14 matches found
EUVD-2011-5148
Malware in sbrugna...
EUVD-2011-5146
Malware in sbrugna...
Snare for Linux Password Disclosure Vulnerability
Snare for Linux is a log collection and analysis tool for Linux-based platforms. A security vulnerability exists in versions of Snare prior to 1.7.0 for Linux-based platforms, which stems from a rendered page containing a RemotePassword field. An attacker can exploit this vulnerability to obtain ...
CVE-2011-5247
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...
CVE-2011-5250
Snare for Linux before 1.7.0 has CSRF in the web interface...
CVE-2011-5250
Snare for Linux before 1.7.0 has CSRF in the web interface...
CVE-2011-5247
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...
PT-2020-7158
Name of the Vulnerable Software and Affected Versions Snare for Linux versions prior to 1.7.0 Description The issue concerns a CSRF in the web interface. Recommendations For versions prior to 1.7.0, update to version 1.7.0 or later to resolve the issue...
PT-2020-7157
Name of the Vulnerable Software and Affected Versions Snare for Linux versions prior to 1.7.0 Description The issue is related to password disclosure. The rendered page contains the field RemotePassword, which leads to the exposure of passwords. Recommendations For versions prior to 1.7.0, update...
PT-2014-2185
Name of the Vulnerable Software and Affected Versions SNARE for Linux agent versions prior to 1.7.0 Description A cross-site scripting XSS issue exists in the events page of the SNARE for Linux agent, allowing remote attackers to inject arbitrary web script or HTML via a logged shell command. Thi...
Snare Agent Linux Password Disclosure / CSRF Vulnerabilities
Snare for Linux ships with a web interface that can be used for viewing log data and configuring the agent. In the web interface at /remote, a user is able to set a password for remote configuration of the agent. The rendered page contains the field "RemotePassword" with its input type set to...
Snare for Linux Cross-Site Request Forgery
Snare for Linux Cross-Site Request Forgery I. BACKGROUND ---------------------- Snare for Linux provides a 'C2' or 'CAPP' style audit subsystem for the Linux operating system. It can be used as a standalone auditing tool for Linux, or can send data to the Snare Server for analysis and storage. II...
Snare for Linux Cross-Site Scripting via Log Injection I. BACKGROUND ---------------------- Snare for Linux provides a 'C2' or 'CAPP' style audit subsystem for the Linux operating system. It can be used as a standalone auditing tool for Linux, or can send data to the Snare Server for analysis and...
Snare For Linux Cross Site Scripting
Snare for Linux Cross-Site Scripting via Log Injection I. BACKGROUND ---------------------- Snare for Linux provides a 'C2' or 'CAPP' style audit subsystem for the Linux operating system. It can be used as a standalone auditing tool for Linux, or can send data to the Snare Server for analysis and...