ZYWALL Referer Header XSS Vulnerability

Affected Software/Device: Zyxel ZYWall 100 Vulnerability: Cross Site Scripting Risk: Low Description: The ZyWALL 100 is designed to act as a secure gateway via xDSL/Cable modems or broadband routers for small to medium size companies. The ZyWALL 100 features an ICSA certified firewall, IPSec VPN...

CVE-2008-2030

Cross-site scripting XSS vulnerability in installControl.php3 in F5 FirePass 4100 SSL VPN 5.4.2-5.5.2 and 6.0-6.2 allows remote attackers to inject arbitrary web script or HTML via the query string. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

Cross site scripting

Cross-site scripting XSS vulnerability in installControl.php3 in F5 FirePass 4100 SSL VPN 5.4.2-5.5.2 and 6.0-6.2 allows remote attackers to inject arbitrary web script or HTML via the query string. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-2030

Technical details (affected product/version, root cause, impact, exploit info) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2008-2030

Cross-site scripting XSS vulnerability in installControl.php3 in F5 FirePass 4100 SSL VPN 5.4.2-5.5.2 and 6.0-6.2 allows remote attackers to inject arbitrary web script or HTML via the query string. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

F5 FirePass 4100 SSL VPN设备installControl.php3跨站脚本漏洞

BUGTRAQ ID: 28902 F5 FirePass SSL VPN设备允许用户安全的连接到关键业务应用设备上。 FirePass没有正确地过滤对installControl.php3脚本所传送的URL便返回给了用户，这允许攻击者通过跨站脚本攻击导致在用户浏览器会话中执行任意HTML和脚本代码。 F5 FirePass 4100 F5 -- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.f5.com/...

F5 Networks FirePass 4100 SSL VPN - 'installControl.php3' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28902/info F5 Networks FirePass 4100 SSL VPN devices are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

F5 Networks FirePass 4100 SSL VPN - installControl.php3 Cross-Site Scripting

F5 Networks FirePass 4100 SSL VPN - installControl.php3 Cross-Site Scripting source: https://www.securityfocus.com/bid/28902/info F5 Networks FirePass 4100 SSL VPN devices are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker may...

[NEWS] Watchguard Firebox PPTP VPN User Enumeration Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Authentication flaw

The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames...

CVE-2008-1618

The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames...

CVE-2008-1618

CVE-2008-1618 : Watchguard Firebox PPTP VPN (pre-10) may leak valid usernames during MS-CHAPv2 authentication due to distinct error codes for valid vs invalid usernames. The documented behavior enables an attacker to enumerate valid usernames, facilitating targeted password guessing and potential...

Memory corruption

Unspecified vulnerability in the Supervisor Engine 32 Sup32, Supervisor Engine 720 Sup720, and Route Switch Processor 720 RSP720 for multiple Cisco products, when using Multi Protocol Label Switching MPLS VPN and OSPF sham-link, allows remote attackers to cause a denial of service blocked queue,...

CVE-2008-0537

Unspecified vulnerability in the Supervisor Engine 32 Sup32, Supervisor Engine 720 Sup720, and Route Switch Processor 720 RSP720 for multiple Cisco products, when using Multi Protocol Label Switching MPLS VPN and OSPF sham-link, allows remote attackers to cause a denial of service blocked queue,...

CVE-2008-0537

Unspecified vulnerability in the Supervisor Engine 32 Sup32, Supervisor Engine 720 Sup720, and Route Switch Processor 720 RSP720 for multiple Cisco products, when using Multi Protocol Label Switching MPLS VPN and OSPF sham-link, allows remote attackers to cause a denial of service blocked queue,...

CVE-2008-0537

The CVE-2008-0537 entry concerns Cisco IOS-based platforms (Catalyst 6500 Series and Cisco 7600 Router devices) running Supervisor Engine 32 (Sup32), Supervisor Engine 720 (Sup720), or Route Switch Processor 720 (RSP720). The vulnerability occurs when OSPF Sham-Link and MPLS VPN are enabled, allo...

Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Security Advisory: Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Multicast Virtual Private Network MVPN Data Leak Advisory ID: cisco-sa-20080326-mvpn http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml Revision 1.0 For Public Release 2008 March 26 1600 UTC GMT Summar...

Cisco Security Advisory: Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720 Advisory ID: cisco-sa-20080326-queue http://www.cisco.com/warp/public/707/cisco-sa-20080326-queue.shtml Revision...