18 matches found
EUVD-2010-0585
Malware in sbrugna...
EUVD-2010-0581
Malware in sbrugna...
EUVD-2010-0582
Malware in sbrugna...
EUVD-2010-0584
Malware in sbrugna...
CVE-2010-0554
The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack...
Authentication flaw
The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack...
Authentication flaw
admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remote authenticated users to use HTTP Basic Authentication, bypassing intended server policy...
CVE-2010-0550
The CVE-2010-0550 entry affects Geo++ GNCASTER 1.4.0.7 and earlier. The root issue is a faulty enforcement of HTTP Digest Authentication, allowing remote authenticated users to fall back to HTTP Basic Authentication and bypass the intended server policy. The connected sources confirm the affected...
CVE-2010-0553
Geo++ GNCASTER 1.4.0.7 and earlier allows remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via a long NMEA data sentence...
CVE-2010-0552
Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via multiple requests for a non-existent file using a long URI...
CVE-2010-0551
CVE-2010-0551 affects Geo++ GNCASTER 1.4.0.7 and earlier. The HTTP authentication implementation allows remote attackers to read authentication headers from other users by sending a large request with an incorrect authentication attempt, resulting in memory disclosure (often called a memory leak)...
CVE-2010-0550
admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remote authenticated users to use HTTP Basic Authentication, bypassing intended server policy...
CVE-2010-0554
The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack...
CVE-2010-0554
The CVE-2010-0554 entry concerns Geo++ GNCASTER, affected in versions 1.4.0.7 and earlier. The HTTP Authentication implementation uses the same nonce for all authentication attempts, enabling replay attacks that can hijack web sessions or bypass authentication. This is the root cause: nonce reuse...
Geo++ GNCASTER 1.4.0.7 NMEA-data - Denial of Service
Geo++ GNCASTER 1.4.0.7 NMEA-data - Denial of Service source: https://www.securityfocus.com/bid/40015/info Geo++ GNCASTER is prone to a denial-of-service vulnerability. An attacker with valid login credentials can exploit this issue to cause the application to crash, resulting in a denial-of-servi...
Geo++ GNCASTER 1.4.0.7 - GET Denial of Service
source: https://www.securityfocus.com/bid/40009/info Geo++ GNCASTER is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, resulting in a denial-of-service condition. Arbitrary code-execution may also be possible; this has not been...
Geo++ GNCASTER 1.4.0.7 - GET Denial of Service
Geo++ GNCASTER 1.4.0.7 - GET Denial of Service source: https://www.securityfocus.com/bid/40009/info Geo++ GNCASTER is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, resulting in a denial-of-service condition. Arbitrary...
Geo++ GNCASTER 1.4.0.7 NMEA-data - Denial of Service
source: https://www.securityfocus.com/bid/40015/info Geo++ GNCASTER is prone to a denial-of-service vulnerability. An attacker with valid login credentials can exploit this issue to cause the application to crash, resulting in a denial-of-service condition. Arbitrary code-execution may also be...