CVE-2008-0071

CVE-2008-0071 affects BitTorrent before 6.0.3 build 8642 and uTorrent before 1.8beta build 10524. The flaw is in the Web UI handling of HTTP requests with a malformed Range header, allowing remote attackers to cause a denial-of-service (application crash). The vulnerability is exposed when the We...

uTorrent / BitTorrent DoS

Web UI HTTP request Range: header DoS...

Aruba Mobility Controller绕过认证及跨站脚本漏洞

BUGTRAQ ID: 29240 Aruba Mobility Controller可为企业提供移动接入解决方案。 Aruba Mobility Controllers的TACACS认证组件可能允许非授权的Web UI/SSH/Telnet访问，但TACACS不是默认的认证方式；Aruba Mobility Controllers可能提供一个基于Web的管理和captive portal接口，向这个web UI提供畸形输入可以导致向用户显示输入，导致跨站脚本攻击。 Aruba Networks Mobility Controllers 3.3.1.x Aruba Networks...

Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities (Aruba Advisory ID: AID-051408)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aruba Networks Security Advisory Title: Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities Aruba Advisory ID: AID-051408 Revision: 1.0 For Public Release on 05/14/2008...

Asterisk vmail.cgi vulnerability

Assurance.com.au - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Nov-2005 Software: Asterisk Web-VoiceMail Comedian VoiceMail http://www.asterisk.org/ Asterisk is a complete PBX in software. It runs on Linux, BSD and MacOSX and provides all of the feature...