EUVD-2001-1005

Malware in sbrugna...

EUVD-2001-0836

Malware in sbrugna...

Entrust GetAccess does not validate user input thereby allowing users to read arbitrary files

Overview Entrust GetAccess does not properly validate the CGI variable "LOCALE" and may be exploited to read arbitrary files on the server. Description Entrust GetAccess is a web software product for identifying users of a web site. Entrust GetAccess takes a CGI variable named "LOCALE" specifying...

CVE-2001-1024

CVE-2001-1024 : Entrust getAccess CGI scripts (e.g., login.gas.bat) are vulnerable to remote command execution via an alternate -classpath argument, allowing an attacker to run Java programs. The CVSS data indicates a Network-exposed, low complexity, no-auth exploit with Partial impact on confide...

CVE-2001-1024

login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alternate -classpath argument...

CVE-2001-0853

Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. dot dot in the locale parameter to 1 helpwin.gas.bat or 2 AboutBox.gas.bat...

CVE-2001-0853

Entrust GetAccess contains a directory traversal vulnerability: remote attackers can read arbitrary files by passing a .. in the locale parameter to helpwin.gas.bat or AboutBox.gas.bat. Affected product is Entrust GetAccess; vulnerability exposed over network with low attack complexity and no aut...

CVE-2001-0853

Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. dot dot in the locale parameter to 1 helpwin.gas.bat or 2 AboutBox.gas.bat...

Доступ к любым файлам через Entrust GetAccess (unauthorized access)

Пользователь может получить любой файл выбрав его в качестве локализованной версии справки...

Выполнение JAVA-приожений в Entrust GetAccess(code execution)

Из-за недостаточной проверки шел-символов можно выполнить любой java-код...

CVE-2001-1024

login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alternate -classpath argument...