2535 matches found
Aruba Mobility Controller EAP帧远程拒绝服务漏洞
BUGTRAQ ID: 32694 CNCAN ID：CNCAN-2008120901 Aruba Mobility Controller是一款可为企业提供移动接入的解决方案。 Aruba Mobility Controller处理畸形EAP帧存在问题，远程攻击者可以利用漏洞进行拒绝服务攻击，导致设备重启。 EAP用于无线和端到端连接RFC 3748中的验证，Aruba Mobility Controller接收无线接口通过它的瘦AP和有线接口通过设备连接控制器上的不可信物理端口上的EAP帧，在802.11网络中，EAP帧只用于当WPA/WPA2企业模式使用的情况下。...
DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame (Aruba Advisory ID: AID-12808)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aruba Networks Security Advisory Title: DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame. Aruba Advisory ID: AID-12808 Revision: 1.0 For Public Release on 12/8/2008 +----------------------------------------------------...
Moderate: Red Hat Security Advisory: Red Hat Application Stack v2.2 security and enhancement update
Red Hat Application Stack v2.2 is now available. This update fixes several security issues and adds various enhancements. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 11th December 2008 This erratum has been updated to correct a typo...
JBoss Enterprise Application Platform类文件信息泄漏漏洞
BUGTRAQ ID: 31300 CVE ID：CVE-2008-3519 CNCVE ID：CNCVE-20083519 JBoss Enterprise Application Platform是一款企业级应用程序平台，用于基于JBoss的应用开发。 JBoss企业级应用平台存在配置错误，远程攻击者可以利用漏洞获得敏感信息。 EAP的JBossAs组件在'production'中设置DownloadServerClasses属性为'true'，而一个产品环境必须默认设置为'false'来防止非EJB类的下载，这可导致信息泄漏。 RedHat JBoss Enterprise...
Gentoo Security Advisory GLSA 200604-03 (freeradius)
The remote host is missing updates announced in advisory GLSA 200604-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200604-03 (freeradius)
The remote host is missing updates announced in advisory GLSA 200604-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-3519
The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform aka JBossEAP or EAP, possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain...
JBoss EAP < 4.2.0.CP04 / 4.3.0.CP02 Status Servlet Information Disclosure
Binary data 4689.prm...
JBossEAP allows download of non-EJB class files
The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform aka JBossEAP or EAP, possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain...
Cisco Secure ACS EAP-Response报文解析拒绝服务漏洞
BUGTRAQ ID: 30997 CVE ID：CVE-2008-2441 CNCVE ID：CNCVE-20082441 Cisco Secure ACS是一款Cisco网络设备的中央管理平台，用于控制设备的认证和授权。 Cisco Secure ACS不正确解析EAP-Response报文长度，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击或可能导致任意代码执行。 远程攻击者作为RADIUS客户端可以针对Cisco Secure...
Cisco Secure ACS Denial Of Service Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Response: Cisco Secure ACS Denial Of Service Vulnerability http://www.cisco.com/warp/public/707/cisco-sr-20080903-csacs.shtml Revision 1.0 ============ For Public Release 2008 September 03 1600 UTC GMT Cisco Response ============== This...
Cisco Secure ACS EAP Parsing Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Response: Cisco Secure ACS Denial Of Service Vulnerability http://www.cisco.com/warp/public/707/cisco-sr-20080903-csacs.shtml Revision 1.0 ============ For Public Release 2008 September 03 1600 UTC GMT Cisco Response ============== This...
Cisco Secure ACS DoS
Crash on EAP authentication parsing...
CVE-2008-2441
Cisco Secure ACS 3.x before 3.34 Build 12 patch 7, 4.0.x, 4.1.x before 4.14 Build 13 Patch 11, and 4.2.x before 4.20 Build 124 Patch 4 does not properly handle an EAP Response packet in which the value of the length field exceeds the actual packet length, which allows remote authenticated users t...
CVE-2008-2441
Cisco Secure ACS 3.x before 3.34 Build 12 patch 7, 4.0.x, 4.1.x before 4.14 Build 13 Patch 11, and 4.2.x before 4.20 Build 124 Patch 4 does not properly handle an EAP Response packet in which the value of the length field exceeds the actual packet length, which allows remote authenticated users t...
CVE-2008-2441
CVE-2008-2441 affects Cisco Secure ACS (CS ACS) for Windows and related ACS products. The vulnerability is triggered by specially crafted EAP-Response packets where the length field exceeds the actual packet length, causing memory/processing errors in CSRadius and CSAuth. This can lead to denial ...
FreeBSD Ports: freeradius
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: freeradius
The remote host is missing an update to the system as announced in the referenced advisory. VID 1a216dfd-f710-11da-9156-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Cisco Secure Access Control Server (ACS) Denial of Service Vulnerability
Cisco Secure Access Control Server ACS contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability exists due to an error when handling Remote Authentication Dial In User Service RADIUS Extensible Authentication...