EUVD-2011-5148

Malware in sbrugna...

EUVD-2011-5146

Malware in sbrugna...

Snare for Linux Password Disclosure Vulnerability

Snare for Linux is a log collection and analysis tool for Linux-based platforms. A security vulnerability exists in versions of Snare prior to 1.7.0 for Linux-based platforms, which stems from a rendered page containing a RemotePassword field. An attacker can exploit this vulnerability to obtain ...

CVE-2011-5247

Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...

CVE-2011-5250

Snare for Linux before 1.7.0 has CSRF in the web interface...

CVE-2011-5250

Snare for Linux before 1.7.0 has CSRF in the web interface...

CVE-2011-5247

Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...

Snare Agent Linux Password Disclosure / CSRF Vulnerabilities

Snare for Linux ships with a web interface that can be used for viewing log data and configuring the agent. In the web interface at /remote, a user is able to set a password for remote configuration of the agent. The rendered page contains the field "RemotePassword" with its input type set to...

Snare for Linux Cross-Site Request Forgery

Snare for Linux Cross-Site Request Forgery I. BACKGROUND ---------------------- Snare for Linux provides a 'C2' or 'CAPP' style audit subsystem for the Linux operating system. It can be used as a standalone auditing tool for Linux, or can send data to the Snare Server for analysis and storage. II...

[email protected]

Snare for Linux Cross-Site Scripting via Log Injection I. BACKGROUND ---------------------- Snare for Linux provides a 'C2' or 'CAPP' style audit subsystem for the Linux operating system. It can be used as a standalone auditing tool for Linux, or can send data to the Snare Server for analysis and...

Snare For Linux Cross Site Scripting

Snare for Linux Cross-Site Scripting via Log Injection I. BACKGROUND ---------------------- Snare for Linux provides a 'C2' or 'CAPP' style audit subsystem for the Linux operating system. It can be used as a standalone auditing tool for Linux, or can send data to the Snare Server for analysis and...