< Back to JetLib.com

jetlib.sec » Tags » server-code

« Expand/Collapse

8 items tagged "server code"

Related tags: ubuntu [+], source [+], null byte [+], netsaro [+], messenger server [+], code [+], ciphersuite [+], bug workaround [+], attacker [+], code execution [+], thinkmanagement [+], safer use [+], remote [+], identity [+], exploit [+], engines [+], core server [+], avaya [+]

March 19, 2012
15:00
[remote exploits] - LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server Code Execution
» ‎ 1337day (was: Inj3ct0r, 1337db)

[remote exploits] - LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server Code Execution
Tags: exploit remote thinkmanagement code-execution server-code core-server

January 11, 2012
15:49
Avaya Identity Engines Ignition Server Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Nortel/Avaya Identity Engines Ignition Server.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: avaya identity engines code-execution safer-use server-code

August 25, 2011
15:48
NetSaro Enterprise Messenger Server Code Disclosure
» ‎ Packet Storm Security Advisories

A vulnerability exists in the NetSaro Enterprise Messenger Server Administration Console allowing a remote attacker to obtain unauthenticated access to the applications source code. Attackers may make HTTP GET requests and append a Null Byte to allow download of the source code for the applications web pages. An attacker does not need to authenticate to obtain access to source code for pages that usually require authentication prior to viewing.
Tags: netsaro code source null-byte messenger-server server-code

15:48
NetSaro Enterprise Messenger Server Code Disclosure
» ‎ Packet Storm Security Recent Files

A vulnerability exists in the NetSaro Enterprise Messenger Server Administration Console allowing a remote attacker to obtain unauthenticated access to the applications source code. Attackers may make HTTP GET requests and append a Null Byte to allow download of the source code for the applications web pages. An attacker does not need to authenticate to obtain access to source code for pages that usually require authentication prior to viewing.
Tags: netsaro code source null-byte messenger-server server-code

15:48
NetSaro Enterprise Messenger Server Code Disclosure
» ‎ Packet Storm Security Misc. Files

A vulnerability exists in the NetSaro Enterprise Messenger Server Administration Console allowing a remote attacker to obtain unauthenticated access to the applications source code. Attackers may make HTTP GET requests and append a Null Byte to allow download of the source code for the applications web pages. An attacker does not need to authenticate to obtain access to source code for pages that usually require authentication prior to viewing.
Tags: netsaro code source null-byte messenger-server server-code

December 08, 2010
11:24
Ubuntu Security Notice USN-1029-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1029-1 - It was discovered that an old bug workaround in the SSL/TLS server code allowed an attacker to modify the stored session cache ciphersuite. This could possibly allow an attacker to downgrade the ciphersuite to a weaker one on subsequent connections. It was discovered that an old bug workaround in the SSL/TLS server code allowed allowed an attacker to modify the stored session cache ciphersuite. An attacker could possibly take advantage of this to force the use of a disabled cipher. This vulnerability only affects the versions of OpenSSL in Ubuntu 6.06 LTS, Ubuntu 8.04 LTS, and Ubuntu 9.10.
Tags: ciphersuite attacker ubuntu bug-workaround server-code

11:24
Ubuntu Security Notice USN-1029-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1029-1 - It was discovered that an old bug workaround in the SSL/TLS server code allowed an attacker to modify the stored session cache ciphersuite. This could possibly allow an attacker to downgrade the ciphersuite to a weaker one on subsequent connections. It was discovered that an old bug workaround in the SSL/TLS server code allowed allowed an attacker to modify the stored session cache ciphersuite. An attacker could possibly take advantage of this to force the use of a disabled cipher. This vulnerability only affects the versions of OpenSSL in Ubuntu 6.06 LTS, Ubuntu 8.04 LTS, and Ubuntu 9.10.
Tags: ciphersuite attacker ubuntu bug-workaround server-code

11:24
Ubuntu Security Notice USN-1029-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1029-1 - It was discovered that an old bug workaround in the SSL/TLS server code allowed an attacker to modify the stored session cache ciphersuite. This could possibly allow an attacker to downgrade the ciphersuite to a weaker one on subsequent connections. It was discovered that an old bug workaround in the SSL/TLS server code allowed allowed an attacker to modify the stored session cache ciphersuite. An attacker could possibly take advantage of this to force the use of a disabled cipher. This vulnerability only affects the versions of OpenSSL in Ubuntu 6.06 LTS, Ubuntu 8.04 LTS, and Ubuntu 9.10.
Tags: ciphersuite attacker ubuntu bug-workaround server-code