CVE-2005-3755

Directory traversal vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to determine the existence of arbitrary files via a relative path from a style sheet directory, then comparing the resulting error messages...

CVE-2005-3755

Directory traversal vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to determine the existence of arbitrary files via a relative path from a style sheet directory, then comparing the resulting error messages...

CVE-2005-3758

CVE-2005-3758 is an XSS in Google Mini Search Appliance (and possibly Google Search Appliance) triggered by a malicious proxystylesheet in the proxystylesheet variable, allowing remote injection of Javascript/HTML. Affected: proxystylesheet handling; vulnerability type: XSS. Impact (per provided ...

CVE-2005-3757

The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as 1 system-property...

CVE-2005-3755

CVE-2005-3755 describes a directory traversal vulnerability in Google Mini Search Appliance (and possibly Google Search Appliance). The issue allows remote attackers to determine existence of arbitrary files by supplying a relative path from a style sheet directory and inspecting error messages. ...

CVE-2005-3757

The CVE-2005-3757 issue affects the Saxon XSLT parser used by Google Mini Search Appliance (and possibly Google Search Appliance). The vulnerability arises from dangerous Java methods (system-property, sys:getProperty, run:exec) in the select attribute of xsl:value-of in XSLT style sheets, enabli...

CVE-2005-3754

CVE-2005-3754 describes a cross-site scripting (XSS) vulnerability in the Google Mini Search Appliance, and possibly Google Search Appliance, caused by insufficient sanitization of the proxystylesheet parameter. The flaw allows remote attackers to inject arbitrary Javascript (and potentially othe...

CVE-2005-3756

Nessus plugin data in the connected document associates CVE-2005-3756 with Google Search Appliance proxystylesheet vulnerabilities that include remote access flaws enabling port scanning and potential code execution (via unsanitized proxystylesheet input). The CVE description in the initial docum...

CVE-2005-3756

Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary hosts via URLs with modified targets and ports, then comparing the resulting error messages to determine open and closed ports...

CVE-2005-3757

Removed by vendor...

Google Search Appliance proxystylesheet Parameter Multiple Remote Vulnerabilities (XSS, Code Exec, ID)

The remote Google Search Appliance / Mini Search Appliance fails to sanitize user-supplied input to the 'proxystylesheet' parameter, which is used for customization of the search interface. Exploitation of this issue may lead to arbitrary code execution as an unprivileged user, port scanning, fil...

Symantec Dynamic VPN Services: ISAKMP Denial of Service

SUMMARY The NISCC National Infrastructure Security Co-ordination Centre a UK-sponsored inter-departmental agency has identified nearly five-thousand potential ISAKMP vulnerabilities. Test for these vulnerabilities were created by the NISCC and distributed to an unspecified number of vendors...

[Full-disclosure] Google Search Appliance proxystylesheet Flaws

This document can be found online at: - http://metasploit.com/research/vulns/googleproxystylesheet/ Title: Google Search Appliance proxystylesheet Flaws Release Date: November 21, 2005 Patch Date: August 16, 2005 Reported Date: June 10, 2005 Vendor: Google Systems Affected: Google Mini Search...

Multiple Google Search Appliance vulnerabilities

Crossite scripting, code execution...

google.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Google Search Appliance proxystylesheet XSLT Java Code Execution

Exploit for hardware platform in category remote exploits ================================================================ Google Search Appliance proxystylesheet XSLT Java Code Execution ================================================================ This file is part of the Metasploit Framewor...

Google Search Appliance - proxystylesheet XSLT Java Code Execution (Metasploit)

Google Search Appliance - proxystylesheet XSLT Java Code Execution Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license a...

Google Search Appliance proxystylesheet XSLT Java Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Google Search Appliance Detection

The remote host seems to be a Google Search Appliance. These appliances are used to index the files contained on an intranet and make them searchable. Make sure that this appliance can only be accessed by authorized personel or that the data it indexes is public. C Tenable Network Security, Inc...

Google Search Appliance - proxystylesheet XSLT Java Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...