4910 matches found
CVE-2005-1708
templates.admin.users.userformprocessing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true...
CVE-2005-1710
Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...
CVE-2005-1709
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license...
CVE-2005-1709
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license...
CVE-2005-1710
Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...
CVE-2005-1710
Affected software: Blue Coat Reporter prior to version 7.1.2. Vulnerability: multiple cross-site scripting (XSS) vulnerabilities. Root cause/ vectors: attacker-supplied data can be injected into web pages via (1) the username field in the Add User window, or (2) the volatile.license_to_add parame...
CVE-2005-1708
The CVE affects Blue Coat Reporter before 7.1.2, where templates.admin.users.user_form_processing allows an authenticated user to elevate to administrator by sending an HTTP POST that sets volatile.user.administrator to true. Root cause is improper handling of admin-flag assignment via user form ...
CVE-2005-1708
templates.admin.users.userformprocessing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true...
CVE-2005-1708: Undefined Security Weakness
templates.admin.users.userformprocessing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true...
Blue Coat Reporter 7.07.1 - Privilege Escalation
Blue Coat Reporter 7.07.1 - Privilege Escalation source: https://www.securityfocus.com/bid/13723/info Blue Coat Reporter is prone to a remote privilege escalation vulnerability. This issue is due to a failure in the application to properly authenticate a user prior to permitting access to...
CVE-2005-1709: Undefined Security Weakness
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license...
Blue Coat Reporter 7.07.1 - License HTML Injection
Blue Coat Reporter 7.07.1 - License HTML Injection source: https://www.securityfocus.com/bid/13725/info Blue Coat Reporter is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generat...
[SA15452] Blue Coat Reporter Multiple Unspecified Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2005-1710: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...
Blue Coat Reporter 7.0/7.1 - License HTML Injection
source: https://www.securityfocus.com/bid/13725/info Blue Coat Reporter is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code...
Blue Coat ProxySG Console Management Detection
The remote host appears to be a Blue Coat ProxySG appliance, an enterprise-class firewall, and it allows connections to its web console management application. Letting attackers know the type of firewall in use may help them focus their attacks against the networks it protects. C Tenable Network...
Blue Coat WinProxy Host Header Overflow
This module exploits a buffer overflow in the Blue Coat Systems WinProxy service by sending a long port value for the Host header in a HTTP request. Module Options msf use exploit/windows/proxy/bluecoat/winproxyhost msf undefinedwinproxyhost show actions ...actions... msf undefinedwinproxyhost se...
CVE-2004-2397
The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the key and its passphrase in plaintext in a log file, which allows attackers to steal digital certificates...
PT-2004-3290 · Blue Coat · Blue Coat Security Gateway Os
Name of the Vulnerable Software and Affected Versions: Blue Coat Security Gateway OS versions 3.0 through 3.1.3.13 Blue Coat Security Gateway OS version 3.2.1 Description: The web-based Management Console in the affected software stores a private key and its passphrase in plaintext in a log file...