Code injection

The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denial of service daemon reload via a malformed DHCPv6 packet, aka Bug ID CSCuo07437...

CVE-2014-2155

The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denial of service daemon reload via a malformed DHCPv6 packet, aka Bug ID CSCuo07437...

CVE-2014-2155

CVE-2014-2155 affects Cisco CNS Network Registrar 7.1. The DHCPv6 server module is vulnerable to denial of service via malformed DHCPv6 packets, causing the DHCPv6 daemon to reload or crash. Impact is a partial availability degradation (DoS) of the DHCPv6 service. Exploitation could be remote wit...

CVE-2012-4031

Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a .. dot dot in the 1 lang or 2 langid cookie to port 85...

Directory traversal

Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a .. dot dot in the 1 lang or 2 langid cookie to port 85...

CVE-2012-4031

CVE-2012-4031 affects WANGKONGBAO CNS-1000 and CNS-1100 UTM appliances (Network Security Platform). The vulnerability is a directory traversal in src/acloglogin.php exploitable via the lang or langid cookie (port 85), allowing remote attackers to read arbitrary files. Public details show exploita...

WANGKONGBAO CNS-1000 and 1100 UTM Directory Traversal

This module exploits the WANGKONGBAO CNS-1000 and 1100 UTM appliances aka Network Security Platform. This directory traversal vulnerability is interesting because the apache server is running as root, this means we can grab anything we want! For instance, the /etc/shadow and /etc/passwd files for...

WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)

WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal Metasploit Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The...

Cisco CNS Network Registrar默认验证信息验证绕过漏洞

Bugtraq ID: 48076 CVE ID：CVE-2011-2024 Cisco CNS Network Registrar提供高可扩展性和可靠性的DNS, DHCP和TFTP服务。 Cisco Network Registrar包含一个使用默认密码的管理员账户，攻击者可以利用此漏洞以管理员特权更改Cisco Network Registrar的设置 Cisco CNS Network Registrar 7.1 Cisco CNS Network Registrar 7.0 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

wp-10-0001: Multiple Browser Wildcard Cerficate Validation Weakness

Westpoint Security Advisory --------------------------- Title: Multiple Browser Wildcard Cerficate Validation Weakness Risk Rating: Low Author: Richard Moore [email protected] Test Cases: Simon Ward [email protected] Date: 14 July 2010 Advisory ID: wp-10-0001 URL:...

Fedora 12 : sendmail-8.14.4-3.fc12 (2010-5470)

This new version of sendmail fixes security bug - handling of bogus certificates with NULLs in CNs. Also many other bugs have been fixed, for complete list please see: http://www.sendmail.org/releases/8.14.4 Note that Tenable Network Security has extracted the preceding description block directly...

Unfixed XSS vulnerability at cns.3721.com

Security researcher PD, has submitted on 28/03/2008 a cross-site-scripting XSS vulnerability affecting cns.3721.com, which at the time of submission ranked 13927 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/04/2008. It is currently unfixe...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code via a URL in the pathCGX parameter to 1 mtdialogo.php, 2 ltdialogo.php, 3 login.php, and 4 logingecon.php in inc/; and multiple unspecified files in frm/, sql/, and cns/...

cgx-rfi.txt

CGX 2005-03-14 pathCGX Remote File Include Vulnerablites D.Script: http://codigolivre.org.br/frs/?groupid=413&releaseid=1978 Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/inc/mtdialogo.php?pathCGX=Shell Exploit:Path/inc/ltdialogo.php?pathCGX=Shell...

CGX 20050314 (pathCGX) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ CGX 20050314 pathCGX Remote File Inclusion Vulnerabilities ============================================================ CGX 2005-03-14 pathCGX Remote File Include Vulnerablites...

CGX 20050314 - 'pathCGX' Remote File Inclusion

CGX 2005-03-14 pathCGX Remote File Include Vulnerablites D.Script: http://codigolivre.org.br/frs/?groupid=413&releaseid=1978 Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/inc/mtdialogo.php?pathCGX=Shell Exploit:Path/inc/ltdialogo.php?pathCGX=Shell...

CVE-2007-2282

Cisco NetFlow Collection Engine (NFC) before version 6.0 is affected by a default credentials issue: the nfcuser account uses a default password, allowing remote attackers to modify NFC configuration and, on Linux, gain login access to the host OS. This is due to default accounts in NFC prior to ...

CVE-2004-1164

The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service process crash via a certain "unexpected packet sequence."...

CVE-2004-1163

Cisco CNS Network Registrar Central Configuration Management CCM server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service CPU consumption by ending a connection after sending a certain sequence of packets...

CVE-2004-1164

Cisco CNS Network Registrar’s lock manager is vulnerable to denial of service when it receives a specially crafted sequence of packets. The lock manager process terminates, potentially taking down the Central Configuration Management (CCM) server and disrupting DNS, DHCP, TFTP, and related config...