Lucene search
K

360 matches found

OSV
OSV
added 2009/09/22 10:30 a.m.7 views

CVE-2009-3287

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...

6.3AI score
Exploits0References3
OSV
OSV
added 2009/09/22 10:30 a.m.1 views

DEBIAN-CVE-2009-3287

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...

7.5CVSS6.9AI score0.00478EPSS
Exploits0References1
CVE
CVE
added 2009/09/22 10:0 a.m.86 views

CVE-2009-3287

CVE-2009-3287 affects Thin (lib/thin/connection.rb) prior to 1.2.4. The root cause is reliance on the X-Forwarded-For header to determine the client IP, allowing remote attackers to spoof the IP address and hide activities via a modified header. Impact is described as partial confidentiality, int...

7.5CVSS6.5AI score0.00478EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2009/09/22 10:0 a.m.17 views

CVE-2009-3287

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...

7.5CVSS6.2AI score0.00478EPSS
Exploits0
Cvelist
Cvelist
added 2009/09/22 10:0 a.m.20 views

CVE-2009-3287

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...

6.5AI score0.00478EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2009/09/02 12:0 a.m.20 views

Wyse Thin Client hagent.exe Unspecified Buffer Overflow

Binary data wysehagent.nbin...

7.3AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2008/03/31 12:0 a.m.10 views

X2 Thin Client Server Detection

Binary data 4452.prm...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2008/03/31 12:0 a.m.10 views

X2 Thin Client Server Detection (deprecated)

Binary data 4453.prm...

7.3AI score
Exploits0References1
seebug.org
seebug.org
added 2006/12/11 12:0 a.m.29 views

AK-Systems Windows Terminals远程未授权管理访问漏洞

基于WinCE的Windows Terminals thin客户端由AK-Systems公司制作的包含VNC服务来远程管理和设置的应用程序。 新固件版本的应用程序其VNC访问没有通过密码保护,因此任何有VNC客户端的用户可以连接终端并查看RDP/Citrix会话或进行中间人攻击。 AK-Systems Windows Terminal 1.2.5 ExVLP http://www.ak-systems.ru/products/models/...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2005/11/10 12:0 a.m.18 views

GO-Global Server Detection

The remote host is running a GO-Global server, a commercial thin- client computing solution for Windows and unix. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20177; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

5.5AI score
Exploits0References1
securityvulns
securityvulns
added 2005/11/03 12:0 a.m.38 views

Graphon Go-Global thin client and server solution buffer overflow

Buffer overflow in initial protocol handshake...

3.1AI score
Exploits0References1Affected Software1
CVE
CVE
added 2005/05/10 4:0 a.m.46 views

CVE-2004-2050

CVE-2004-2050 concerns eSeSIX Thintune Thin Client firmware 2.4.38 and earlier. Local users can gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the hard-coded password maertsJ in lshell, enabling a local privilege escalation. OpenVAS notes a backdoor password (jstwo) in Thintune, indi...

4.6CVSS6.7AI score0.0015EPSS
Exploits1References6Affected Software7
CVE
CVE
added 2005/05/10 4:0 a.m.47 views

CVE-2004-2052

The affected software is eSeSIX Thintune thin clients with firmware up to 2.4.38. The vulnerability arises from an authentication weakness where any password that begins with the actual password is accepted, enabling brute‑force password guessing. Impact is described as partial confidentiality an...

7.5CVSS7.2AI score0.00489EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2005/05/10 4:0 a.m.44 views

CVE-2004-2048

The CVE-2004-2048 entry concerns eSeSIX Thintune Thin Client devices. A radmin service starts a process on port 25072 in firmware 2.4.38 and earlier, which can be accessed using the default password “jstwo,” enabling remote attackers to gain complete access. Related OpenVAS data corroborates a ba...

10CVSS7AI score0.032EPSS
Exploits1References6Affected Software7
Cvelist
Cvelist
added 2005/05/10 4:0 a.m.17 views

CVE-2004-2052

eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual password, which makes it easier for users to conduct brute force password guessing...

6.8AI score0.00489EPSS
Exploits0References1
CVE
CVE
added 2005/05/10 4:0 a.m.48 views

CVE-2004-2049

Summary (CVE-2004-2049) : The eSeSIX Thintune thin clients (firmware

4.6CVSS6.8AI score0.00108EPSS
Exploits0References6Affected Software7
NVD
NVD
added 2004/12/31 5:0 a.m.14 views

CVE-2004-2050

eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the "maertsJ" password, which is hard-coded into lshell...

4.6CVSS6.7AI score0.0015EPSS
Exploits1References6
Packet Storm
Packet Storm
added 2004/07/26 12:0 a.m.132 views

eSeSIX.txt

eSeSIX Thintune thin client multiple vulnerabilities IT-Consult, 2004-07-24 Background - -------- Thintune is a series of thin client appliances sold by eSeSIX GmbH, Germany. They offer ICA, RDP, X11 and SSH support based on a customized Linux platform. See http://www.thintune.com for details...

Exploits0
securityvulns
securityvulns
added 2004/07/26 12:0 a.m.28 views

eSeSIX Thintune thin client multiple vulnerabilities

eSeSIX Thintune thin client multiple vulnerabilities IT-Consult, 2004-07-24 Background - -------- Thintune is a series of thin client appliances sold by eSeSIX GmbH, Germany. They offer ICA, RDP, X11 and SSH support based on a customized Linux platform. See http://www.thintune.com for details...

0.3AI score
Exploits0
securityvulns
securityvulns
added 2000/05/07 12:0 a.m.83 views

Linux news 07.05.00

Linux kernel 2.2.15aa1 Вышла новая и первая версия ядра из серии Linux kernel 2.2.15aaxx. Это ядро предназначено, прежде всего, для больших и мощных серверов с большим объемом RAM. Подробнее: http://linuxtoday.com/stories/21325.html The Real Microsoft Killer: Open File Formats Cтатья обращает...

6.9AI score
Exploits0
Rows per page
Query Builder