The vulnerability of the NameSurfer IP address management server allows a malicious actor to gain unauthorized access to confidential information of the target system.

The vulnerability of the Nixu NameSurfer software lies in errors that occur when working with SOAP interfaces. Exploiting this vulnerability allows a malicious individual to gain access to confidential information of the target system...

Nixu NameSurfer多个安全漏洞

CVE ID:CVE-2014-0060、CVE-2014-0061、CVE-2014-0062、CVE-2014-0063、CVE-2014-0064、CVE-2014-0065、CVE-2014-0066 Nixu NameSurfer是一个实现集中地址管理覆盖的IPAM软件应用解决方案。 Nixu NameSurfer存在多个安全漏洞： 1，部分输入在使用之前缺少过滤，允许攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 2，解析XML实体时存在错误，允许攻击者利用特制的包含外部实体引用的XML文档来获取本地资源数据或消耗服务器资源。...

PT-2014-05

Name of the Vulnerable Software and Affected Versions Nixu NameSurfer affected versions not specified Description The issue is related to errors in the code of the program, allowing an attacker to exploit it and gain unauthorized privilege escalation in the system. This is achieved by writing the...

PT-2014-03

Name of the Vulnerable Software and Affected Versions Nixu NameSurfer affected versions not specified Description The issue is related to errors in the code of the Nixu NameSurfer software. Exploitation of this issue allows an attacker to access files on the server with the privileges of the...

PT-2014-04: Single Sign-On Vulnerability in Nixu Namesurfer

The specialists of the Positive Research center have detected a Single Sign-On vulnerability in Nixu Namesurfer. All services used by the Nixu Namesurfer software PostgreSQL, Apache use the same user account to operate. Therefore, a weakness in one of the services will affect all of them. For...

PT-2014-02

Name of the Vulnerable Software and Affected Versions Nixu NameSurfer affected versions not specified Description The issue is related to errors occurring when working with the SOAP interface, allowing an attacker to gain access to confidential information of the target system. Recommendations At...