 6.2.4 contain a heap buffer-overflow vulnerability which may allow a remote attacker to execute code on the security gateway...

CVE-2017-4907

VMware Unified Access Gateway 2.5.x, 2.7.x, 2.8.x prior to 2.8.1 and Horizon View 7.x prior to 7.1.0, 6.x prior to 6.2.4 contain a heap buffer-overflow vulnerability which may allow a remote attacker to execute code on the security gateway...

CVE-2017-4907

CVE-2017-4907 affects VMware Unified Access Gateway and Horizon View with a heap buffer-overflow that enables remote code execution. Affected: Unified Access Gateway 2.5x, 2.7x, 2.8.x before 2.8.1; Horizon View 6.x before 6.2.4 and 7.x before 7.1.0. Root cause: heap-based overflow in the processi...

CVE-2017-4907

VMware Unified Access Gateway 2.5.x, 2.7.x, 2.8.x prior to 2.8.1 and Horizon View 7.x prior to 7.1.0, 6.x prior to 6.2.4 contain a heap buffer-overflow vulnerability which may allow a remote attacker to execute code on the security gateway...

VMware Patches Multiple Security Issues in Workstation

VMware fixed two bugs in its VMware Workstation late Thursday night, including an insecure library loading vulnerability and a NULL pointer dereference vulnerability. The virtualization software company warned of the issues Thursday night in a security advisory VMSA-2017-0009. Jann Horn, a securi...

Cross site scripting

An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate the HTTP Referer header...

CVE-2017-5191

NetIQ Access Manager (NAM) versions 4.2 and 4.3 contain a cross-site scripting (XSS) vulnerability in the /NAGErrors URI. The issue arises because the Access Gateway Error page does not validate the HTTP Referer header, enabling a remote attacker to inject arbitrary web script or HTML. No exploit...

CVE-2017-5191

An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate the HTTP Referer header...

VMware Unified Access Gateway and Horizon View Heap Buffer Overflow Vulnerability

VMware Unified Access Gateway and Horizon View are both products of VMware. The former is a secure gateway for external access to remote desktops and applications through corporate firewalls; the latter is a device that allows access to VMware Horizon desktops from any location. A heap buffer...

VMware Unified Access Gateway, Horizon View and Workstation updates resolve multiple security vulnerabilities

a. Unified Access Gateway and Horizon View heap buffer-overflow vulnerability VMware Unified Access Gateway and Horizon View contain a heap buffer-overflow vulnerability which may allow a remote attacker to execute code on the security gateway. VMware would like to thank Claudio Moletta redr2e fo...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in Unified Access Gateway, Horizon View, and Workstation. Exploitation of these vulnerabilities could allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review VMware Securit...

VMSA-2017-0008:VMware Unified Access Gateway, Horizon View and Workstation updates resolve multiple security vulnerabilities

VMSA-2017-0008.2 VMware Unified Access Gateway, Horizon View and Workstation updates resolve multiple security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0008.2 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware...

StoreFront Events : the authentication protocols could not be enumerated because there is no challenge process

Issue : Cannot Complete Your Request From External Access Gateway With Event Logs as "the authentication protocols could not be enumerated because there is no challenge process "...

Smart Access Control Policy Not Working on XenApp Server

A customer was trying to launch a Citrix session and trying to copy data from the the Citrix session to clipboard on their local machine. They have a smart access policy on the XenApp server to block this clipboard functionality when traffic is coming from Access Gateway Citrix Gateway:...

Arbitrary File Download and Weak Password Vulnerability in DVR Access Gateway of Suzhou Kedar Technology Co.

DVR digital video recorder is a set of computer system for image storage and processing, with the function of long time video/voice recording, audio recording, remote monitoring and control. The DVR access gateway of Suzhou Kodak Technology Co., Ltd. suffers from arbitrary file download and weak...