CVE-2014-2537

Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service memory consumption via unspecified vectors...

CVE-2014-2537

The CVE-2014-2537 entry concerns Sophos UTM prior to 9.109, where a memory leak in the kernel’s TCP stack can be exploited remotely to cause a denial of service. Affected product/version: Sophos UTM versions 9.108 and earlier. Root cause: memory leak in the TCP stack (kernel level). Impact: denia...

KLA10337 DoS vulnerability in Sophos UTM

A memory leak was found in Sophos UTM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Exploitation Related products Sophos-Unified-Threat-Management CVE list CVE-2014-2537 hi...

CVE-2014-2537: Undefined Security Weakness

Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service memory consumption via unspecified vectors...

Sophos UTM TCP栈内存泄漏拒绝服务漏洞

Sophos UTM提供一套集成的软件解决方案，是具有高性能的多合一防火墙。 Sophos UTM处理TCP栈存在错误，允许攻击者利用漏洞触发内存泄漏造成拒绝服务攻击。 0 Sophos UTM 9.x Sophos UTM 9.109已经修复该漏洞，建议用户下载更新： http://www.sophos.com...

Juniper Networks Junos OS TCP Packet Handling Denial of Service Vulnerability

A vulnerability in the Flow Daemon can cause a crash when handling certain TCP packets. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Junos SRX Series flowd Remote DoS (JSA10596)

According to its self-reported version number, the remote Juniper Junos SRX-series device has a denial of service vulnerability related to processing particular TCP packet sequences. A remote attacker can exploit this issue to cause the flow daemon flowd to crash. Note that this issue only affect...

CVE-2013-5932

Unspecified vulnerability in WebAdmin in Sophos UTM aka Astaro Security Gateway before 9.105 has unknown impact and attack vectors...

Security feature bypass

Unspecified vulnerability in WebAdmin in Sophos UTM aka Astaro Security Gateway before 9.105 has unknown impact and attack vectors...

CVE-2013-5932

Unspecified vulnerability in WebAdmin in Sophos UTM aka Astaro Security Gateway before 9.105 has unknown impact and attack vectors...

CVE-2013-5932

Technical details for CVE-2013-5932 are not publicly available in the provided documents. No confirmed affected versions, root cause, or remediation are given. Monitor for updates.

CVE-2013-5932: Undefined Security Weakness

Unspecified vulnerability in WebAdmin in Sophos UTM aka Astaro Security Gateway before 9.105 has unknown impact and attack vectors...

CVE-2012-3268

CVE-2012-3268 describes an SNMP information-disclosure vulnerability in HP/H3C/Huawei networking gear where protected h3c-user.mib/hh3c-user.mib objects can be queried via a read-only SNMP community, allowing remote authenticated users to enumerate usernames, passwords or password hashes in UserI...

pfSense UTM Platform 2.0.1 - Cross-Site Scripting

┴┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┴ │ Exploit Title: pfSense = 2.0.1 XSS & CSRF during IPSec XAuth authentication │ Date: 04/01/2013 │ Author: Dimitris Strevinas │ Vendor or Software Link: www.pfsense.org │ Version: = 2.0.1 │ Category: Semi-Persistent...

PFsense UTM Platform 2.0.1 XSS / CSRF

┴┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┬┴ │ Exploit Title: pfSense = 2.0.1 XSS & CSRF during IPSec XAuth authentication │ Date: 04/01/2013 │ Author: Dimitris Strevinas │ Vendor or Software Link: www.pfsense.org │ Version: = 2.0.1 │ Category: Semi-Persistent X...

Default configuration

The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the...

CVE-2012-4948

CVE-2012-4948 describes a default-configuration issue in Fortinet Fortigate UTM appliances: the same Fortigate CA certificate and private key are reused across devices, enabling an attacker with a man-in-the-middle vantage point to spoof SSL servers or sign malware on trusted chains. The CERT/CSA...

CVE-2012-4948: Improper Certificate Validation

The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the...

PR11-07 Multiple peristent XSS, XSS, XSRF, offsite redirection and information disclosure flaws within CheckPoint/Sofaware firewalls

ProCheckUp Research http://procheckup.com/procheckup-labs/pr11-07.aspx PR11-07 Multiple peristent XSS, XSS, XSRF, offsite redirection and information disclosure flaws within CheckPoint/Sofaware firewalls Vulnerability found: 3rd May 2011 Vendor informed: 20th July 2011 Vulnerability fixed: 16th...

CheckPointSofaware Firewall - Multiple Vulnerabilities

CheckPointSofaware Firewall - Multiple Vulnerabilities ProCheckUp Research http://procheckup.com/procheckup-labs/pr11-07.aspx PR11-07 Multiple peristent XSS, XSS, XSRF, offsite redirection and information disclosure flaws within CheckPoint/Sofaware firewalls Vulnerability found: 3rd May 2011 Vend...