CVE-2009-4409

CVE-2009-4409 affects SEIL/B1 firmware (PPPAC) 1.00–2.52. The CHAP and MS-CHAP-V2 authentication implementations use the same challenge for subsequent authentication attempts, enabling replay attacks to bypass authentication and potentially grant network access. Red Hat and JVN entries corroborat...

CVE-2009-4292

Buffer overflow in the URL filtering function in Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.40 through 2.51 allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.30 through 2.51, when NAT is enabled, allows remote attackers to cause a denial of service system restart via crafted GRE packets...

CVE-2009-4292

CVE-2009-4292 corresponds to a buffer overflow in the URL filtering function of Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware versions 2.40–2.51. The vulnerability may allow a remote attacker to execute arbitrary code when processing specially crafted URLs. Public details consi...

SEIL/B1 authentication issue

Overview SEIL/B1 contains an issue in the implementation of the PPP Access Concentrator PPPAC function, which may allow replay attacks to be performed during the authentication process. The PPP Access Concentrator PPPAC function within SEIL/B1 contains an issue in the CHAP and MS-CHAP-V2...

JVN#49602378 SEIL/B1 authentication issue

The PPP Access Concentrator PPPAC function within SEIL/B1 contains an issue in the CHAP and MS-CHAP-V2 authentication processes, the same challenge value is repeatedly used for each authentication attempt. Impact A third party may be able to perform replay attacks. As a result, the third party ma...

SEIL/X Series and SEIL/B1 denial of service vulnerability

Overview SEIL/X Series and SEIL/B1 contain a denial of service DoS vulnerability. SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the NAT function, which may lead to a denial of service DoS vulnerability. Impact When processing a specially...

SEIL/X Series and SEIL/B1 buffer overflow vulnerability

Overview SEIL/X Series and SEIL/B1 contain a buffer overflow vulnerability. SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the URL filtering function, which may lead to a buffer overflow vulnerability. Impact When processing a specially...

JVN#06362164 SEIL/X Series and SEIL/B1 buffer overflow vulnerability

SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the URL filtering function, which may lead to a buffer overflow vulnerability. Impact When processing a specially crafted URL, a remote attacker may be able to execute arbitrary code. Solution...

GForge Multiple SQLi Vulnerabilities (Mar 2009) - Active Check

GForge is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 8 : bind-9.5.0-23.b1.fc8 (2008-0903)

CVE-2008-0122, libbind.so off-by-one buffer overflow, very low severity Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 8 : bind-9.5.0-20.b1.fc8 (2007-4655)

bind-chroot-admin called restorecon on /proc filesystem 405281 - 9.5.0b1 release 405281, 392491 - stop with initscript will fail if rndc was disabled 417431 - fixed IDN support in dig and host utilities 412241 - added dst/gssapi.h to -devel subpackage 419091 - CVE-2007-6283 - /etc/rndc.key file...

Unfixed XSS vulnerability at www.b1.ru

Security researcher zuppergazi, has submitted on 06/03/2007 a cross-site-scripting XSS vulnerability affecting www.b1.ru, which at the time of submission ranked 3809358 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2007. It is currently...

vbPortal 3.0.2 <= 3.6.0 b1 (cookie) Remote Code Excution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "vbPortal 3.0.2 = 3.6.0 Beta 1 Remote Command Excution \r\n"; echo "By R00tATI Mail : havoc1988 at gmail dot com \r\n"; echo "Thank you Minus-Power \r\n"; echo "Thank you rgod for your clear samples \r\n"; echo "site:...

CVE-2001-0569

Zope 2.3.1b1 and earlier are affected by a vulnerability in the return values of ObjectManager, PropertyManager, and PropertySheet, per CVE-2001-0569. Advisories (Debian DSA-043-1, Mandrake MDKSA-2001:025) describe hotfixes and recommend upgrading to patched Zo pe packages; the mutability of meth...