3019 matches found
CVE-2006-0531
CVE-2006-0531 affects Sun Java System Access Manager 7.0. The vulnerability allows local users logged in as root to bypass authentication and gain top-level administrator privileges via the amadmin CLI. Remediation referenced in connected documents includes Sun patches 120954-12 and 120955-12 for...
IBM Tivoli Access Manager Plugin - Directory Traversal
IBM Tivoli Access Manager Plugin - Directory Traversal source: https://www.securityfocus.com/bid/16494/info Tivoli Access Manager Plugin for Web Servers is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...
IBM Tivoli Access Manager Plugin - Directory Traversal
source: https://www.securityfocus.com/bid/16494/info Tivoli Access Manager Plugin for Web Servers is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...
[SA18103] Cisco Clean Access Manager Obsolete JSP Files Vulnerability
TITLE: Cisco Clean Access Manager Obsolete JSP Files Vulnerability SECUNIA ADVISORY ID: SA18103 VERIFY ADVISORY: http://secunia.com/advisories/18103/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: Cisco Clean Access CCA 3.x http://secunia.com/product/5561/ DESCRIPTION: Al...
CVE-2005-3971
Cross-site scripting XSS vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field...
CVE-2005-3971
CVE-2005-3971 affects Citrix MetaFrame Secure Access Manager 2.0–2.2 and NFuse Elite 1.0. It is a cross-site scripting (XSS) vulnerability in the login form that allows remote attackers to inject arbitrary web script or HTML via the username field. The connected sources document this vulnerabilit...
CVE-2004-2558
Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provide...
CVE-2004-2558
Technical details about CVE-2004-2558 are not provided in the connected documents. Available descriptions reference an unspecified session hijacking vulnerability in IBM Tivoli/WebSphere products. Monitor for updates and rely on official advisories for precise impact and fixes.
FTP Internet Access Manager <= 1.2 Command Execution Exploit
Exploit for unknown platform in category remote exploits ============================================================ FTP Internet Access Manager newProto="tcp", PeerAddr=$adr, PeerPort=21, Reuse=1 or die "Error: can't connect to $adr:21\n"; $chr1 = "\x55\x53\x45\x52"; $chr2 = "\x50\x41\x53\x53";...
FTP Internet Access Manager <= 1.2 Command Execution Exploit
No description provided by source. !usr/bin/perl FTP Internet Access Manager Command Exploit ---------------------------------------------- Infam0us Gr0up - Securiti Research Info: infamous.2hell.com Vendor URL: www.softfolder.com/internetaccessmanager.html use IO::Socket; if @ARGV != 4 print "\n...
[SA13119] IBM Tivoli Access Manager for e-business Kerberos Vulnerabilities
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
Sun Java System Access Manager Version Detection
Binary data 4565.prm...
Ошибки в CGI
Vulnerability in PVD access manager 2.0. Version: 2.0 and lower ? Vulnerability: Use scripts without rights of the admin. Exploit: URL/htadmin.pl? step=1&workdir=USER'sDIR&user= USERNAME - delete User URL/htadmin.pl?step=2&workdir=USER'sDIR&user= USERNAME&cpassword=NEWPASS - Change the password...
CVE-2000-0516
When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN Distinguished Name name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server...
CVE-2000-0516
The CVE-2000-0516 entry concerns Shiva Access Manager 5.0.0, where configuration data stored in an LDAP directory includes the root DN and password written in cleartext to a file that is world-readable. This local-access vulnerability enables a local attacker to read sensitive credentials and com...
Shiva Access Manager 5.0.0 Plaintext LDAP root password.
In testing Intel's Shiva Access Manager RADIUS/Tacacs+ product, i recently came across an important security hole in the LDAP connectivity on the Solaris platform version of this product. When you configure the S.A.M. to store all of it's information in an LDAP directory, it asks that you give it...
CVE-2000-0516
When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN Distinguished Name name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server...
Intel Corporation Shiva Access Manager 5.0 - Solaris World Readable LDAP Password
source: https://www.securityfocus.com/bid/1329/info The Shiva Access Manager is a solution for centralized remote access authentication, authorization, and accounting offered by Intel. It runs on Solaris and Windows NT. Shiva Access Manager is vulnerable to a default configuration problem in its...
Intel Corporation Shiva Access Manager 5.0 - Solaris World Readable LDAP Password
Intel Corporation Shiva Access Manager 5.0 - Solaris World Readable LDAP Password source: https://www.securityfocus.com/bid/1329/info The Shiva Access Manager is a solution for centralized remote access authentication, authorization, and accounting offered by Intel. It runs on Solaris and Windows...