Amnesty International Site Found Hosting Malware, IE Zero Day

Researchers at security firm Websense have found that Amnesty International’s Hong Kong site, amnesty.org.hk, is serving up a cocktail of malware that includes last week’s Internet Explorer 0-day. Visitors to the human rights organization’s site operating versions 6 and 7 of IE are being targeted...

Websense Enterprise 6.3.3 Via: Bypass Still Exists

discovered by mrhinkydink PRODUCT: Websense Enterprise EXPOSURE: Trivial Web Policy Bypass III LINK: http://mrhinkydink.blogspot.com/2010/08/websenseisa-via-bypass-redux.html SYNOPSIS ======== On May 29, 2010 I demonstrated that by adding a "Via:" header to an HTTP request it is possible for a us...

New Trojan Disguised as Windows IME

There’s a new attack technique in use right now that enables attackers to inject Trojan code onto victims’ machines by disguising it as a Windows input method editor IME. The technique is a twist on the classic attack vector of making malicious code look like something benign. In this case, the...

Online Ad Site Hacked, Rigged to Serve Exploits

A high-profile online advertising Web site has been hacked and rigged to serve multiple exploits to Microsoft Windows users surfing the net with unpatched third party desktop software. According to a warning issued by Websense Security Labs, the malicious code was found on media-servers.net, whic...

Websense Email Security < 7.1 Hotfix 4

Websense Email Security is installed on the remote host. The installed version is affected by multiple issues : - Websense Email Security Web Administrator service is affected by a denial of service issue. - Websense Email Security Web Administrator is affected by multiple cross-site scripting...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allow remote attackers to inject arbitrary web script or HTML via the 1 FileName, 2 IsolatedMessageID, 3 ServerName, 4 Dictionar...

CVE-2009-3749

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...

CVE-2009-3748

Multiple cross-site scripting XSS vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allow remote attackers to inject arbitrary web script or HTML via the 1 FileName, 2 IsolatedMessageID, 3 ServerName, 4 Dictionar...

CVE-2009-3748

Multiple cross-site scripting XSS vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allow remote attackers to inject arbitrary web script or HTML via the 1 FileName, 2 IsolatedMessageID, 3 ServerName, 4 Dictionar...

CVE-2009-3749

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...

CVE-2009-3748

Websense Web Administrator in Websense Personal Email Manager 7.1.x before Hotfix 4 and Websense Email Security 7.1 before Hotfix 4 contains multiple cross-site scripting (XSS) flaws. The vulnerabilities affect the Web Administrator component and allow remote attackers to inject arbitrary script/...

CVE-2009-3749

The CVE-2009-3749 vulnerability affects Websense Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Websense Email Security 7.1 before Hotfix 4. An attacker can remotely trigger a denial-of-service (crash) by sending an HTTP GET to TCP port 8181 an...

Websense Email Security multiple security vulnerabilities

Crossite scripting and DoS in Web administration interface...

NSOADV-2009-003: Websense Email Security Cross Site Scripting

Security Advisory NSOADV-2009-003 Title: Websense Email Security Cross Site Scripting Severity: Low Advisory ID: NSOADV-2009-003 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de URL:...

NSOADV-2009-002: Websense Email Security Web Administrator DoS

Security Advisory NSOADV-2009-002 Title: Websense Email Security Web Administrator DoS Severity: Low Advisory ID: NSOADV-2009-002 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de URL:...

CVE-2009-3748: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allow remote attackers to inject arbitrary web script or HTML via the 1 FileName, 2 IsolatedMessageID, 3 ServerName, 4 Dictionar...

CVE-2009-3749: Undefined Security Weakness

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...

Websense Email Security Web Administrator DoS

Security Advisory NSOADV-2009-002 Title: Websense Email Security Web Administrator DoS Severity: Low Advisory ID: NSOADV-2009-002 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de URL:...

Websense Email Security Web Cross Site Scripting

Security Advisory NSOADV-2009-003 Title: Websense Email Security Cross Site Scripting Severity: Low Advisory ID: NSOADV-2009-003 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de URL:...

Websense Email Security和Email Manager 'STEMWADM.EXE'远程拒绝服务漏洞

Bugraq ID: 36740 Websense Email Security software是一款内容安全智能保护解决方案，可对Email进行安全保护。Websense Email Security Web管理是一个WEB前端，用于访问消息管理，目录管理和查看日志。 Web管理全段STEMWADM.EXE默认监听8181端口，如果攻击者发送HTTP请求给8181端口并不等待服务器的应答，WEB服务将崩溃。 发送"GET /index.asp请求并关闭套接字，服务程序将不会应答任何请求并崩溃。 Websense Email Security 7.1 Websense Email...