24 matches found
CVE-2007-3495
Multiple cross-site scripting XSS vulnerabilities in the SAP Internet Communication Framework BC-MID-ICF in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error pa...
Windows Disable Windows ICF, Command Shell, Bind TCP Inline
Disable the Windows ICF, then listen for a connection and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 529 include Msf::Payload::Windows include...
CVE-2004-2176
The Internet Connection Firewall ICF in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls...
CVE-2004-2176
The CVE-2004-2176 entry concerns the Internet Connection Firewall (ICF) in Windows XP SP2. The issue arises because ICF is configured by default to trust sessmgr.exe, enabling local users to use sessmgr.exe to open a local listening port that bypasses ICF access controls. Documents do not provide...