CVE-2007-4023

Cross-site scripting XSS vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-4023

Cross-site scripting XSS vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-4023

Aruba Mobility Controller is affected by a cross-site scripting (XSS) vulnerability in the login CGI page. The issue impacts Aruba Mobility Controller versions 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions. The vulnerability allows remote attackers to inject arbitrary web scrip...

JVN#25471539 Aruba Mobility Controller Series cross-site scripting vulnerability

Aruba Mobility Controller series, switch products from Aruba Networks, contain a cross-site scripting vulnerability in the login page of the web management interface. Impact An arbitrary script may be executed on the user's web browser. Solution Apply the patch Users of the products should apply...

CVE-2007-0932

The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...

Heap overflow

Heap-based buffer overflow in the management interfaces in 1 Aruba Mobility Controllers 200, 800, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows remote attackers to cause a denial of service process crash and possibly execute arbitrary code via long credential string...

Authentication flaw

The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...

CVE-2007-0931

Heap-based buffer overflow in the management interfaces in 1 Aruba Mobility Controllers 200, 800, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows remote attackers to cause a denial of service process crash and possibly execute arbitrary code via long credential string...

CVE-2007-0932

The CVE-2007-0932 entry affects Aruba Mobility Controllers (models 200, 600, 2400, 6000) and Alcatel-Lucent OmniAccess Wireless (43xx and 6000). The root issue is improper authentication and privilege assignment for the guest account, enabling remote attackers to access administrative interfaces ...

CVE-2007-0931

The CVE describes a heap-based buffer overflow in the management interfaces of Aruba Mobility Controllers (200, 800, 2400, 6000) and Alcatel-Lucent OmniAccess Wireless (43xx, 6000). The underlying flaw allows remote attackers to trigger a denial of service (process crash) and potentially execute ...

CVE-2007-0932

The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...

CVE-2007-0931

Heap-based buffer overflow in the management interfaces in 1 Aruba Mobility Controllers 200, 800, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows remote attackers to cause a denial of service process crash and possibly execute arbitrary code via long credential string...

Aruba Mobility Controller multiple security vulnerabilities

Unauthorized access to management interface thorugh wireless network. Buffer overflow...

[Full-disclosure] Aruba Networks - Unauthorized Administrative and WLAN Access through Guest Account

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.001 8-Feb-2007 Vendor: Aruba Networks, http://www.arubanetworks.com Affected Products: Aruba Mobility Controllers 200, 600, 2400, 6000 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 Vulnerability: Unauthorized Administrative a...

[Full-disclosure] Aruba Mobility Controller Management Buffer Overflow

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.002 8-Feb-2007 Vendor: Aruba Networks, http://www.arubanetworks.com Affected Products: Aruba Mobility Controllers 200, 600, 2400, 6000 Alcatel Alcatel-Lucent OmniAccess Wireless 43xx, 6000 Vulnerability: Aruba Mobility Controlle...

Aruba Mobility Controller vulnerable to privilege escalation

Overview The Aruba Mobility Controller Management Interface contains a privilege escalation vulnerability. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description The Aruba Mobility Controllers are used to process and control network traffic in...

Aruba Mobility Controller Management Interface contains a buffer overflow

Overview The Aruba Mobility Controller Management Interface contains a buffer overflow. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description The Aruba Mobility Controllers are used to process and control network traffic in a wireless network...