jetlib.sec » Tags » appliance

Feeds

133337 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

20 items tagged "appliance"

Related tags: security [+], command execution [+], network mail [+], mail security [+], x script [+], webtitan [+], service [+], script [+], multiple [+], meta info [+], malicious script [+], input validation vulnerabilities [+], fortianalyzer [+], cross site scripting [+], cross [+], bus [+], blowfish encryption [+], authentication keys [+], vulnerability [+], unspecified [+], proventia [+], injection [+], web appliance [+], web [+], virtual [+], swrx [+], sophos [+], security context [+], security appliance [+], san [+], remote buffer overflow vulnerability [+], remote buffer overflow [+], remote [+], packard [+], law enforcement [+], law [+], enforcement [+], cisco adaptive [+], buffer overflow vulnerability [+], adaptive security [+]

• May 18, 2012
• 0:00

  Vuln: Hewlett-Packard Virtual SAN Appliance 'hydra.exe' Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Hewlett-Packard Virtual SAN Appliance 'hydra.exe' Remote Buffer Overflow Vulnerability

  Tags:  appliance virtual packard san buffer-overflow-vulnerability remote-buffer-overflow-vulnerability remote-buffer-overflow  

• January 20, 2012
• 12:53

  Sophos Web Appliance 3.6.2 Upgrade causing proxy availability issues

   » ‎ Sophos product advisories
  Sophos Web Appliance 3.6.2 Upgrade causing proxy availability issues

  Tags:  appliance web sophos web-appliance  

• January 16, 2012
• 10:55

  WebTitan Appliance 3.50.x Script Insertion

   » ‎ Packet Storm Security Exploits
  WebTitan Appliance version 3.50.x suffers from multiple input validation vulnerabilities that allow for malicious script insertion and cross site scripting attacks.

  Tags:  appliance webtitan script input-validation-vulnerabilities malicious-script x-script  

• 10:55

  WebTitan Appliance 3.50.x Script Insertion

   » ‎ Packet Storm Security Recent Files
  WebTitan Appliance version 3.50.x suffers from multiple input validation vulnerabilities that allow for malicious script insertion and cross site scripting attacks.

  Tags:  appliance webtitan script input-validation-vulnerabilities malicious-script x-script  

• 10:55

  WebTitan Appliance 3.50.x Script Insertion

   » ‎ Packet Storm Security Misc. Files
  WebTitan Appliance version 3.50.x suffers from multiple input validation vulnerabilities that allow for malicious script insertion and cross site scripting attacks.

  Tags:  appliance webtitan script input-validation-vulnerabilities malicious-script x-script  

• January 11, 2012
• 0:00

  Vuln: op5 Appliance Multiple Remote Command Execution Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  op5 Appliance Multiple Remote Command Execution Vulnerabilities

  Tags:  multiple appliance remote command-execution  

• January 09, 2012
• 0:00

  Vuln: op5 Appliance Multiple Unspecified Remote Command Execution Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  op5 Appliance Multiple Unspecified Remote Command Execution Vulnerabilities

  Tags:  multiple appliance unspecified command-execution  

• December 30, 2011
• 0:00

  Vuln: op5 Appliance Multiple Unspecified Remote Command Execution Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  op5 Appliance Multiple Unspecified Remote Command Execution Vulnerabilities

  Tags:  multiple appliance unspecified command-execution  

• September 13, 2011
• 8:13

  FortiAnalyzer Appliance Cross Site Scripting

   » ‎ Packet Storm Security Advisories
  FortiAnalyzer Appliance suffers from cross site scripting vulnerabilities.

  Tags:  cross fortianalyzer appliance cross-site-scripting  

• 8:13

  FortiAnalyzer Appliance Cross Site Scripting

   » ‎ Packet Storm Security Recent Files
  FortiAnalyzer Appliance suffers from cross site scripting vulnerabilities.

  Tags:  cross fortianalyzer appliance cross-site-scripting  

• 8:13

  FortiAnalyzer Appliance Cross Site Scripting

   » ‎ Packet Storm Security Misc. Files
  FortiAnalyzer Appliance suffers from cross site scripting vulnerabilities.

  Tags:  cross fortianalyzer appliance cross-site-scripting  

• March 14, 2011
• 12:42

  Accellion File Transfer Appliance MPIPE2 Command Execution

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a chain of vulnerabilities in the Accellion File Transfer appliance. This appliance exposes a UDP service on port 8812 that acts as a gateway to the internal communication bus. This service uses Blowfish encryption for authentication, but the appliance ships with two easy to guess default authentication keys. This Metasploit module abuses the known default encryption keys to inject a message into the communication bus. In order to execute arbitrary commands on the remote appliance, a message is injected into the bus destined for the 'matchrep' service. This service exposes a function named 'insert_plugin_meta_info' which is vulnerable to an input validation flaw in a call to system(). This provides access to the 'soggycat' user account, which has sudo privileges to run the primary admin tool as root. These two flaws are fixed in update version FTA_8_0_562.

  Tags:  appliance service bus blowfish-encryption authentication-keys meta-info  

• 12:42

  Accellion File Transfer Appliance MPIPE2 Command Execution

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a chain of vulnerabilities in the Accellion File Transfer appliance. This appliance exposes a UDP service on port 8812 that acts as a gateway to the internal communication bus. This service uses Blowfish encryption for authentication, but the appliance ships with two easy to guess default authentication keys. This Metasploit module abuses the known default encryption keys to inject a message into the communication bus. In order to execute arbitrary commands on the remote appliance, a message is injected into the bus destined for the 'matchrep' service. This service exposes a function named 'insert_plugin_meta_info' which is vulnerable to an input validation flaw in a call to system(). This provides access to the 'soggycat' user account, which has sudo privileges to run the primary admin tool as root. These two flaws are fixed in update version FTA_8_0_562.

  Tags:  appliance service bus blowfish-encryption authentication-keys meta-info  

• 12:42

  Accellion File Transfer Appliance MPIPE2 Command Execution

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a chain of vulnerabilities in the Accellion File Transfer appliance. This appliance exposes a UDP service on port 8812 that acts as a gateway to the internal communication bus. This service uses Blowfish encryption for authentication, but the appliance ships with two easy to guess default authentication keys. This Metasploit module abuses the known default encryption keys to inject a message into the communication bus. In order to execute arbitrary commands on the remote appliance, a message is injected into the bus destined for the 'matchrep' service. This service exposes a function named 'insert_plugin_meta_info' which is vulnerable to an input validation flaw in a call to system(). This provides access to the 'soggycat' user account, which has sudo privileges to run the primary admin tool as root. These two flaws are fixed in update version FTA_8_0_562.

  Tags:  appliance service bus blowfish-encryption authentication-keys meta-info  

• September 13, 2010
• 19:01

  MVSA-10-008.txt

   » ‎ Packet Storm Security Recent Files
  Web-based Local Management Interface (LMI) of IBM Proventia Network Mail Security System appliance (firmware 1.6) is vulnerable to an Insecure Direct Object Reference vulnerability. When exploited by an authenticated attacker, such vulnerability could lead to compromising the security of the appliance, allowing OS command execution, local file inclusion resulting in exposure of appliance configuration files, source code, etc.

  Tags:  appliance vulnerability security network-mail mail-security command-execution  

• 19:01

  MVSA-10-009.txt

   » ‎ Packet Storm Security Recent Files
  Web-based Local Management Interface (LMI) of IBM Proventia Network Mail Security System appliance (firmware 1.6) is vulnerable to a CRLF Injection vulnerability. When exploited by an authenticated attacker, such vulnerability could lead to compromising the security of the appliance, allowing injection of custom HTTP cookies, forcing external redirects, potential HTTP Response Splitting attacks, etc.

  Tags:  appliance injection security network-mail mail-security proventia  

• 19:01

  MVSA-10-008.txt

   » ‎ Packet Storm Security Exploits
  Web-based Local Management Interface (LMI) of IBM Proventia Network Mail Security System appliance (firmware 1.6) is vulnerable to an Insecure Direct Object Reference vulnerability. When exploited by an authenticated attacker, such vulnerability could lead to compromising the security of the appliance, allowing OS command execution, local file inclusion resulting in exposure of appliance configuration files, source code, etc.

  Tags:  appliance vulnerability security network-mail mail-security command-execution  

• 19:01

  MVSA-10-009.txt

   » ‎ Packet Storm Security Exploits
  Web-based Local Management Interface (LMI) of IBM Proventia Network Mail Security System appliance (firmware 1.6) is vulnerable to a CRLF Injection vulnerability. When exploited by an authenticated attacker, such vulnerability could lead to compromising the security of the appliance, allowing injection of custom HTTP cookies, forcing external redirects, potential HTTP Response Splitting attacks, etc.

  Tags:  appliance injection security network-mail mail-security proventia  

• June 25, 2010
• 19:04

  SWRX-2010-001.txt

   » ‎ Packet Storm Security Exploits
  Cisco Adaptive Security Appliance (ASA) is vulnerable to HTTP response splitting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim?s web browser within the security context of the Adaptive Security Appliance site. Versions 8.1(1) and earlier are affected.

  Tags:  appliance swrx security cisco-adaptive adaptive-security security-appliance security-context  

• March 24, 2010
• 0:00

  Law Enforcement Appliance Subverts SSL

   » ‎ Packet Storm Security Headlines
  Law Enforcement Appliance Subverts SSL

  Tags:  appliance law enforcement law-enforcement