Remote file inclusion

PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to inject arbitrary web script or HTML via the reminder parameter...

CVE-2007-3830

Cross-site scripting XSS vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to inject arbitrary web script or HTML via the reminder parameter...

CVE-2007-3831

The CVE-2007-3831 entry describes a PHP remote file inclusion vulnerability in ISS Proventia Network IPS GX5108 (v1.3) and GX5008 (v1.5). An attacker can cause arbitrary PHP code execution by supplying a URL in the page parameter, enabling remote code execution via the affected web interface. The...

CVE-2007-3830

The CVE-2007-3830 entry concerns an XSS vulnerability in alert.php of ISS Proventia Network IPS GX5108 (v1.3) and GX5008 (v1.5). The vulnerability is triggered via the reminder parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected component: alert.php; vulnerable i...

CVE-2007-3831

PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2007-3830

Cross-site scripting XSS vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to inject arbitrary web script or HTML via the reminder parameter...

IBM Proventia Sensor Appliance - Multiple Input Validation Vulnerabilities

IBM Proventia Sensor Appliance - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/24864/info The IBM Proventia Sensor Appliance is prone to multiple input-validation vulnerabilities, including multiple remote file-include issues and a cross-site scripting issue...

[REVS] Having Fun with Sensor Appliance Proventia GX5108 and GX5008 Insecurities (Part One)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

ISS Proventia Appliance multiple security vulnerabilities

SSH user accounts detection, crossite scripting, PHP include, protection bypass...

IBM Proventia Sensor Appliance - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/24864/info The IBM Proventia Sensor Appliance is prone to multiple input-validation vulnerabilities, including multiple remote file-include issues and a cross-site scripting issue. An attacker can exploit these issues to steal cookie-based authentication...

CVE-2007-2690

Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...

Design/Logic Flaw

Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...

CVE-2007-2690

Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...

CVE-2007-2690

Technical details (affected products, root cause, impacts, fixes) for CVE-2007-2690 are not provided in the connected documents. The initial description only notes Unicode handling issues in IBM ISS Proventia products. Monitor for official updates.

NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability

NSFOCUS Security Advisory SA2006-07 ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability Release Date: 2006-07-27 CVE ID: CVE-2006-3840 http://www.nsfocus.com/english/homepage/research/0607.htm Affected systems & software =================== RealSecure Network Sensor...

CVE-2006-3840

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU 24.39/1.78/epj/x.x.x.1780, including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service infinite loop via a crafted...

iDefense Security Advisory 03.23.05: ISS Multiple Products Local Privilege Escalation Vulnerability

ISS Multiple Products Local Privilege Escalation Vulnerability iDefense Security Advisory 03.23.05 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=403 March 23, 2006 I. BACKGROUND Internet Security Systems ISS has developed a suite of tools aimed at securing server and desktop...

Internet Security Systems Protection Advisory: Snort Back Orifice Parsing Remote Code Execution

Internet Security Systems Protection Advisory October 18, 2005 Snort Back Orifice Parsing Remote Code Execution Summary: ISS X-Force has discovered a remotely exploitable vulnerability in Snort’s Back Orifice pre-processor. A stack-based overflow can be triggered with a single UDP packet, allowin...

CVE-2004-0193

CVE-2004-0193 describes a heap-based buffer overflow in the ISS Protocol Analysis Module (PAM) used by RealSecure/BlackICE products. An SMB authentication request with a long username allows a remote attacker to execute arbitrary code. Affected: RealSecure Network 7.0 and Server Sensor 7.0, Prove...