535 matches found
SA129 : Multiple libxml2 Vulnerabilities
SUMMARY Blue Coat products that include a vulnerable version of the libxml2 library are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to execute arbitrary code and cause denial of service through memory corruption. AFFECTED PRODUCTS The following...
SA130 : Security Control Bypass Vulnerability in ProxySG, ASG, and CacheFlow
SUMMARY Some HTTP and HTTPS requests may trigger reverse DNS RDNS lookups in ProxySG, ASG, and CacheFlow. When these products are configured with policy rules that use hostnames from RDNS lookup results, such requests may bypass security controls such as blocking a request, requiring user...
SA124 : NSS Vulnerabilities March 2016
SUMMARY Blue Coat products that include affected versions of NSS are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to cause denial of service through application crashes, or to possibly execute arbitrary code. AFFECTED PRODUCTS The following products...
SA120 : Truncated Diffie-Hellman Secret Generation in libssh2
SUMMARY Blue Coat products that include affected versions of libssh2 are susceptible to a truncated Diffie-Hellman secret length vulnerability. A remote man-in-the-middle MITM attacker can exploit this vulnerability to intercept SSH connections that originate from Blue Coat products. The MITM...
网康 NS-ASG 6.2 用安全网关 /admin/cert_download.php 任意 文件下载
No description provided by source...
网康安全网关(Netentsec ASG) 6.3 /3g/menu.php uid参数SQL注入漏洞
No description provided by source...
网康安全网关(Netentsec ASG) 6.3 /WebPages/history.php uid参数SQL注入漏洞
No description provided by source...
网康安全网关(Netentsec ASG) 6.3 /WebPages/login.php errstr参数XSS漏洞
No description provided by source...
网康 NS-ASG /admin/export_log.php type参数存在越权日志下载
No description provided by source...
网康 NS-ASG 6.2 用安全网关 /debug/list_logfile.php 任意文件删除&任意命令执行漏洞
No description provided by source...
网康 NS-ASG 应用安全网关 6.2 /3g/index.php SQL注入
No description provided by source...
网康 NS-ASG 6.2 用安全网关 /protocol/iscdevicestatus/getsysdatetime.php 命令执行漏洞
No description provided by source...
网康安全网关(Netentsec ASG) 6.3 /debug/rproxy_diag.php 任意文件下载漏洞
No description provided by source...
NS-ASG 应用安全网关 resetpwd.php等10处 SQL注入漏洞
No description provided by source...
网康 NS-ASG 应用安全网关 6.2 6.3 vpnweb/resetpwd/resetpwd.php 等文件 SQL注入漏洞
No description provided by source...
网康 NS-ASG 应用安全网关 6.2 6.3 /vpnweb/index.php?para=index sql注入漏洞
No description provided by source...
Netentsec ASG 网康应用安全网关 resetpwd.php SQL注入
No description provided by source...
Netentsec ASG网康应用安全网关在commonpluginDownload.php存在任意文件下载漏洞
0x01漏洞简介 Netentsec ASG网康应用安全网关在/commonplugin/Download.php存在任意文件下载漏洞。远程攻击者可以利用参数licensefile 或者 reqfile 结合..下载任意文件。如果下载文件是SvrLicense.license表示该漏洞已经修复，如果下载文件为自己包含的文件，说明该漏洞仍然存在。 0x02漏洞分析 查看问题代码如下： obstart""; header"Expires: Sat, 01 Jan 2000 00:00:00 GMT"; header"Last-Modified: ".gmdate"D, d M Y...
Netentsec ASG 网康应用安全网关在admin/config_ISCGroupTimePolicy.php等多处存在SQL注入漏洞
No description provided by source...
Open redirect
Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway ASG 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as...