70 matches found
CVE-2014-5214
nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager NAM 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary files via a query parameter containing an XML external entity declaration in conjunction with an entity reference, relat...
CVE-2014-5214
nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager NAM 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary files via a query parameter containing an XML external entity declaration in conjunction with an entity reference, relat...
CVE-2007-5561
Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...
CVE-2007-5561
Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...
CA Console Server username buffer overflow
Added: 05/25/2007 CVE: CVE-2007-2522 BID: 23906 OSVDB: 34585 Background Multiple CA products include the inoweb Console Server which listens for connections on port 12168/TCP. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, speciall...
CA Console Server username buffer overflow
Added: 05/25/2007 CVE: CVE-2007-2522 BID: 23906 OSVDB: 34585 Background Multiple CA products include the inoweb Console Server which listens for connections on port 12168/TCP. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, speciall...
CA Console Server username buffer overflow
Added: 05/25/2007 CVE: CVE-2007-2522 BID: 23906 OSVDB: 34585 Background Multiple CA products include the inoweb Console Server which listens for connections on port 12168/TCP. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, speciall...
CA Console Server username buffer overflow
Added: 05/25/2007 CVE: CVE-2007-2522 BID: 23906 OSVDB: 34585 Background Multiple CA products include the inoweb Console Server which listens for connections on port 12168/TCP. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, speciall...
CA Multiple Products inoweb Console Server Authentication Remote Overflow
The version of CA Anti-Virus for the Enterprise, CA Threat Manager, or CA Anti-Spyware installed on the remote host is affected by a buffer overflow involving its Console Server component. By means of specially crafted login credentials, a remote attacker can overflow a stack-based buffer in...
Avocents CCM console server protection bypass
It's possible to bypass port access control...
Lantronix Secure Console Server (edituser) Local Root Exploit
Exploit for unknown platform in category local exploits ============================================================= Lantronix Secure Console Server edituser Local Root Exploit ============================================================= !/bin/sh Lantronix Secure Console Server edituser root...
MRV InReach console server restrictions protection bypass
If SSH key is used for authentication ports restrictions are not applied...
MRV In-Reach console server: Port Access Control Bypass Vulnerability
Hi, this is another bug I encountered during my research on console servers. Summary: Port Access Control Bypass Vulnerability on MRVs In-Reach console servers. Details: MRV's In-Reach console servers come with feature that enables access to their ports by ssh public keys. As opposed to e.g...
CVE-2005-2189
The CVE-2005-2189 issue affects Lantronix SecureLinx console server running firmware 2.0 and 3.0. The vulnerability arises because the web server stores /etc/ssh under the web document root with insufficient access control, allowing remote attackers to obtain sensitive information such as SSH pri...
Multiple vulnerabilities in Lantronix SLC console server
Hi, I stumbled on another bug during my review for console servers: Summary: Lantronix SecureLinx console server: Retrieval of ssh-private keys and system logfiles Confirmed on SLC32, Software version: 2.0, 3.0 very likely on all models of SLC series SLC8, 16, 32, 48 www.lantronix.com Details:...
CVE-2005-0542
saveUser.do in Cyclades AlterPath Manager APM Console Server 1.2.1 allows local users to gain privileges by setting the adminUser parameter to true...
CVE-2005-0542
The CVE-2005-0542 entry concerns Cyclades AlterPath Manager (APM) Console Server 1.2.1. The flaw allows local privilege escalation by setting the adminUser parameter to true in saveUser.do. No exploitation details or patch/version remediation are provided in the connected documents; exploitation ...
CVE-2005-0540
Technical details about CVE-2005-0540 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2005-0541
The CVE-2005-0541 issue affects Cyclades AlterPath Manager (APM) Console Server 1.2.1. The vulnerability is in consoleConnect.jsp, where an attacker can modify the consolename parameter to connect to arbitrary consoles. The NVD entry lists a high base score of 7.5 (NETWORK, LOW complexity, no aut...