Internet Access From Virtual Lab

Purpose This article documents how to enable machines operating within the Virtual Lab isolated network to access the internet. Solution The function documented in this KB enables the virtual lab proxy appliance to act as an internet proxy. This proxy function only passes web browser traffic. Thi...

Non-HTTP Traffic Over Port 80 Detection

Binary data 7048.pasl...

Port 80 Non-HTTP Traffic Detection

Binary data 5978.prm...

Fiddler v2.3.3.3 New version released !

Fiddler is a Web Debugging Proxy which logs all HTTPS traffic between your computer and the Internet. Fiddler allows you to inspect all HTTPS traffic, set breakpoints, and "fiddle" with incoming or outgoing data. Fiddler includes a powerful event-based scripting subsystem, and can be extended usi...

F-Secure Internet Gatekeeper Web Console Detection

The remote web server is the Web Console component of F-Secure Internet Gatekeeper, an enterprise-class email and web filtering gateway used to identify malware in incoming and outgoing SMTP, HTTP, FTP and POP3 traffic. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2011-0348

Cisco IOS 12.411MD, 12.415MD, 12.422MD, 12.424MD before 12.424MD3, 12.422MDA before 12.422MDA5, and 12.424MDA before 12.424MDA3 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to bypass intended access restrictions and intended billing restrictions by...

Design/Logic Flaw

Cisco IOS 12.411MD, 12.415MD, 12.422MD, 12.424MD before 12.424MD3, 12.422MDA before 12.422MDA5, and 12.424MDA before 12.424MDA3 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to bypass intended access restrictions and intended billing restrictions by...

CVE-2011-0348

CVE-2011-0348 affects Cisco IOS for the CSG2 (CSG2 on 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, and 12.4(24)MD family) and enables a service policy bypass by sending HTTP traffic to a restricted destination after unrestricted HTTP traffic. Root cause is a vulnerability in policy/billing handling on the...

ASPR #2010-12-14-1: Remote Binary Planting in Windows Address Book

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-12-14-1 ------------------------------------------------------------------------- ASPR 2010-12-14-1: Remote Binary Planting in Windows Address Book...

Fiddler v2.3.1.0 ( Web Debugging Proxy tool ) - Latest Version Download

"Fiddler is a Web Debugging Proxy which logs all HTTPS traffic between your computer and the Internet. Fiddler allows you to inspect all HTTPS traffic, set breakpoints, and "fiddle" with incoming or outgoing data. Fiddler includes a powerful event-based scripting subsystem, and can be extended...

Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities

Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijackor can implement script routines & malicious codesserver-side|persistent...

Formshield Captcha - Older Version vulnerable to replay attacks

Replay attack on CAPTCHA Libraries Summary A CAPTCHA implementation that we tested were found to be vulnerable to replay attacks. The attack is explained in detail for Formshield – A popular DOT NET CAPTCHA implementation. NOTE: We discovered this during a Black Box engagement with one of our...

CVE-2004-2762

The server in IBM Tivoli Storage Manager TSM 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1, when the HTTP communication method is enabled, allows remote attackers to cause a denial of service daemon...

CVE-2007-5768

The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic...

Default credentials

The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic...

CVE-2007-5768

The CVE-2007-5768 entry affects the Globe7 soft phone client version 7.3, which transmits username and password in cleartext over HTTP. This exposes credentials to network eavesdropping, enabling potential disclosure of sensitive information. The vulnerability is a information disclosure issue ca...

Session fixation

Multiple unspecified vulnerabilities in Astaro Security Gateway ASG before 7.005 allow remote attackers to cause a denial of service via 1 certain email, which stops the SMTP Proxy during scanning; 2 certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing...

CVE-2007-3253

Multiple unspecified vulnerabilities in Astaro Security Gateway ASG before 7.005 allow remote attackers to cause a denial of service via 1 certain email, which stops the SMTP Proxy during scanning; 2 certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing...

Cross site request forgery (csrf)

The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic...

CVE-2007-2734

The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic...