openswan security update

CentOS Errata and Security Advisory CESA-2013:0827 Updated openswan packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS...

Openswan: remote buffer overflow in atodn()

Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service pluto IKE daemon crash and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be...

Important: Red Hat Security Advisory: openswan security update

Updated openswan packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

ESA-2013-031: RSA® Authentication Agent Cross-Site Scripting (XSS) Vulnerability

ESA-2013-031.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-031: RSA® Authentication Agent Cross-Site Scripting XSS Vulnerability EMC Identifier: ESA-2013-031 CVE Identifier: CVE-2013-0942 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected Products: RSA®...

EMC RSA Authentication Agent crossite scripting

No description provided...

CVE-2013-0934

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and modify global reports via unspecified vectors...

CVE-2013-0933

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0932

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and upload arbitrary files via unspecified vectors...

Design/Logic Flaw

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and modify global reports via unspecified vectors...

Design/Logic Flaw

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and upload arbitrary files via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0933

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0933

CVE-2013-0933 involves multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x (before GRC 5.3SP1) and Archer Smart Suite Framework 4.x. The underlying issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Connected advisories (ESA-2013-01...

CVE-2013-0934

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and modify global reports via unspecified vectors...

CVE-2013-0932

CVE-2013-0932 affects EMC RSA Archer GRC 5.x (before 5.3SP1) and Archer Smart Suite Framework 4.x. It allows remote authenticated users to bypass access controls and upload arbitrary files via unspecified vectors, enabling potential compromise of the Archer platform. RSA ESA-2013-015 documents th...

CVE-2013-0934

CVE-2013-0934 affects EMC RSA Archer GRC 5.x (before 5.3SP1) and Archer Smart Suite Framework 4.x. The root cause is improper authorization that can let remote authenticated users bypass access restrictions and modify global reports via unspecified vectors. Impact is unauthorized modification of ...

CVE-2013-0932

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and upload arbitrary files via unspecified vectors...

CVE-2013-0932: Undefined Security Weakness

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and upload arbitrary files via unspecified vectors...

PT-2013-2728

Name of the Vulnerable Software and Affected Versions EMC RSA Archer versions 5.x before 5.3SP1 Archer Smart Suite Framework versions 4.x Description The issue allows remote authenticated users to bypass intended access restrictions and modify global reports. Recommendations For EMC RSA Archer...

CVE-2013-0934: Undefined Security Weakness

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and modify global reports via unspecified vectors...