177 matches found
CVE-2012-0363
Cisco SRP 500 Series Web Interface Command Injection (CVE-2012-0363) affects Cisco SRP 520/540 series devices with specific pre-update firmware. An authenticated user could cause the device to execute arbitrary OS commands via the web interface (command injection) as described in CSCtt46871. Affe...
CVE-2012-0365
Cisco SRP 500 Series devices (including SRP 521W/526W/527W and SRP 521W-U/526W-U/527W-U; and SRP 541W/546W/547W) with firmware before 1.1.26 (520 series) or before 1.2.4 (520W‑U and 540 series) are affected by CVE-2012-0365. The vulnerability is a directory traversal in the Local TFTP file-upload...
Cisco Small Business SRP 500 Series Multiple Vulnerabilities
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
CVE-2011-3164
CVE-2011-3164 affects HP-UX Containers (SRP) on HP-UX B.11.31 in SRP kernel versions A.03.00, A.03.00.002 and A.03.01 when PHKL_42310 is installed. The vulnerability allows local privilege escalation via unknown vectors. HP’s security bulletin (HPSBUX02715) and related advisories indicate the fix...
CVE-2011-4005
Cross-site request forgery CSRF vulnerability in the Services Ready Platform Configuration Utility web interface on the Cisco Small Business SRP521W, SRP526W, and SRP527W with firmware before 1.1.24 and the Small Business SRP541W, SRP546W, and SRP547W with firmware before 1.2.1 allows remote...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Services Ready Platform Configuration Utility web interface on the Cisco Small Business SRP521W, SRP526W, and SRP527W with firmware before 1.1.24 and the Small Business SRP541W, SRP546W, and SRP547W with firmware before 1.2.1 allows remote...
[security bulletin] HPSBUX02715 SSRT100623 rev.2 - HP-UX Containers (SRP), Local Unauthorized Access and Increased Privileges
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03057703 Version: 2 HPSBUX02715 SSRT100623 rev.2 - HP-UX Containers SRP, Local Unauthorized Access and Increased Privileges NOTICE: The information in this Security Bulletin should be acted upon ...
Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720)
On-line version will be at http://www.postfix.org/CVE-2011-1720.html Summary ======= The Postfix SMTP server has a memory corruption error when the Cyrus SASL library is used with authentication mechanisms other than PLAIN and LOGIN the ANONYMOUS mechanism is unaffected but should not be enabled...
the windows shortcut file execution vulnerability and Defense strategies-vulnerability warning-the black bar safety net
Recently this loophole relatively fiery, simple to say is to construct a malicious shortcut can execute the file code. The vulnerability relates to XP, Vista, Win7, etc. almost all Windows platforms, U disk, mobile phone, digital camera, iPod, etc. all USB devices will become the Trojan of the...
CVE-2009-4810
The Secure Remote Password SRP implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input...
Authentication flaw
The Secure Remote Password SRP implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input...
CVE-2009-4810
The Secure Remote Password SRP implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input...
CVE-2009-4810
The CVE-2009-4810 entry concerns the SRP implementation in Samhain prior to version 2.5.4. A zero-value check required by the SRP protocol is omitted, allowing remote attackers to bypass authentication via crafted input. The impact is an authentication bypass affecting Samhain’s SRP authenticatio...
Samhain SRP Protocol Implementation Authentication Bypass
Binary data samhainsrpvuln.nbin...
BlackBerry Enterprise Server Crafted SRP Packet Remote DoS
A malicious user can cause a denial of service by sending malformed SRP packets to the BlackBerry Router on port 3101. Note that successful exploitation of this issue by a remote attacker is reportedly possible only through manipulation of DNS queries. C Tenable Network Security, Inc...
CVE-2005-2342
The CVE-2005-2342 issue affects the Research In Motion (RIM) BlackBerry Router within BlackBerry Enterprise Server (BES). A remote, unauthenticated attacker can cause a denial-of-service (communication disruption) by sending crafted Server Routing Protocol (SRP) packets to the router, potentially...