CVE-2008-5563

CVE-2008-5563 affects Aruba Mobility Controller versions 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x. The vulnerability allows remote attackers to cause a denial of service (device crash) by sending a malformed EAP frame. The sources consistently describe a network-exposed DoS vector ...

DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame (Aruba Advisory ID: AID-12808)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aruba Networks Security Advisory Title: DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame. Aruba Advisory ID: AID-12808 Revision: 1.0 For Public Release on 12/8/2008 +----------------------------------------------------...

Aruba Mobility Controller SNMP Community String Disclosure

Aruba Mobility Controller SNMP Community String Disclosure Product: Aruba Mobility Controller http://www.arubanetworks.com/products/mobilitycontrollers.php Aruba mobility controller can be monitored via SNMP. It is possible to learn all configured SNMP community strings as long as at least one of...

Aruba Mobility Controller Series cross-site scripting vulnerability

Overview Aruba Mobility Controller series, switch products from Aruba Networks, contain a cross-site scripting vulnerability. Aruba Mobility Controller series, switch products from Aruba Networks, contain a cross-site scripting vulnerability in the login page to the web management screens. Impact...

CVE-2008-2272

Multiple cross-site scripting XSS vulnerabilities in the web interface in Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.5.x, 2.5.6.x, 3.1.1.x, 3.2.0.x, and 3.3.1.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web interface in Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.5.x, 2.5.6.x, 3.1.1.x, 3.2.0.x, and 3.3.1.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-2273

CVE-2008-2273 : Technical details for this entry are not publicly available in the provided documents; no affected products, vulnerable components, vectors, or fixes are specified here. Monitor for updates.

Aruba Mobility Controller multiple security vulnerabilities

Unauthorized access with TACACS authentication, crossite scripting...

Authentication flaw

Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS or earlier allows remote attackers to bypass authentication mechanisms and obtain management or VPN interface access...

CVE-2008-0150

CVE-2008-0150 affects Aruba Mobility Controller LDAP authentication, with versions 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS (or earlier). The issue allows remote attackers to bypass authentication and gain access to management or VPN interfaces. The initial descriptions i...

CVE-2007-4023

Cross-site scripting XSS vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-4023

Cross-site scripting XSS vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-4023

Aruba Mobility Controller is affected by a cross-site scripting (XSS) vulnerability in the login CGI page. The issue impacts Aruba Mobility Controller versions 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions. The vulnerability allows remote attackers to inject arbitrary web scrip...