CVE-2013-4781

Affected products: Siemens OpenScape Branch appliance and OpenScape Session Border Controller (SBC). Vulnerable component: core/getLog.php. Vulnerability: remote attackers can execute arbitrary commands via unspecified vectors. Affected versions: OpenScape Branch before 2 R0.32.0 and OpenScape SB...

CVE-2013-4779

The CVE-2013-4779 entry documents a Cross-site Scripting (XSS) vulnerability in the file core/handleTw.php for Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC). Affected versions are OpenScape Branch before 2 R0.32.0 and SBC before 7 R1.7.0 (and 7 before...

CVE-2013-4781

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2013-4780: Exposure of Sensitive Information to an Unauthorized Actor

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-4779: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4781: Improper Neutralization of Special Elements used in an OS Command

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2013-4778: Exposure of Sensitive Information to an Unauthorized Actor

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to obtain sensitive server and statistics information via unspecified vectors...

PT-2013-5187

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description The issue allows remote attackers to read arbitrary files via unspecified vectors,...

PT-2013-5188

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description The issue allows remote attackers to execute arbitrary commands via unspecified...

PT-2013-5186

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description A cross-site scripting XSS issue exists in the core/handleTw.php file, allowing...

PT-2013-5185

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description The issue allows remote attackers to obtain sensitive server and statistics...

Oracle Linux 5 / 6 : dbus (ELSA-2011-1132)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1132 advisory. - Merge changes from RHEL-6 branch: Drop default patch fuzz Merge CVE-2010-4352.patch from RHEL-60-Z - Apply patches for CVE-2011-2200 Tenable has extracted...

Debian: Security Advisory (DSA-2720-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/mozilla-firefox-17.0.7esr-i486-1slack14.0.txz: Upgraded. This release contains security fixes and improvements. For...

Stack overflow

Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...

Design/Logic Flaw

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...

CVE-2012-6571

The CVE-2012-6571 issue affects Huawei devices (AR routers and S-series switches: S2000, S3000, S3500, S3900, S5100, S5600, S7800). The HTTP module in the BIMS/web management components uses predictable Session ID values, enabling remote attackers to hijack sessions via brute-force. This is docum...

PT-2013-2023

Name of the Vulnerable Software and Affected Versions Huawei Branch Intelligent Management System BIMS affected versions not specified Huawei AR routers affected versions not specified Huawei S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches affected versions not specified...

CVE-2012-6570: Improper Restriction of Operations within the Bounds of a Memory Buffer

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remot...

CVE-2012-6571: Undefined Security Weakness

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...