Symantec Messaging Gateway Management Console Stored XSS

SUMMARY Symantec's Messaging Gateway 9.5.x management console is susceptible to stored cross-site scripting XSS issues found in some of the administrative interface pages. Successful exploitation could result in potential unauthorized privileged access to the management console. AFFECTED PRODUCTS...

Fedora 17 : kernel-3.7.9-104.fc17 (2013-3106)

This update contains a fix for the netlink out-of-bounds access issue which could allow a local user to gain privileged access. All users are encouraged to update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Fedora 18 : kernel-3.7.9-205.fc18 (2013-3086)

This update contains a fix for the netlink out-of-bounds access issue which could allow a local user to gain privileged access. All users are encouraged to update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83)

The Chrome Object Wrapper COW implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote...

Symantec Messaging Gateway Default SSH Password

Added: 10/02/2012 CVE: CVE-2012-3579 BID: 55143 OSVDB: 85028 Background Symantec Messaging Gateway is an email virus protection appliance that also provides antispam protection. Problem Symantec Messaging Gateway versions before 10.0 have a default password for the "support" account, which can be...

Symantec Messaging Gateway Default SSH Password

Added: 10/02/2012 CVE: CVE-2012-3579 BID: 55143 OSVDB: 85028 Background Symantec Messaging Gateway is an email virus protection appliance that also provides antispam protection. Problem Symantec Messaging Gateway versions before 10.0 have a default password for the "support" account, which can be...

Symantec Messaging Gateway Default SSH Password

Added: 10/02/2012 CVE: CVE-2012-3579 BID: 55143 OSVDB: 85028 Background Symantec Messaging Gateway is an email virus protection appliance that also provides antispam protection. Problem Symantec Messaging Gateway versions before 10.0 have a default password for the "support" account, which can be...

Symantec Messaging Gateway 9.5 Default SSH Password

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Default credentials

Symantec Messaging Gateway SMG before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session...

CVE-2012-3579

Symantec Messaging Gateway SMG before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session...

CVE-2012-3579

Symantec Messaging Gateway (SMG) versions before 10.0 are vulnerable to CVE-2012-3579 due to a hardcoded default SSH password on the support account, enabling remote login and privileged access via SSH. The issue is documented across multiple sources (SAINT advisories and OpenVAS/Nessus reference...

Symantec Messaging Gateway 9.5/9.5.1 SSH Default Password Security Bypass Vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

F5 BIG-IP SSH private key

Added: 07/03/2012 CVE: CVE-2012-1493 BID: 53897 OSVDB: 82780 Background SSH Private keys are used for authentication for many F5 BIG-IP devices. Devices shipped with a default, static key are vulnerable to compromise if the public discovers the key. The private key can be re-used by an attacker t...

F5 BIG-IP remote root authentication bypass Vulnerability

A platform-specific remote root access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a publicly known SSH private key for the root user which is present on all vulnerable appliances. The...

Multiple F5 Networks Products - SSH vulnerability CVE-2012-1493

Multiple F5 Networks products are prone to an SSH vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1740

EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain...

Code injection

EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain...

Fedora 14 : xen-4.0.2-1.fc14 (2011-8403)

update to 4.0.2 - includes various bugfixes and fix for CVE-2011-1898 guest with pci passthrough can gain privileged access to base domain Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 13 : xen-3.4.3-3.fc13 (2011-7421)

gain privileged access to base domain, or access to xen configuration info. Lack of error checking could allow DoS attack from guest. CVE-2011-1583 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 14 : xen-4.0.1-11.fc14 (2011-6914)

gain privileged access to base domain, or access to xen configuration info. Lack of error checking could allow DoS attack from guest. CVE-2011-1583 Don't require /usr/bin/qemu-nbd as it isn't used at present. Fix issue with VGA passthrough 694001 Note that Tenable Network Security has extracted t...