118 matches found
Design/Logic Flaw
Cisco Content Switching Modules CSM 4.2 before 4.2.7, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.6, when service termination is enabled, allow remote attackers to cause a denial of service reboot via unspecified vectors related to high network utilization, aka CSCsh57876...
Code injection
Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...
CVE-2007-4788
CVE-2007-4788 affects Cisco Content Switching Modules (CSM) 4.2 prior to 4.2.3a and Cisco Content Switching Module with SSL (CSM-S) 2.1 prior to 2.1.2a. The vulnerability allows remote attackers to cause a denial of service through sets of out-of-order TCP packets with unspecified characteristics...
CVE-2007-4789
CVE-2007-4789 affects Cisco Content Switching Modules (CSM) 4.2 prior to 4.2.7 and Cisco Content Switching Module with SSL (CSM-S) 2.1 prior to 2.1.6. When service termination is enabled, remote attackers can cause a denial of service (reboot) through vectors related to high network utilization. ...
CVE-2006-6012
The CVE-2006-6012 entry describes a Cross-site scripting (XSS) vulnerability in MGinternet Car Site Manager (CSM), specifically in the file path csm/asp/listings.asp, exploitable via the p parameter. The affected component is the CSM web application; the underlying cause is improper handling of i...
CVE-2006-5945
The CVE-2006-5945 entry details multiple SQL injection flaws in MGinternet Car Site Manager (CSM). The vulnerability enables remote execution of arbitrary SQL commands via the p parameter to csm/asp/detail.asp and via the l, typ, or loc parameters to csm/asp/listings.asp. Connected sources corrob...
CVE-2006-5944
MGinternet Car Site Manager (CSM) is affected by an XSS vulnerability in csm/asp/listings.asp via the s parameter. The issue is documented across multiple sources identifying a cross-site scripting flaw in the API endpoint /csm/asp/listings.asp, which could allow remote attackers to inject arbitr...
CVE-2005-4514
The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case. NOTE: the vendor has stated that this problem could not be reproduced, and...
CVE-2005-4514
CVE-2005-4514 concerns the Webwasher CSM Appliance Suite 5.x, where the encapsulation script mechanism uses case-sensitive detection of malicious tokens. This allows bypassing script detection by presenting tokens in mixed case (upper/lower). The vendor notes the issue could not be reproduced as ...
CVE-2005-4514
The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case. NOTE: the vendor has stated that this problem could not be reproduced, and...
CVE-1999-1149
CVE-1999-1149 affects CSM Proxy 4.1. A buffer overflow vulnerability on the FTP port allows remote attackers to crash the service, causing a denial of service. The available documents do not provide exploitation details, affected versions beyond 4.1, vectors beyond sending a long string to the FT...
CVE-1999-1149
Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service crash via a long string to the FTP port...
CVE-2000-0042
CVE-2000-0042 : Buffer overflow in the CSM Mail Server when handling a long HELO command allows remote attackers to cause a denial of service and potentially execute commands. Affected: CSM Mail Server (MTA). Consequence: crash or arbitrary code execution as per sources. Remediation: apply vendor...
CVE-2000-0042
Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command...
csm.dos.txt
Local / Remote D.o.S Attack in CSM Mail Server for Windows 95/NT v.2000.08.A USSR Advisory Code: USSR-99027 Release Date: December 29, 1999 3/5 Systems Affected: CSM Mail Server for Windows 95/NT and others old versions. Version: 2000-01A Version: 1999-07M Version: 1999-07I Version: 1999-07H...
CVE-2000-0042
Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command...
csmproxy.txt
Date: Thu, 16 Jul 1998 15:22:24 -0400 From: Security Research Team Subject: S.A.F.E.R. Security Bulletin 980708.DOS.1.1 S.A.F.E.R. Security Bulletin 980708.DOS.1.1 TITLE : Vulnerability with CSM Proxy 4.1 DATE : July 8, 1998 NATURE : Denial-of-Service PLATFORMS : Windows NT, Windows 95/98 DETAILS...