CVE-2016-1168

CVE-2016-1168 affects NEC Aterm WF800HP devices with firmware version 1.0.17 and earlier. The vulnerability is a Cross-site Request Forgery (CSRF) that can allow a logged-in user to be coerced into performing unintended actions when visiting a malicious page, potentially hijacking the user’s auth...

CVE-2016-1167

Cross-site request forgery CSRF vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-1168

Cross-site request forgery CSRF vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-1167

The CVE-2016-1167 issue affects the NEC Aterm WG300HP wireless router. A cross-site request forgery (CSRF) vulnerability could allow an attacker to hijack the authentication of an authenticated user. Affected component: the device’s management interface (web UI); root cause is CSRF (CWE-352) enab...

PT-2016-4614

Name of the Vulnerable Software and Affected Versions NEC Aterm WG300HP devices affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations At the moment, there is no information about...

CVE-2016-1167: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users...

PT-2016-4615

Name of the Vulnerable Software and Affected Versions NEC Aterm WF800HP versions 1.0.17 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions 1.0.17 and earlier, update to a version lat...

CVE-2016-1168: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hijack the authentication of arbitrary users...

NEC Aterm WG300HP Cross-Site Request Forgery Vulnerability

The NEC Aterm WG300HP is a wireless router product from Nippon Electric NEC. A cross-site request forgery vulnerability exists in the NEC Aterm WG300HP. An attacker can exploit this vulnerability to perform an unauthorized operation by tricking a logged in user into browsing a malicious web page...

NEC Aterm WF800HP Cross-Site Request Forgery Vulnerability

The NEC Aterm WF800HP is a wireless router product from Nippon Electric NEC. A cross-site request forgery vulnerability exists in the NEC Aterm WF800HP using firmware Ver1.0.17 and earlier. An attacker can exploit this vulnerability to perform an unauthorized operation by tricking a logged-in use...

Aterm WF800HP vulnerable to cross-site request forgery

Overview Aterm WF800HP provided by NEC Corporation contains a cross-site request forgery vulnerability CWE-352. Satoshi Ogawa of Mitsui Bussan Secure Directions,Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

Aterm WG300HP vulnerable to cross-site request forgery

Overview Aterm WG300HP provided by NEC Corporation contains a cross-site request forgery vulnerability CWE-352. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#82020528: Aterm WG300HP vulnerable to cross-site request forgery

Aterm WG300HP provided by NEC Corporation contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Apply a Workaround The following workaround may mitigate the affects of this...

JVN#07818796: Aterm WF800HP vulnerable to cross-site request forgery

Aterm WF800HP provided by NEC Corporation contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the Firmware Update to the latest firmware version according to the information...

Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the aterm package of the Gentoo Linux operating system up to version 1.0.1-r1 can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

Gentoo Security Advisory GLSA 200805-03 (aterm eterm rxvt mrxvt multi-aterm wterm rxvt-unicode)

The remote host is missing updates announced in advisory GLSA 200805-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200805-03 (aterm eterm rxvt mrxvt multi-aterm wterm rxvt-unicode)

The remote host is missing updates announced in advisory GLSA 200805-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200805-03 : Multiple X11 terminals: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-200805-03 Multiple X11 terminals: Local privilege escalation Bernhard R. Link discovered that RXVT opens a terminal on :0 if the '-display' option is not specified and the DISPLAY environment variable is not set. Further research ...

[ GLSA 200805-03 ] Multiple X11 terminals: Local privilege escalation

Gentoo Linux Security Advisory GLSA 200805-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2008-1142

rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that th...