Cross site scripting

Cross-site scripting XSS vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP formerly Aladdin HASP SRM run-time installer before 6.x and SDK before 5.11, as used in 7 Technologies 7T IGSS 7 and other products, when Firefox 2.0 ...

CVE-2011-3339

The CVE-2011-3339 entry describes an XSS vulnerability in the Admin Control Center of SafeNet Sentinel HASP/SRM, affecting HASP Run-time Environment 5.95 and earlier, with installers before 6.x and SDKs before 5.11. The issue arises from inadequate input validation in the web application, which c...

CVE-2011-3339

Cross-site scripting XSS vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP formerly Aladdin HASP SRM run-time installer before 6.x and SDK before 5.11, as used in 7 Technologies 7T IGSS 7 and other products, when Firefox 2.0 ...

CVE-2011-3339: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP formerly Aladdin HASP SRM run-time installer before 6.x and SDK before 5.11, as used in 7 Technologies 7T IGSS 7 and other products, when Firefox 2.0 ...

PT-2011-4393

Name of the Vulnerable Software and Affected Versions SafeNet Sentinel HASP formerly Aladdin HASP SRM run-time installer versions prior to 6.x SafeNet Sentinel HASP formerly Aladdin HASP SRM SDK versions prior to 5.11 Sentinel HASP Run-time Environment version 5.95 and earlier Description A...

Safenet Sentinel and 7-T Input Sanitization Vulnerability

Overview ICS-CERT originally released advisory ICSA-11-314-01P on the US-CERT secure portal on November 14, 2011. This web page release was delayed to allow users time to download and install the update. Security researcher Carlos Mario Penagos Hollman of Synapse-labs has identified an input...

SafeNet SoftRemote - GROUPNAME Buffer Overflow (Metasploit)

$Id: safenetsoftremotegroupname.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

SafeNet SoftRemote - IKE Service Buffer Overflow (Metasploit)

$Id: safenetike11.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

SafeNet SoftRemote GROUPNAME Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'SafeNet...

CVE-2009-2631

CVE-2009-2631 describes a design-level flaw in multiple clientless SSL VPN products (e.g., Stonesoft StoneGate, Cisco ASA, SonicWALL E-Class SSL VPN, Citrix Access Gateway, Juniper Secure Access, Nortel CallPilot, SafeNet SecureWire) where, if configured to access resources from a different domai...

CVE-2009-2631: Improper Access Control

Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products, when running in...

SafeNet SoftRemote IKE Service Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SafeNet SoftRemot...

SafeNet SoftRemote策略文件处理栈溢出漏洞

BUGTRAQ ID: 36907 CVE ID: CVE-2009-3861 SoftRemote是SafeNET VPN产品系列中的VPN客户端。 SoftRemote在处理策略文件（spd）时存在栈溢出漏洞，用户受骗打开了设置有超长TREENAME或GROUPNAME字段的策略文件就可以触发这个溢出，导致执行任意代码。 SafeNet SoftRemote 10.8.5 Build 2 SafeNet SoftRemote 10.3.5 Build 6 厂商补丁： SafeNet ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Stack overflow

Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 Build 2 and 10.3.5 Build 6, and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a 1 TREENAME or 2 GROUPNAME Policy file spd...

CVE-2009-3861

Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 Build 2 and 10.3.5 Build 6, and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a 1 TREENAME or 2 GROUPNAME Policy file spd...

CVE-2009-3861

Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 Build 2 and 10.3.5 Build 6, and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a 1 TREENAME or 2 GROUPNAME Policy file spd...

CVE-2009-3861

The CVE-2009-3861 entry describes a stack-based buffer overflow in SafeNet SoftRemote (Security Policy Editor) affecting versions up to 10.8.5/10.3.5 and possibly others before 10.8.9. The overflow is triggered by overly long strings in a security policy file’s TREENAME or GROUPNAME fields (spd),...

PT-2009-6086 · Safenet · Safenet Softremote

Name of the Vulnerable Software and Affected Versions: SafeNet SoftRemote versions 10.3.5 through 10.8.5 Description: A stack-based buffer overflow issue allows local users to execute arbitrary code via a long string in a 1 TREENAME or 2 GROUPNAME Policy file spd. Recommendations: For versions...

CVE-2009-3861: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 Build 2 and 10.3.5 Build 6, and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a 1 TREENAME or 2 GROUPNAME Policy file spd...

SafeNet SoftRemote GROUPNAME Buffer Overflow

This module exploits a stack buffer overflow in SafeNet SoftRemote Security Policy Editor use exploit/windows/fileformat/safenet/softremotegroupname msf undefinedsoftremotegroupname show actions ...actions... msf undefinedsoftremotegroupname set ACTION msf undefinedsoftremotegroupname show option...