46 matches found
EUVD-2002-1088
Malware in sbrugna...
Cisco VPN Concentrator 3000 FTP Unauthorized Administrative Access
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco VPN Concentrator 3000 FTP Unauthorized Administrative Access', 'Description' = %q This module tests for a logic vulnerability in the Cisco...
Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit
No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...
CVE-2007-5562
The CVE-2007-5562 issue affects Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 . The vulnerable component is the login page at cgi-bin/welcome , exploitable via the err parameter in the context of an error page to trigger Cross-site Scripting (XSS) . The provided description indicates remote atta...
CVE-2007-5562: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in cgi-bin/welcome aka the login page in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page...
Cisco VPN Concentrator Administrative Interface Detection
Binary data 3913.prm...
Cisco VPN Concentrator 3000 FTP Server Remote Manipulation (Exploit)
No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...
Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit
No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...
Cisco VPN 3000 Concentrator <= 4.1.7, 4.7.2 (FTP) Remote Exploit
Exploit for hardware platform in category remote exploits ================================================================ Cisco VPN 3000 Concentrator = 4.1.7, 4.7.2 FTP Remote Exploit ================================================================ / Cisco VPN Concentrator 3000 FTP remote exploi...
Cisco VPN 3000 Concentrator <= 4.1.7 4.7.2 (FTP) Remote Exploit
No description provided by source. / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An...
Cisco VPN 3000 Concentrator 4.1.7/4.7.2 - 'FTP' Remote File System Access
/ Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An unauthenticated user can use the following...
Cisco VPN 3000 Concentrator 4.1.74.7.2 - FTP Remote File System Access
Cisco VPN 3000 Concentrator 4.1.74.7.2 - FTP Remote File System Access / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation...
Cisco VPN Concentrator 3000 FTP Unauthorized Administrative Access
This module tests for a logic vulnerability in the Cisco VPN Concentrator 3000 series. It is possible to execute some FTP statements without authentication CWD, RNFR, MKD, RMD, SIZE, CDUP. It also appears to have some memory leak bugs when working with CWD commands. This module simply creates an...
Cisco bug ID CSCdu35577 (Web Check)
The remote VPN concentrator gives out too much information in application layer banners. An incorrect page request provides the specific version of software installed. This vulnerability is documented as Cisco bug ID CSCdu35577. OpenVAS Vulnerability Test $Id: CSCdu35577web.nasl 8023 2017-12-07...
Cisco VPN Concentrator Group Name Enumeration
Binary data 3023.prm...
Cisco VPN Concentrator "No Encryption" Option Remote DoS (Bug ID CSCdx39981)
Binary data 2234.prm...
Cisco VPN Concentrator LAN-to-LAN IPSEC Tunnel Termination DoS (Bug ID CSCdx54675)
Binary data 2237.prm...
Cisco VPN Concentrator HTML Interface DoS (Bug ID CSCdu15622)
Binary data 2211.prm...