Buffer overflow

Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediate...

CVE-2008-0533

Multiple cross-site scripting XSS vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediate...

CVE-2008-0532

Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and...

CVE-2008-0532

CVE-2008-0532 describes a vulnerability in Cisco Secure Access Control Server (ACS) UCP, where multiple buffer overflows in CSuserCGI.exe allow remote code execution. An attacker can exploit a long argument following the Logout parameter to inject and run arbitrary code on affected systems. Affec...

CVE-2008-0533: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediate...

CVE-2008-0532: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password UCP before 4.2 in Cisco Secure Access Control Server ACS for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and...

RecurityLabs_Cisco_ACS_UCP_advisory.txt

Recurity Labs GmbH http://www.recurity-labs.com [email protected] Date: 12.03.2008 Vendor: Cisco Systems Product: Cisco Secure Access Control Server ACS for Windows User-Changeable Password UCP application Vulnerability: Multiple remote pre-authentication buffer overflows Cross Site...

Cisco Secure Access Control Server for Windows User-Changeable Password Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Information disclosure

Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters, which reveals the path in an "Execute failed" error message...

CVE-2008-1180

Cross-site scripting XSS vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to inject arbitrary web script or HTML via the deliverymode parameter...

CVE-2008-1181

Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters, which reveals the path in an "Execute failed" error message...

CVE-2008-1180

Cross-site scripting XSS vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to inject arbitrary web script or HTML via the deliverymode parameter...

CVE-2008-1181

Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters, which reveals the path in an "Execute failed" error message...

CVE-2008-1181

CVE-2008-1181 affects Juniper Networks Secure Access 2000 5.5 R1 (build 11711). The issue is an information disclosure via a direct request to remediate.cgi without certain parameters, causing an error message that reveals the path. Exploitation details, vulnerable component depth, and concrete r...

CVE-2008-1180

The vulnerability CVE-2008-1180 affects Juniper Networks Secure Access 2000, version 5.5 R1 build 11711, where a Cross-site Scripting (XSS) flaw exists in dana-na/auth/rdremediate.cgi. The issue allows remote attackers to inject arbitrary web script or HTML via the delivery_mode parameter, implyi...

CVE-2008-1180: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to inject arbitrary web script or HTML via the deliverymode parameter...

CVE-2008-1181: Exposure of Sensitive Information to an Unauthorized Actor

Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters, which reveals the path in an "Execute failed" error message...

Juniper Networks Secure Access 2000 rdremediate.cgi跨站脚本漏洞

BUGTRAQ ID: 28034 Juniper Networks的Secure Access 2000是企业级的SSL VPN接入设备。 Secure Access 2000的/dana-na/auth/rdremediate.cgi服务器端脚本没有正确的验证对deliverymode参数的输入，如果用户向该脚本提交了恶意请求的话，就可能在服务器上执行跨站脚本攻击。 Juniper Networks Secure Access 2000 5.5R1 build 11711 厂商补丁： Juniper Networks ----------------...

Juniper Networks Secure Access 2000 Web Root路径泄露漏洞

BUGTRAQ ID: 28037 Juniper Networks的Secure Access 2000是企业级的SSL VPN接入设备。 Secure Access 2000处理用户请求参数时存在漏洞，远程攻击者可能利用此漏洞获取服务器相关的敏感信息。 如果向Secure Access 2000的remediate.cgi脚本提交了带有特制参数的请求的话，服务器就会在返回的Execute failed消息中包含webroot（/home/webserver/htdocs/）的物理路径。 Juniper Networks Secure Access 2000 5.5R1 build...