Solaris 9 (sparc) : 125950-20

Oracle Java Web Console 3.1. Date this patch was last updated by Sun : May/14/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 125953-20 (deprecated)

Oracle Java Web Console 3.1x86. Date this patch was last updated by Sun : May/14/10 This plugin has been deprecated and either replaced with individual 125953 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 9 (x86) : 125951-20

Oracle Java Web Console 3.1x86. Date this patch was last updated by Sun : May/14/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Code injection

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5437

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5437

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

CVE-2007-5437

The CVE-2007-5437 entry affects CA eTrust ITM (Threat Manager) 8.1, where the web console allows remote attackers to redirect users to arbitrary web sites by supplying a crafted HTTP URL targeting port 6689. This describes a client redirection vulnerability in the web interface, with no explicit ...

CVE-2007-5437: Improper Link Resolution Before File Access

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...

Sun Java Web Console LibWebconsole_Services.SO Remote Format String

The remote host is running SUN Java Web Console. The remote version of this service does not properly sanitize calls to the syslog function. By sending a specially crafted request it is possible to exploit this format string error. An attacker can exploit it to execute code with the privileges of...

Format string

Format string vulnerability in libwebconsoleservices.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service application crash, obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt,...

CVE-2007-1681

Format string vulnerability in libwebconsoleservices.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service application crash, obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt,...

CVE-2007-1681

CVE-2007-1681 relates to a format-string vulnerability in Sun Java Web Console (Lockhart) specifically in libwebconsole_services.so, affecting Sun Java Web Console versions 2.2.2–2.2.5. The issue allows remote attackers to crash the application, potentially disclose sensitive information, and pos...

Solaris 10 (x86) : 121212-02 (deprecated)

SunOS 5.10x86: Sun Java Web Console Lockhart Patch. Date this patch was last updated by Sun : Apr/16/07 This plugin has been deprecated and either replaced with individual 121212 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2007-1681: Undefined Security Weakness

Format string vulnerability in libwebconsoleservices.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service application crash, obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt,...

Solaris 10 (sparc) : 121211-02 (deprecated)

SunOS 5.10: Sun Java Web Console Lockhart Patch. Date this patch was last updated by Sun : Apr/16/07 This plugin has been deprecated and either replaced with individual 121211 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

n.runs-SA-2007.007 - Sun Solaris 10 - Format string vulnerability

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.007 18-Apr-2007 Vendor: Sun Microsystems, Inc., http://www.sun.com Affected Products: Solaris 10, Java Web Console 2.2.2 - 2.2.5 Vulnerability: Format string vulnerability Risk: HIGH CVE ID: CVE-2007-1681 Sun Alert ID: 102854 SU...

Sun Java web console format string vulnerability

Format string vulnerability in libwebconsoleservices.so on syslog call...

JBoss insecure defaults

Web console and management instruments are available without authentication...

ProCheckUp Security Advisory 2006.14

PR06-14: IP Phones based on Centrality Communications/Aredfox PA168 chipset weak session management vulnerability This advisory has been published following consultation with UK NISCC http://www.niscc.gov.uk/ Date Found: 3rd November 2006 Date Public: 22nd January 2007 Vulnerable: Phones confirme...

Information disclosure

The admin web console implemented by the Centrality Communications aka Aredfox PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote attackers to connect to existing superuser session...