EUVD-2009-2296

Malware in sbrugna...

phion airlock Web Application Firewall multiple security vulnerabilities

DoS, code execution...

CVE-2009-2300

The management interface in the phion airlock Web Application Firewall WAF 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service resource consumption via...

Cross site request forgery (csrf)

The management interface in the phion airlock Web Application Firewall WAF 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service resource consumption via...

CVE-2009-2300

The management interface in the phion airlock Web Application Firewall WAF 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service resource consumption via...

CVE-2009-2300

The CVE-2009-2300 entry concerns the Phion Airlock Web Application Firewall (WAF) version 4.1-10.41, where the management CGI interface mishandles requests with large width/height parameters for an image. This underlies arbitrary command execution or resource-exhaustion DoS via a crafted request....