CVE-2004-0672

Multiple cross-site scripting XSS vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via 1 script that starts with %00 in the numOfExpressions parameter or 2 the mobjtype parameter...

CVE-2004-0672

The CVE-2004-0672 entry applies to Netegrity IdentityMinder Web Edition 5.6, where multiple cross-site scripting (XSS) vulnerabilities affect the primary and management web interfaces. The issue allows remote attackers to execute scripts as other users via two vectors: (1) a script starting with ...

Multiple Netegrity products crossite scripting

Web interface crossite scripting...

[HW-MED] XSS in Netegrity IdentityMinder

Cross-Site Scripting XSS Vulnerability in Netegrity IdentityMinder Classification: =============== Level: low-MED-high-crit ID: HEXVIEW200407021 Overview: ========= IdentityMinder is an identity and role management product developed by Netegrity http://www.netegrity.com, a microsoft gold-certifie...

Netegrity IdentityMinder Web Edition 5.6 - Null Byte Cross-Site Scripting

source: https://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based interface for creating and removing users in multi-user environments. It has been...

Netegrity IdentityMinder Web Edition 5.6 - Null Byte Cross-Site Scripting

Netegrity IdentityMinder Web Edition 5.6 - Null Byte Cross-Site Scripting source: https://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based interface for...

Netegrity IdentityMinder Web Edition 5.6 - Management Interface Cross-Site Scripting

Netegrity IdentityMinder Web Edition 5.6 - Management Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based...

[VulnWatch] Netegrity SiteMinder Affiliate Agent Cookie Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Netegrity SiteMinder Affiliate Agent Cookie Overflow Release Date: 04/22/2004 Application: SiteMinder Affiliate Agent 4.x Platform: Solaris, Windows, HP-UX Severity: A remote attacker can...

Netegrity SiteMinder Affiliate Agent buffer overflow

Heap overflow on SMPROFILE cookie parsing...

CVE-2003-1312

siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION parameter in a URL, which might allow remote attackers to obtain the ID by sniffing, reading Referer logs, or other methods...

Netegrity SiteMinder does not adequately validate user input thereby allowing user to bypass filters via crafted URL

Overview Netegrity SiteMinder does adequately vaildate HTTP requests containing malicious Unicode encodings. Description Netegrity SiteMinder is a platform for securing multiple web applications through a single point of user authentication. SiteMinder does not properly filter HTTP requests when...

CVE-2001-1455

Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters...

CVE-2000-0850

The CVE-2000-0850 entry corresponds to Netegrity SiteMinder prior to version 4.11, where an authentication bypass is possible by appending "$/FILENAME.ext" to the requested URL. The exploit targets the authentication check and can succeed with extensions such as .ccc, .class, or .jpg, effectively...

CVE-2000-0850

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" where ext is .ccc, .class, or .jpg to the requested URL...

CVE-2000-0850

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" where ext is .ccc, .class, or .jpg to the requested URL...

@stake Advisory: SiteMinder Access Control Bypass (A0911 00-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com Security Advisory Advisory Name: SiteMinder Access Control Bypass A091100-1 Release Date: 09/11/2000 Application: Netegrity SiteMinder 3.6, 4.0 Platform: Solaris 2.x, Windows NT Severity: Access control mechanism can be...