CVE-2006-2838

Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown attack vectors. NOTE: By default, the connections ar...

F-Secure Multiple Products Web Console Pre-authentication Overflow RCE

The version of F-Secure Internet Gatekeeper and/or F-Secure Anti-Virus for Microsoft Exchange installed on the remote host is affected by a buffer overflow condition in its web console. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or the execution of...

F-Secure antiviruses Web console buffer overflow

No description provided...

[SA20407] F-Secure Products Web Console Buffer Overflow Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

Sybase EAServer 5.2 - WebConsole Remote Stack Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Sybase EAServer 5.2 (WebConsole) Remote Stack Overflow Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Cross site scripting

Cross-site scripting XSS vulnerability in apwcwinmain.jsp in the web console in IBM Tivoli Business Systems Manager TBSM before 3.1.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter...

CVE-2006-1384

IBM Tivoli Business Systems Manager (TBSM) web console component apwc_win_main.jsp is affected by a cross-site scripting (XSS) vulnerability that can be exploited via the skin parameter. The issue exists in TBSM builds prior to 3.1.0.1, allowing remote attackers to inject arbitrary web script or ...

IBM Tivoli Business Systems Manage crossite scripting

Crossite scripting with https://host:9443/TbsmWebConsole/help/en/jsp/apwcwinmain.jsp?skin=code...

Aventail ASAP detection

The remote host seems to be an Aventail SSL VPN appliance, connections are allowed to the web console management. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. In addition to this, an attacker may attempt to s...

Fortinet Fortigate console management detection

The remote host appears to be a Fortinet Fortigate Firewall. Connections are allowed to the web console management. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. In addition to this, an attacker may set up a...

Trend Micro IMSS Console Management Detection (HTTP)

The remote host appears to run Trend Micro Interscan Messaging Security Suite, connections are allowed to the web console management. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

OfficeScan configuration file disclosure

Trend Micro OfficeScan Corporate Edition Japanese version: Virus Buster Corporate Edition web-based management console let anybody access /officescan/hotdownload without authentication. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources,...

Trend Micro TMCM Console Management Detection (HTTP)

The remote host appears to run Trend Micro Control Manager, connections are allowed to the web console management. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

BlueCoat ProxySG console management detection

The remote host appears to be a BlueCoat ProxySG, connections are allowed to the web console management. Letting attackers know that you are using a BlueCoat will help them to focus their attack or will make them change their strategy. OpenVAS Vulnerability Test $Id: bluecoatmgntconsole.nasl 8023...

CVE-2005-3468

Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypass Web Console authentication and read files...

CVE-2005-3468

Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypass Web Console authentication and read files...

Trend Micro TMCM Console Management Detection

The remote host appears to run Trend Micro Control Manager. It is accepting connections to the web console management interface, which may reveal sensitive information. A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; if...

Aventail ASAP Platform Management Console Detection

The remote host seems to be an Aventail SSL VPN appliance, and it allows connections to its web console management. Letting attackers know that you are using such a device will help them to focus their attacks or will make them change their strategy. In addition to this, an attacker may attempt a...

Check Point Secure Platform Detection

The remote host seems to be a Check Point Secure Platform, and it allows connections to its web console management. Letting attackers know that you are using this software will help them focus their attack or make them change their strategy. In addition to this, an attacker may attempt to launch ...