CVE-2006-5303

Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and signing keys by reading 1 base-64 encoded data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and 2 plaintext data in SERVERS\Shared\signers.cfg. NOTE: the...

CVE-2006-5303

CVE-2006-5303 affects Secure Computing SafeWord RemoteAccess 2.1. The vulnerability allows local users to obtain sensitive credentials by reading (1) base-64 data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and (2) plaintext data in SERVERS\Shared\signers.cfg. The provenance of the inform...

CVE-2006-5303

Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and signing keys by reading 1 base-64 encoded data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and 2 plaintext data in SERVERS\Shared\signers.cfg. NOTE: the...

CVE-2006-5303: Undefined Security Weakness

Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and signing keys by reading 1 base-64 encoded data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and 2 plaintext data in SERVERS\Shared\signers.cfg. NOTE: the...

eIQNetworks ESA License Manager LICMGR_ADDLICENSE Overflow

This module exploits a stack buffer overflow in eIQnetworks Enterprise Security Analyzer. During the processing of long arguments to the LICMGRADDLICENSE command, a stack-based buffer overflow occurs. This module has only been tested against ESA v2.1.13. Module Options msf use...

CVE-2004-2545

CVE-2004-2545 affects Secure Computing Corporation Sidewinder G2 6.1.0.01. Described as a remote denial of service of the SMTP proxy triggered by an “extremely busy network.” The embedded monitoring sub-system reportedly restarts after the failure. No remediation or concrete exploitation details ...

CVE-2004-2544

The CVE-2004-2544 entry concerns Secure Computing Corporation Sidewinder G2 6.1.0.01. The Admin Console exports private keys when exporting firewall certificates, potentially exposing sensitive information. Affected component: Admin Console; vulnerability: exporting private keys. Impact described...

CVE-2004-2544

Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when exporting firewall certificates, which might allow attackers to obtain sensitive information...

CVE-2004-2545

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service SMTP proxy failure via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts...

CVE-2004-2543

The CVE-2004-2543 entry concerns Secure Computing Corporation Sidewinder G2 6.1.0.01. It describes a potential remote DoS where an attacker can trigger a proxy failure by sending invalid traffic to the T.120 or RTSP proxy, or sending invalid MIME messages to the mail filter. The note indicates th...

CVE-2004-2543

Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a denial of service proxy failure via invalid traffic to the 1 T.120 or 2 RTSP proxy, or 3 invalid MIME messages to the mail filter. NOTE: this might not be a vulnerability because the embedded monitoring...

CVE-2004-2543: Undefined Security Weakness

Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a denial of service proxy failure via invalid traffic to the 1 T.120 or 2 RTSP proxy, or 3 invalid MIME messages to the mail filter. NOTE: this might not be a vulnerability because the embedded monitoring...

CVE-2004-2544: Undefined Security Weakness

Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when exporting firewall certificates, which might allow attackers to obtain sensitive information...

CVE-2004-2545: Undefined Security Weakness

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service SMTP proxy failure via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts...

CVE-2004-2399

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service CPU consumption via delayed responses to DNS queries...

CVE-2004-2399

Summary: CVE-2004-2399 affects Secure Computing Corporation Sidewinder G2 6.1.0.01. The vulnerability allows remote attackers to cause a denial of service via delayed responses to DNS queries, resulting in CPU consumption. The connected documentation confirms the affected product/version and the ...

CVE-2004-2399

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service CPU consumption via delayed responses to DNS queries...

CVE-2004-2543

Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a denial of service proxy failure via invalid traffic to the 1 T.120 or 2 RTSP proxy, or 3 invalid MIME messages to the mail filter. NOTE: this might not be a vulnerability because the embedded monitoring...

CVE-2004-2545

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service SMTP proxy failure via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts...

CVE-2004-2544

Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when exporting firewall certificates, which might allow attackers to obtain sensitive information...