SonicWALL CDP 5040 v6.x - Multiple Web Vulnerabilities

Document Title: =============== SonicWALL CDP 5040 v6.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=549 Release Date: ============= 2012-11-18 Vulnerability Laboratory ID VL-ID: ==================================== 549...

SonicWALL CDP 5040 v6.x Multiple Vulnerabilities

Exploit for php platform in category web applications SonicWALL CDP 5040 v6.x - Multiple Web Vulnerabilities Introduction: ============= Tapeless Enterprise-Level Data Backup and Protection, Without the Price Tag. Automatic, real-time data backup for servers, laptops and PCs. Features include fil...

CVE-2012-2469

Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches is affected by CVE-2012-2469. The issue arises when the High Availability (HA) policy is configured for Reset and a malformed Cisco Discovery Protocol (CDP) packet is received, potentially causing a denial of service via device rese...

Design/Logic Flaw

The Cisco Discovery Protocol CDP implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute...

CVE-2012-2486

CVE-2012-2486 affects Cisco TelePresence products via a vulnerability in the Cisco Discovery Protocol (CDP) implementation that allows remote code execution when a malformed CDP packet is sent by an adjacent attacker. Affected are Cisco TelePresence Multipoint Switch (before 1.9.0), TelePresence ...

CVE-2012-2486

The Cisco Discovery Protocol CDP implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute...

VoIP VLAN Hopper

VoIP Hopper is a GPLv3 licensed security tool, written in C, that rapidly runs a VLAN Hop into the Voice VLAN on specific ethernet switches. VoIP Hopper does this by mimicking the behavior of an IP Phone, in Cisco, Avaya, Nortel, and Alcatel-Lucent environments. This requires two important steps ...

Cisco IOS CDP Neighbor Announcement DoS

There is a vulnerability in how Cisco routers handle CDP. By sending a large amount of CDP neighbor announcements it is possible to consume all of the router's available memory. Note that a device would need to be configured to use CDP and an attacker would need to be on the same segment as the...

CVE-2009-1334

Cross-site scripting XSS vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous Data Protection CDP for Files 3.1.4.0 allows remote attackers to inject arbitrary web script or HTML via the reason parameter...

CVE-2009-1334

IBM Tivoli CDP for Files 3.1.4.0 has a cross-site scripting (XSS) vulnerability in the login/FilepathLogin.html page, exploitable via the reason parameter. This could allow remote attackers to inject arbitrary web script or HTML. The PT-2009-3866 entry confirms the affected version and suggests a...

PT-2009-3866 · Ibm · Ibm Tivoli Continuous Data Protection For Files

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Continuous Data Protection CDP for Files version 3.1.4.0 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the reason parameter in the login/FilepathLogin.htm...

Observer 0.3.2.1 Multiple Remote Command Execution Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== Observer 0.3.2.1 Multiple Remote Command Execution Vulnerabilities ================================================================== :::::::-. ... ::::::. :::. ;;, ';, ;;...

Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl observer $output"; ... Bug2: ./observer-0.3.2.1/html/netcmd.php ... switch $GETcmd case 'whois': $output = /usr/bin/whois $GETquery...

CVE-2007-5819

IBM Tivoli Continuous Data Protection for Files CDP 3.1.0 uses weak permissions unrestricted write for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients...

Design/Logic Flaw

IBM Tivoli Continuous Data Protection for Files CDP 3.1.0 uses weak permissions unrestricted write for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients...

CVE-2007-5819

CVE-2007-5819 affects IBM Tivoli Continuous Data Protection for Files (CDP) 3.1.0. The issue is weak permissions (unrestricted write) on the Central Admin Global download directory, allowing local users to place arbitrary files into a location used for updating CDP clients. Root cause: insufficie...

Update Protection against Cisco IOS HTTP Server Code Injection Vulnerability

The Cisco IOS Web browser interface which enables the device to perform as an HTTP server allows configuration and monitoring of a router or access server using any Web browser. A vulnerability exists in the IOS HTTP server in the CDP, a proprietary Cisco protocol used for exchanging information...

Cisco IOS CDP protocol crossite scripting

Crossite scripting is possible with CDP status...

[VulnWatch] iDefense Security Advisory 01.17.06: Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability

Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability iDefense Security Advisory 01.17.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=372 January 17, 2006 I. BACKGROUND Cisco IOS Software is the world's leading network infrastructure software,...

CVE-2005-3921

Cross-site scripting XSS vulnerability in Cisco IOS Web Server for IOS 12.02a allows remote attackers to inject arbitrary web script or HTML by 1 packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI...