IBM WebSphere Application Server < 6.0.2.33 Multiple Vulnerabilities

IBM WebSphere Application Server 6.0.2 before Fix Pack 33 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Provided an attacker has valid credentials, it may be possible to hijack an authenticated session. PK66676 - The PerfServlet code...

Code injection

The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server WAS 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in 1 web-inf, 2 meta-inf, and unspecified other...

Cross site scripting

Cross-site scripting XSS vulnerability in the administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.23 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

IBM WebSphere Application Server 7.0 < Fix Pack 1 Multiple Vulnerabilities

Binary data 4783.prm...

SOL8863 - Cross-Site Scripting (XSS) vulnerabilities in the FirePass Administrative Console

Multiple cross-site scripting XSS vulnerabilities exist in the FirePass Administrative Console pages. The affected Administrative Console pages fail to fully sanitize certain URL arguments before the requested web page content is returned to the browser. These vulnerabilities are only available t...

LANDesk Management Agent Detection

The remote service is a LANDesk Management Agent, one of the components of LANDesk Management Suite installed on managed clients for communicating with the administrative console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29994; scriptversion"1.11";...

CVE-2007-6679

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...

Code injection

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...

CVE-2007-6679

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...

SNMPc Management Server Default Credentials

The SNMPc Management Server installation on the remote host uses a default username / password combination to control access to its administrative console. Knowing these, an attacker can gain control of the affected application. C Tenable Network Security, Inc. include"compat.inc"; if description...

SOL6920 - Cross-site scripting vulnerabilities

Multiple cross-site scripting XSS vulnerabilities exist in the FirePass Administrative Console pages. The affected FirePass URLs fail to fully sanitize certain URL arguments before the requested web page content is returned to the browser. It is possible for an attacker to create web pages, email...

CVE-2006-2433

Technical details for CVE-2006-2433 are not publicly available in the provided documents; no affected product, vulnerable component, impact, or remediation is specified here. Monitor for updates.

CVE-2006-2433

Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and attack vectors related to the "administrative console"...

[AppSecInc Advisory WEBSP05-V0098] Remote Buffer overflow in WebSphere Application Server Administrative Console

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote Buffer overflow in WebSphere Application Server Administrative Console AppSecInc Team SHATTER Security Advisory WEBSP05-V0098 http://www.appsecinc.com/resources/alerts/general/WEBSPHERE-001.html June 07, 2005 Risk level: HIGH Credits: This...

Advisory: ArGoSoft Mail Server Pro 1.8.1.7 DoS

Author: Stan Bubrouski Date: August 4, 2002 Product: ArGoSoft Mail Server Pro Versions affected: 1.8.17 current and previous Severity: A malicious user or users could mount a DoS using mail forwarding and automatic responses to render the adminstrative console unresponsive and raise CPU usage to...

CVE-2002-0544

Aprelium Abyss Web Server abyssws before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges...

Advisory: Chili!Soft ASP Multiple Vulnerabilities

Author: Stan Bubrouski [email protected] Date: February 20, 2001 Package: Chili!Soft ASP Versions affected: 3.5.2 and possibly previous versions. Severity: 1 A remote user could potentially view sensative information and take remote control of the server. 2 The installer installs a default usernam...