CVE-2008-3728

Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to determine the installation path, IP addresses, and error messages via direct requests to files under LOG/...

CVE-2008-3728

CVE-2008-3728 affects MicroWorld Technologies MailScan 5.6.a espatch 1. Web-based administration stores sensitive information under the web root with insufficient access control, enabling remote attackers to discover installation path, IP addresses, and error messages by requesting files under LO...

CVE-2008-3729

CVE-2008-3729 affects MicroWorld Technologies MailScan Web-Based Administration (MailScan 5.6.a espatch 1). The issue allows remote attackers to bypass authentication and obtain administrative access by sending a direct request with (1) an IsAdmin=true cookie value or (2) no cookie. This is a coo...

CVE-2008-3726

Cross-site scripting XSS vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2008-3728

Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to determine the installation path, IP addresses, and error messages via direct requests to files under LOG/...

CVE-2008-3726: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2008-3727: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

Security Best Practice: Familiarize Yourself with the Max Ping Size Protection

Ping is a computer network administration utility used to test whether a particular host is reachable across an IP network and to measure the round-trip time for packets sent from the local host to a destination computer, including the local host's own interfaces.Ping operates by sending Internet...

HP-UX PHCO_36562 : HP-UX Running System Administration Manager (SAM), Unintended Remote Access (HPSBUX02286 SSRT071466 rev.1)

s700800 11.11 cumulative SAM patch : A potential security vulnerability has been identified in HP-UX running System Administration Manager SAM. This vulnerability may allow unintended remote access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this...

HP-UX PHCO_36563 : HP-UX Running System Administration Manager (SAM), Unintended Remote Access (HPSBUX02286 SSRT071466 rev.1)

s700800 11.23 cumulative SAM patch : A potential security vulnerability has been identified in HP-UX running System Administration Manager SAM. This vulnerability may allow unintended remote access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this...

Stack overflow

Multiple stack-based buffer overflows in the filter service aka k9filter.exe in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow 1 remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and 2 man-in-the-middle attacke...

Code injection

Unspecified vulnerability in the HP System Administration Manager SAM on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allow remote attackers to read or modify arbitrary files, related to an "empty systems list."...

CVE-2007-2952

Multiple stack-based buffer overflows in the filter service aka k9filter.exe in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow 1 remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and 2 man-in-the-middle attacke...

CVE-2008-1662

Unspecified vulnerability in the HP System Administration Manager SAM on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allow remote attackers to read or modify arbitrary files, related to an "empty systems list."...

CVE-2007-2952

Multiple stack-based buffer overflows in the filter service aka k9filter.exe in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow 1 remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and 2 man-in-the-middle attacke...

CVE-2008-1662

Unspecified vulnerability in the HP System Administration Manager SAM on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allow remote attackers to read or modify arbitrary files, related to an "empty systems list."...

CVE-2008-1662

CVE-2008-1662 affects HP-UX SAM (System Administration Manager) on HP-UX B.11.11 and B.11.23. When SAM is used to configure NFS, an empty systems list can lead to unintended remote access, allowing read or modification of arbitrary files. The CVSS base metrics indicate high impact with network ac...

CVE-2008-1662: Undefined Security Weakness

Unspecified vulnerability in the HP System Administration Manager SAM on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allow remote attackers to read or modify arbitrary files, related to an "empty systems list."...

HP-UX System Administration Manager unauthorized access

No description provided...

HP-UX System Administration Manager NFS配置安全绕过漏洞

BUGTRAQ ID: 30449 CVE ID：CVE-2008-1662 CNCVE ID：CNCVE-20081662 HP-UX是一款商业性质的操作系统。 HP-UX SAM应用程序可为NFS提供不可期的配置，远程攻击者可以利用漏洞绕过部分安全限制，访问受影响的电脑。 目前没有详细漏洞细节提供。 HP-UX B.11.23 HP-UX B.11.11 可参考如下安全公告获得补丁信息：...