28 matches found
Airlock WAF 4.2.4 - Overlong UTF-8 Sequence Bypass
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Airlock WAF overlong UTF-8 sequence bypass product: Airlock vulnerable version: = 4.2.4 without hotfix HF4213 fixed version: 4.2.5 impact: critical homepage:...
phion airlock Web Application Firewall multiple security vulnerabilities
DoS, code execution...
Cross site request forgery (csrf)
The management interface in the phion airlock Web Application Firewall WAF 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service resource consumption via...
CVE-2009-2300
The management interface in the phion airlock Web Application Firewall WAF 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service resource consumption via...
CVE-2009-2300
The CVE-2009-2300 entry concerns the Phion Airlock Web Application Firewall (WAF) version 4.1-10.41, where the management CGI interface mishandles requests with large width/height parameters for an image. This underlies arbitrary command execution or resource-exhaustion DoS via a crafted request....
CVE-2009-2300
The management interface in the phion airlock Web Application Firewall WAF 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service resource consumption via...
CVE-2009-2300: Undefined Security Weakness
The management interface in the phion airlock Web Application Firewall WAF 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service resource consumption via...
