EUVD-2009-2296

Malware in sbrugna...

phion airlock Web Application Firewall multiple security vulnerabilities

DoS, code execution...

Cross site request forgery (csrf)

The management interface in the phion airlock Web Application Firewall WAF 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service resource consumption via...

CVE-2009-2300

The management interface in the phion airlock Web Application Firewall WAF 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service resource consumption via...

CVE-2009-2300

The management interface in the phion airlock Web Application Firewall WAF 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service resource consumption via...

CVE-2009-2300

The CVE-2009-2300 entry concerns the Phion Airlock Web Application Firewall (WAF) version 4.1-10.41, where the management CGI interface mishandles requests with large width/height parameters for an image. This underlies arbitrary command execution or resource-exhaustion DoS via a crafted request....

CVE-2009-2300: Undefined Security Weakness

The management interface in the phion airlock Web Application Firewall WAF 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service resource consumption via...