dos flaws in open-iscsi (CVE-2007-3100)

usr/mgmtipc.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 checks the client's UID on the listening AFLOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service iscsid exit or iSCSI connection loss...

Design/Logic Flaw

rpttop.htm in the web management interface in Packeteer PacketShaper 7.3.0g2 and 7.5.0g1 allows remote attackers to cause a denial of service device reboot via a request with empty values of the OP.MEAS.DATAQUERY and MEAS.TYPE parameters...

CVE-2007-3151

rpttop.htm in the web management interface in Packeteer PacketShaper 7.3.0g2 and 7.5.0g1 allows remote attackers to cause a denial of service device reboot via a request with empty values of the OP.MEAS.DATAQUERY and MEAS.TYPE parameters...

CVE-2007-3151

Affected software: Packeteer PacketShaper Web Management interface (7.3.0g2, 7.5.0g1). Vulnerability: Crafted requests to rpttop.htm can trigger a denial of service, causing the device to reboot when OP.MEAS.DATAQUERY and MEAS.TYPE are empty. Impact: Denial of service with potential reboot; authe...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Canon Network Camera Server VB100 and VB101 with firmware 3.0 R69 and earlier, and VB150 with firmware 1.1 R39 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-2680: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the management interface in Canon Network Camera Server VB100 and VB101 with firmware 3.0 R69 and earlier, and VB150 with firmware 1.1 R39 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Windows DNS server RPC management interface buffer overflow

Added: 04/16/2007 CVE: CVE-2007-1748 BID: 23470 OSVDB: 34100 Background The Windows DNS service runs an RPC management interface which listens on a dynamically assigned TCP port. Problem A buffer overflow vulnerability in the Windows DNS service allows remote attackers to execute arbitrary comman...

Remote Management Interface Discovery

This module can be used to obtain information from the Remote Management Interface DCERPC service. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Remote Management Interface Discovery',...

Data Domain管理接口本地特权提升漏洞

Data Domain的DDX阵列系列是业界第一个企业数据中心级的基于“重复数据删除Deduplication＂技术数据保护阵列。 Data Domain传递数据到UNIX SHELL执行时不正确过滤用户输入，本地攻击者可以利用漏洞提升特权。 Data Domain管理接口的多个命令简单的调用UNIX命令，如ping, ifconfig, date, netstat, uptime等，传递给这些命令的参数缺少验证，通过特殊构建参数，可导致注入特殊SHELL字符而执行SHELL命令。 Data Domain Data Domain OS 3.0 Data Domain Data Domai...

CVE-2007-1036: Undefined Security Weakness

The default configuration of JBoss does not restrict access to the 1 console and 2 web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests...

Intel® Enterprise Southbridge 2 Baseboard Management Controller Denial of Service

Summary: A denial of service vulnerability exists in the Intel® Enterprise Southbridge 2 Baseboard Management Controller which may allow malicious users to connect to a server system within a local area network and issue any Intelligent Platform Management Interface command. If proper external...

CVE-2006-5744

Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator...

CVE-2006-5744: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator...

CVE-2006-5409

Multiple SQL injection vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall Endpoint 4.0.2.11045 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-5408: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall Endpoint 4.0.2.11045 allow remote attackers to inject arbitrary HTML or web script via unspecified vectors...

Multiple vulnerabilities in Highwall Enterprise and Highwall Endpoint management interface

Multiple vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface SUMMARY Highwall Enterprise and Highwall Endpoint wireless IDS management interface contain multiple vulnerabilities which can lead to privilege escalation and code execution. DETAILS Web...

CVE-2006-4523

CVE-2006-4523 affects 2Wire HomePortal and OfficePortal Series modems/routers: the web-based management interface is vulnerable to a DoS via a CRLF sequence in a GET request, causing a crash. Root cause is input parsing of CRLF within the request; impact is partial availability loss. Connected do...

CVE-2006-4523: Undefined Security Weakness

The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service crash via a CRLF sequence in a GET request...

CVE-2006-4228

Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1 20060816 allows remote attackers to bypass authentication and gain privileges via unknown attack vectors in the management interface...

CVE-2006-4228: Undefined Security Weakness

Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1 20060816 allows remote attackers to bypass authentication and gain privileges via unknown attack vectors in the management interface...