Design/Logic Flaw

Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...

CVE-2014-0018

Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.1 update

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.2.1 and fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact...

CVE-2008-5871

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

Command injection

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

Code injection

Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol UFTP processing in IP Client Manager IPCM in Nortel Multimedia Communication Server MSC 5100 3.0.13 allow remote attackers to cause a denial of service device outage via a UFTP message that has a negative block size or oth...

CVE-2008-5871

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

CVE-2008-5871

CVE-2008-5871 affects Nortel Multimedia Communication Server (MSC) 5100, version 3.0.13. The underlying issue is that the system does not verify credentials during call placement, enabling remote attackers to spoof and redirect VoIP calls. The impact is partial confidentiality/integrity/availabil...

CVE-2008-5872

Affected product: Nortel Mult imedia Communication Server (MSC) 5100, IPCM component, specifically the UNIStim File Transfer Protocol (UFTP) processing. Vulnerability details: Multiple unspecified issues in UFTP handling allow remote attackers to trigger a denial of service (device outage) by sen...

Code injection

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service Modular Services Cards MSC crash or "MPLS packet handling problems" via certain MPLS packets, as identified by Cisco bug IDs 1 CSCsd15970...