EUVD-2001-1411

Malware in sbrugna...

EUVD-2013-7088

Malware in sbrugna...

EUVD-2003-1179

Malware in sbrugna...

ipso-healthcare.org Cross Site Scripting vulnerability OBB-3573745

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Nokia IPSO 3.4.x Voyager ReadFile.TCL Remote File Reading Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7426/info It has been reported that Nokia IPSO does not properly handle some types of requests through Voyager. Because of this, an attacker with access to the interface may be able to view potentially sensitive...

Blocking NTP access on Gaia OS / IPSO OS (CVE-2013-5211)

...

CVE-2013-7311

The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial ...

Design/Logic Flaw

The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial ...

CVE-2013-7311

CVE-2013-0149 is referenced across multiple vendors in connected sources as an OSPF LSA handling vulnerability where the implementation fails to validate duplicate Link State ID values in LSA packets. This leads to remote DoS (routing disruption) and potential information disclosure through craft...

CVE-2013-7311

The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial ...

Unsupported IPSO Firewall

The remote host is a Check Point or Nokia IPSO firewall that is no longer supported by its vendor. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network Security, Inc...

Security Vulnerabilities not applicable to IPSO OS and to Connectra

...

OpenSSLVulnerability CVE-2007-5135 on IPSO 4.2

...

CVE-2003-1189

Unknown vulnerability in Nokia IPSO 3.7, configured as IP Clusters, allows remote attackers to cause a denial of service via unknown attack vectors...

CVE-2003-1189

CVE-2003-1189 relates to a vulnerability in Nokia IPSO 3.7 when configured as IP Clusters that allows remote attackers to cause a denial of service. The connected documents provide the affected product and the general impact, but do not supply root cause details, specific vulnerable components, e...

CVE-2001-1431

CVE-2001-1431 affects Nokia Firewall Appliances (IPSO 3.3/3.4 and VPN-1/Firewall-1 4.1 SP3/4/5) when SYN Defender is in Active Gateway mode. The third packet of the TCP three-way handshake is not rewritten to use the NAT IP address, allowing remote attackers to gain sensitive information. Exploit...

CVE-2001-1431

Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and VPN-1/FireWall-1 4.1 Service Pack 5, when SYN Defender is configured in Active Gateway mode, does not properly rewrite the third...

Nokia IPSO Voyager WebGUI readfile.tcl file Parameter Arbitrary File Access

Binary data 1558.prm...

Nokia IPSO crossite scripting

Crossite scripting in web administration interface...

Nokia IPSO Script Injection Vulnerability leads to Passive Remote Root, via Network Voyager

attn mods: this is a resend with updated source address, if you catch this in time. FishNet Security Assessment Services and Vulnerability Research Disclosure: FN2003111001 ::Vulnerability:: Nokia IPSO Script Injection Vulnerability ::Synopsis:: Passive Remote Root of Nokia IPSO, via Network...