1230 matches found
Default configuration
The default configuration of Avaya Secure Access Link SAL Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allows remote attackers to obtain sensitive information by leveraging administrative access to these...
CVE-2011-3008
The default configuration of Avaya Secure Access Link SAL Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allows remote attackers to obtain sensitive information by leveraging administrative access to these...
CVE-2011-3008
CVE-2011-3008 affects Avaya Secure Access Link (SAL) Gateway versions 1.5, 1.8, and 2.0. The default configuration places certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, enabling remote attackers with administrative access to these domain names to obt...
[SECURITY] Fedora 13 Update: cyrus-imapd-2.3.16-5.fc13
The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...
[SECURITY] Fedora 14 Update: cyrus-imapd-2.3.16-8.fc14
The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...
CVE-2011-0951
The web-based management interface in Cisco Secure Access Control System ACS 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440...
Design/Logic Flaw
The web-based management interface in Cisco Secure Access Control System ACS 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440...
CVE-2011-0951
CVE-2011-0951 affects Cisco Secure Access Control System (ACS) 5.1 (with patches 3/4/5) and 5.2 (no patches or patches 1–2). The web-based management interface contains an authentication/authorization flaw that lets a remote, unauthenticated attacker change arbitrary user passwords via unspecifie...
Cisco Secure Access Control System privilege escalation
It's possible to reset any user's password...
Cisco Secure Access Control System Password Modification Vulnerability
Cisco Secure Access Control System ACS contains a vulnerability that could allow an unauthenticated, remote attacker to modify user passwords. The vulnerability is due to improper security restrictions on user password change functions in the web-based management interface of the Cisco Secure ACS...
RSA Hack Yields SecurID Secrets
RSA Security, a division of EMC Corp. has admitted that it was the victim of a sophisticated attack that resulted in the theft of secrets related to its SecurID two-factor authentication product. The disclosure came in a blog post by RSA chief Art Coviello on Thursday. Coviello said that the...
Juniper Secure Access crossite scripting
Multiple crossite scripting vulnerabilities...
Juniper Secure Access crossite scripting
Administration interface crossite scripting...
Juniper Secure Access crossite scripting
editbk.cgi crossite scripting...
Cisco Secure Access Control Server UCP Application Buffer Overflow (CVE-2008-0532)
Cisco Secure Access Control Server provides authentication, authorization, and accounting AAA services to network devices that control client access to the network. Such devices include network access servers, PIX firewalls, wireless access points, routers and switches. A buffer overflow...
Cisco Secure Access Control Server (ACS) Denial of Service Vulnerability
Cisco Secure Access Control Server ACS contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability exists due to an error when handling Remote Authentication Dial In User Service RADIUS Extensible Authentication...
Cisco Secure Access Control Server Detection
Binary data 4633.prm...
Cisco Secure Access Control Server (ACS) CSUserCGI.exe Help Facility XSS
Binary data ciscoacsucpxss.nbin...