PT-2014-4003

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 7.2 Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via the UserName parameter. Recommendations For Advantech WebAccess version 7.2, update to a newer version that...

PT-2014-4001

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 7.2 Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via the AccessCode parameter. Recommendations For Advantech WebAccess version 7.2, update to a version that fixe...

PT-2014-4002

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 7.2 Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via the AccessCode2 parameter. Recommendations For Advantech WebAccess version 7.2, update to a version that fix...

PT-2014-4000

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 7.2 Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via the NodeName2 parameter. Recommendations For version 7.2, consider restricting access to the vulnerable...

CVE-2014-0988: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter...

CVE-2014-0992: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the password parameter...

CVE-2014-0987: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the NodeName2 parameter...

CVE-2014-0986: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter...

CVE-2014-0985: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter...

CVE-2014-0990: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the UserName parameter...

CVE-2014-0991: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the projectname parameter...

Advantech WebAccess Multiple Stack Based Buffer Overflow Vulnerabilities

Advantech WebAccess is prone to multiple stack based buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Advantech WebAccess Vulnerabilities

Advisory ID Internal CORE-2014-0005 1. Advisory Information Title: Advantech WebAccess Vulnerabilities Advisory ID: CORE-2014-0005 Advisory URL:http://www.coresecurity.com/advisories/advantech-webaccess-vulnerabilities Date published: 2014-09-02 Date of last update: 2014-09-01 Vendors contacted:...

Advantech WebAccess Stack-based Buffer Overflow

OVERVIEW Ricardo Narvaja from Core Security Consulting Services discovered and disclosed information regarding a buffer overflow vulnerabilityCore Security Advantech WebAccess Stack-based Buffer Overflow, http://www.coresecurity.com/advisories/advantech-webaccess-stack-based-buffer-overflow web...

CVE-2014-0103

WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files...

CVE-2014-0103

WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files...

CVE-2014-0103

CVE-2014-0103 affects Zarafa WebAccess (and WebApp) prior to version 7.1.10 / 1.6, where credentials are stored in cleartext in PHP session files. This enables local Apache users to read sensitive information. OpenVAS advisories link CVE-2014-0103 to multiple Zarafa updates; Fedora/MGASA advisori...

PT-2014-3478

Name of the Vulnerable Software and Affected Versions Zarafa WebAccess versions prior to 7.1.10 Zarafa WebApp versions prior to 1.6 Description The issue allows local Apache users to obtain sensitive information by reading the PHP session files, as credentials are stored in cleartext...

CVE-2014-0103: Undefined Security Weakness

WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files...

[SECURITY] Fedora 20 Update: zarafa-7.1.10-2.fc20

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...