EUVD-2004-1807

Malware in sbrugna...

VocalTec VGW4/8 Telephony Gateway Remote Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9876/info It has been reported that the VGW4/8 Telephony Gateway is prone to a remote authentication bypass vulnerability via its web configuration tool. The problem is due to a design error in the application that allows...

CVE-2004-1814

The CVE-2004-1814 entry describes a directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0. An attacker can read protected files by sending HTTP requests containing .. sequences, demonstrated via home.asp. The NVD risk metric indicates a Medium base score with network access, minimal au...

CVE-2004-1813

VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a trailing slash /...

CVE-2004-1813

The CVE-2004-1813 entry applies to VocalTec VGW4/8 Gateway versions around 8.0. It describes a remote authentication bypass vulnerability where an HTTP request to home.asp with a trailing slash can bypass login. CVSS v2 metrics indicate a base score of 7.5 (HIGH) with network access, low attack c...

CVE-2004-1814

Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. dot dot sequences in an HTTP request, as demonstrated using home.asp...

CVE-2004-1813: Undefined Security Weakness

VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a trailing slash /...

CVE-2004-1814: Undefined Security Weakness

Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. dot dot sequences in an HTTP request, as demonstrated using home.asp...