Cross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE) 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| neoteris | instant_virtual_extranet | 3.01 |
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 3.9 | 3.6 |
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-476,CWE-476,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| stonesoft | stonegate | 1.6.3 |
| cisco | application_and_content_networking_software | * |
| cisco | pix_firewall_software | 6.1 |
| cisco | pix_firewall_software | 6.0(3) |
| vmware | gsx_server | 2.0 |
| cisco | gss_4480_global_site_selector | * |
| cisco | secure_content_accelerator | 10000 |
| avaya | sg203 | 4.31.29 |
| avaya | intuity_audix | 5.1.46 |
| lite | speed_technologies_litespeed_web_server | 1.0.3 |
| stonesoft | stonegate | 2.0.6 |
| vmware | gsx_server | 2.5.1_build_5336 |
| cisco | pix_firewall_software | 6.0(1) |
| cisco | pix_firewall_software | 6.3 |
| cisco | ios | 12.2za |
| cisco | webns | 7.1_0.2.06 |
| stonesoft | stonegate_vpn_client | 1.7.2 |
| cisco | webns | 7.10 |
| avaya | converged_communications_server | 2.0 |
| tarantella | tarantella_enterprise | 3.40 |
| cisco | pix_firewall_software | 6.2 |
| avaya | s8300 | r2.0.0 |
| stonesoft | servercluster | 2.5 |
| openssl | openssl | 0.9.6g |
| bluecoat | cacheos_ca_sa | 4.1.12 |
| cisco | access_registrar | * |
| stonesoft | stonegate | 1.7.1 |
| sgi | propack | 2.3 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc2 |
| securecomputing | sidewinder | 5.2.1 |
| cisco | firewall_services_module | * |
| sgi | propack | 3.0 |
| avaya | vsu | 7500_r2.0.1 |
| neoteris | instant_virtual_extranet | 3.1 |
| cisco | pix_firewall_software | 6.3(2) |
| securecomputing | sidewinder | 5.2.1.02 |
| stonesoft | stonegate_vpn_client | 2.0 |
| openbsd | openbsd | 3.4 |
| cisco | pix_firewall_software | 6.3(1) |
| hp | apache-based_web_server | 2.0.43.04 |
| stonesoft | stonegate_vpn_client | 2.0.8 |
| vmware | gsx_server | 2.0.1_build_2129 |
| openssl | openssl | 0.9.6j |
| novell | edirectory | 8.7.1 |
| openssl | openssl | 0.9.7a |
| novell | edirectory | 8.5.12a |
| avaya | intuity_audix | * |
| checkpoint | firewall-1 | * |
| cisco | pix_firewall_software | 6.2(1) |
| freebsd | freebsd | 5.2 |
| openssl | openssl | 0.9.7b |
| openssl | openssl | 0.9.6f |
| cisco | webns | 7.1_0.1.02 |
| cisco | pix_firewall_software | 6.2(2) |
| cisco | webns | 7.10_.0.06s |
| securecomputing | sidewinder | 5.2.0.03 |
| cisco | firewall_services_module | 1.1_(3.005) |
| cisco | okena_stormwatch | 3.2 |
| sun | crypto_accelerator_4000 | 1.0 |
| novell | imanager | 2.0 |
| cisco | pix_firewall_software | 6.2(3) |
| cisco | ios | 12.1(11)e |
| checkpoint | firewall-1 | 2.0 |
| stonesoft | stonegate | 2.2.1 |
| redhat | linux | 8.0 |
| hp | wbem | a.02.00.01 |
| vmware | gsx_server | 3.0_build_7592 |
| openssl | openssl | 0.9.6h |
| stonesoft | stonegate_vpn_client | 2.0.7 |
| freebsd | freebsd | 4.9 |
| novell | edirectory | 8.5 |
| cisco | content_services_switch_11500 | * |
| lite | speed_technologies_litespeed_web_server | 1.0.1 |
| redhat | enterprise_linux_desktop | 3.0 |
| cisco | ios | 12.2(14)sy1 |
| checkpoint | firewall-1 | next_generation_fp2 |
| stonesoft | stonebeat_webcluster | 2.0 |
| cisco | firewall_services_module | 2.1_(0.208) |
| stonesoft | stonebeat_fullcluster | 2.0 |
| lite | speed_technologies_litespeed_web_server | 1.1.1 |
| avaya | s8700 | r2.0.0 |
| redhat | openssl | 0.9.6b-3 |
| vmware | gsx_server | 2.5.1 |
| cisco | webns | 6.10_b4 |
| bluecoat | cacheos_ca_sa | 4.1.10 |
| cisco | css11000_content_services_switch | * |
| 4d | webstar | 5.2.2 |
| tarantella | tarantella_enterprise | 3.30 |
| cisco | pix_firewall_software | 6.3(3.109) |
| dell | bsafe_ssl-j | 3.0.1 |
| avaya | s8500 | r2.0.0 |
| novell | edirectory | 8.0 |
| neoteris | instant_virtual_extranet | 3.2 |
| checkpoint | provider-1 | 4.1 |
| symantec | clientless_vpn_gateway_4400 | 5.0 |
| hp | hp-ux | 11.00 |
| lite | speed_technologies_litespeed_web_server | 1.0.2 |
| avaya | sg208 | * |
| neoteris | instant_virtual_extranet | 3.3.1 |
| cisco | gss_4490_global_site_selector | * |
| redhat | openssl | 0.9.7a-2 |
| cisco | firewall_services_module | 1.1.3 |
| dell | bsafe_ssl-j | 3.0 |
| lite | speed_technologies_litespeed_web_server | 1.3 |
| avaya | sg5 | 4.2 |
| stonesoft | stonegate_vpn_client | 1.7 |
| cisco | ios | 12.1(13)e9 |
| cisco | pix_firewall_software | 6.0(2) |
| dell | bsafe_ssl-j | 3.1 |
| apple | mac_os_x | 10.3.3 |
| 4d | webstar | 5.2.3 |
| novell | edirectory | 8.6.2 |
| freebsd | freebsd | 5.2.1 |
| stonesoft | stonebeat_fullcluster | 3.0 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc1 |
| openbsd | openbsd | 3.3 |
| freebsd | freebsd | 5.1 |
| avaya | sg200 | 4.31.29 |
| openssl | openssl | 0.9.6k |
| cisco | pix_firewall_software | 6.0(4) |
| 4d | webstar | 5.2.4 |
| avaya | vsu | 500 |
| 4d | webstar | 4.0 |
| stonesoft | stonegate_vpn_client | 2.0.9 |
| stonesoft | stonebeat_fullcluster | 2.5 |
| stonesoft | stonegate | 2.2 |
| stonesoft | stonegate | 2.0.5 |
| cisco | ciscoworks_common_management_foundation | 2.1 |
| avaya | vsu | 5000_r2.0.1 |
| avaya | vsu | 10000_r2.0.1 |
| tarantella | tarantella_enterprise | 3.20 |
| bluecoat | proxysg | * |
| stonesoft | stonegate | 2.0.4 |
| checkpoint | vpn-1 | next_generation_fp0 |
| cisco | mds_9000 | * |
| cisco | pix_firewall_software | 6.1(3) |
| cisco | pix_firewall_software | 6.1(1) |
| lite | speed_technologies_litespeed_web_server | 1.3.1 |
| cisco | pix_firewall_software | 6.3(3.102) |
| lite | speed_technologies_litespeed_web_server | 1.3_rc3 |
| stonesoft | stonebeat_securitycluster | 2.0 |
| cisco | ciscoworks_common_services | 2.2 |
| avaya | vsu | 5x |
| cisco | webns | 6.10 |
| freebsd | freebsd | 4.8 |
| hp | wbem | a.01.05.08 |
| openssl | openssl | 0.9.7c |
| hp | apache-based_web_server | 2.0.43.00 |
| lite | speed_technologies_litespeed_web_server | 1.2_rc1 |
| redhat | linux | 7.2 |
| cisco | ios | 12.1(11b)e12 |
| avaya | s8700 | r2.0.1 |
| securecomputing | sidewinder | 5.2 |
| sgi | propack | 2.4 |
| cisco | pix_firewall_software | 6.1(5) |
| cisco | ios | 12.1(11b)e14 |
| openssl | openssl | 0.9.6c |
| hp | aaa_server | * |
| avaya | vsu | 5 |
| apple | mac_os_x_server | 10.3.3 |
| openssl | openssl | 0.9.6e |
| cisco | firewall_services_module | 1.1.2 |
| stonesoft | stonebeat_webcluster | 2.5 |
| 4d | webstar | 5.2.1 |
| stonesoft | stonegate | 2.0.7 |
| hp | hp-ux | 8.05 |
| avaya | s8300 | r2.0.1 |
| avaya | sg5 | 4.3 |
| stonesoft | stonebeat_fullcluster | 1_2.0 |
| cisco | ios | 12.2sy |
| lite | speed_technologies_litespeed_web_server | 1.2.2 |
| avaya | s8500 | r2.0.1 |
| avaya | intuity_audix | s3210 |
| cisco | css_secure_content_accelerator | 1.0 |
| avaya | sg5 | 4.4 |
| checkpoint | vpn-1 | next_generation_fp1 |
| securecomputing | sidewinder | 5.2.0.02 |
| openssl | openssl | 0.9.7 |
| stonesoft | stonegate | 2.2.4 |
| stonesoft | stonegate | 2.1 |
| cisco | pix_firewall_software | 6.0 |
| neoteris | instant_virtual_extranet | 3.0 |
| novell | imanager | 1.5 |
| stonesoft | stonegate | 1.5.18 |
| stonesoft | servercluster | 2.5.2 |
| cisco | pix_firewall_software | 6.2(3.100) |
| checkpoint | firewall-1 | next_generation_fp0 |
| stonesoft | stonebeat_securitycluster | 2.5 |
| cisco | pix_firewall_software | 6.0(4.101) |
| novell | edirectory | 8.5.27 |
| cisco | css_secure_content_accelerator | 2.0 |
| stonesoft | stonegate | 1.7 |
| cisco | ios | 12.1(19)e1 |
| sco | openserver | 5.0.6 |
| 4d | webstar | 5.3.1 |
| novell | edirectory | 8.7 |
| redhat | enterprise_linux | 3.0 |
| avaya | sg208 | 4.4 |
| checkpoint | vpn-1 | vsx_ng_with_application_intelligence |
| cisco | webns | 7.2_0.0.03 |
| stonesoft | stonegate | 1.7.2 |
| 4d | webstar | 5.2 |
| lite | speed_technologies_litespeed_web_server | 1.2.1 |
| sco | openserver | 5.0.7 |
| lite | speed_technologies_litespeed_web_server | 1.1 |
| avaya | sg203 | 4.4 |
| openssl | openssl | 0.9.6i |
| avaya | intuity_audix | s3400 |
| cisco | pix_firewall_software | 6.1(4) |
| avaya | vsu | 100_r2.0.1 |
| stonesoft | stonebeat_fullcluster | 1_3.0 |
| redhat | linux | 7.3 |
| securecomputing | sidewinder | 5.2.0.04 |
| hp | wbem | a.02.00.00 |
| cisco | pix_firewall_software | 6.1(2) |
| openssl | openssl | 0.9.6d |
| hp | hp-ux | 11.23 |
| checkpoint | firewall-1 | next_generation_fp1 |
| stonesoft | stonegate | 2.0.1 |
| 4d | webstar | 5.3 |
| cisco | call_manager | * |
| stonesoft | stonegate | 2.0.8 |
| cisco | ios | 12.1(11b)e |
| stonesoft | stonegate | 1.5.17 |
| avaya | vsu | 2000_r2.0.1 |
| cisco | threat_response | * |
| stonesoft | stonegate | 2.0.9 |
| securecomputing | sidewinder | 5.2.0.01 |
| cisco | pix_firewall | 6.2.2_.111 |
| neoteris | instant_virtual_extranet | 3.3 |
| redhat | openssl | 0.9.6-15 |
| cisco | ios | 12.2(14)sy |
| hp | hp-ux | 11.11 |
| lite | speed_technologies_litespeed_web_server | 1.2_rc2 |
| avaya | sg200 | 4.4 |
| checkpoint | vpn-1 | next_generation_fp2 |
| stonesoft | stonegate | 1.6.2 |
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| stonesoft | stonegate | 1.6.3 |
| cisco | application_and_content_networking_software | * |
| cisco | pix_firewall_software | 6.1 |
| cisco | pix_firewall_software | 6.0(3) |
| vmware | gsx_server | 2.0 |
| cisco | gss_4480_global_site_selector | * |
| cisco | secure_content_accelerator | 10000 |
| avaya | sg203 | 4.31.29 |
| avaya | intuity_audix | 5.1.46 |
| lite | speed_technologies_litespeed_web_server | 1.0.3 |
| stonesoft | stonegate | 2.0.6 |
| vmware | gsx_server | 2.5.1_build_5336 |
| cisco | pix_firewall_software | 6.0(1) |
| cisco | pix_firewall_software | 6.3 |
| cisco | ios | 12.2za |
| cisco | webns | 7.1_0.2.06 |
| stonesoft | stonegate_vpn_client | 1.7.2 |
| cisco | webns | 7.10 |
| avaya | converged_communications_server | 2.0 |
| tarantella | tarantella_enterprise | 3.40 |
| cisco | pix_firewall_software | 6.2 |
| avaya | s8300 | r2.0.0 |
| stonesoft | servercluster | 2.5 |
| openssl | openssl | 0.9.6g |
| bluecoat | cacheos_ca_sa | 4.1.12 |
| cisco | access_registrar | * |
| stonesoft | stonegate | 1.7.1 |
| sgi | propack | 2.3 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc2 |
| securecomputing | sidewinder | 5.2.1 |
| cisco | firewall_services_module | * |
| sgi | propack | 3.0 |
| avaya | vsu | 7500_r2.0.1 |
| neoteris | instant_virtual_extranet | 3.1 |
| cisco | pix_firewall_software | 6.3(2) |
| securecomputing | sidewinder | 5.2.1.02 |
| stonesoft | stonegate_vpn_client | 2.0 |
| openbsd | openbsd | 3.4 |
| cisco | pix_firewall_software | 6.3(1) |
| hp | apache-based_web_server | 2.0.43.04 |
| stonesoft | stonegate_vpn_client | 2.0.8 |
| vmware | gsx_server | 2.0.1_build_2129 |
| openssl | openssl | 0.9.6j |
| novell | edirectory | 8.7.1 |
| openssl | openssl | 0.9.7a |
| novell | edirectory | 8.5.12a |
| avaya | intuity_audix | * |
| checkpoint | firewall-1 | * |
| cisco | pix_firewall_software | 6.2(1) |
| freebsd | freebsd | 5.2 |
| openssl | openssl | 0.9.7b |
| openssl | openssl | 0.9.6f |
| cisco | webns | 7.1_0.1.02 |
| cisco | pix_firewall_software | 6.2(2) |
| cisco | webns | 7.10_.0.06s |
| securecomputing | sidewinder | 5.2.0.03 |
| cisco | firewall_services_module | 1.1_(3.005) |
| cisco | okena_stormwatch | 3.2 |
| sun | crypto_accelerator_4000 | 1.0 |
| novell | imanager | 2.0 |
| cisco | pix_firewall_software | 6.2(3) |
| cisco | ios | 12.1(11)e |
| checkpoint | firewall-1 | 2.0 |
| stonesoft | stonegate | 2.2.1 |
| redhat | linux | 8.0 |
| hp | wbem | a.02.00.01 |
| vmware | gsx_server | 3.0_build_7592 |
| openssl | openssl | 0.9.6h |
| stonesoft | stonegate_vpn_client | 2.0.7 |
| freebsd | freebsd | 4.9 |
| novell | edirectory | 8.5 |
| cisco | content_services_switch_11500 | * |
| lite | speed_technologies_litespeed_web_server | 1.0.1 |
| redhat | enterprise_linux_desktop | 3.0 |
| cisco | ios | 12.2(14)sy1 |
| checkpoint | firewall-1 | next_generation_fp2 |
| stonesoft | stonebeat_webcluster | 2.0 |
| cisco | firewall_services_module | 2.1_(0.208) |
| stonesoft | stonebeat_fullcluster | 2.0 |
| lite | speed_technologies_litespeed_web_server | 1.1.1 |
| avaya | s8700 | r2.0.0 |
| redhat | openssl | 0.9.6b-3 |
| vmware | gsx_server | 2.5.1 |
| cisco | webns | 6.10_b4 |
| bluecoat | cacheos_ca_sa | 4.1.10 |
| cisco | css11000_content_services_switch | * |
| 4d | webstar | 5.2.2 |
| tarantella | tarantella_enterprise | 3.30 |
| cisco | pix_firewall_software | 6.3(3.109) |
| dell | bsafe_ssl-j | 3.0.1 |
| avaya | s8500 | r2.0.0 |
| novell | edirectory | 8.0 |
| neoteris | instant_virtual_extranet | 3.2 |
| checkpoint | provider-1 | 4.1 |
| symantec | clientless_vpn_gateway_4400 | 5.0 |
| hp | hp-ux | 11.00 |
| lite | speed_technologies_litespeed_web_server | 1.0.2 |
| avaya | sg208 | * |
| neoteris | instant_virtual_extranet | 3.3.1 |
| cisco | gss_4490_global_site_selector | * |
| redhat | openssl | 0.9.7a-2 |
| cisco | firewall_services_module | 1.1.3 |
| dell | bsafe_ssl-j | 3.0 |
| lite | speed_technologies_litespeed_web_server | 1.3 |
| avaya | sg5 | 4.2 |
| stonesoft | stonegate_vpn_client | 1.7 |
| cisco | ios | 12.1(13)e9 |
| cisco | pix_firewall_software | 6.0(2) |
| dell | bsafe_ssl-j | 3.1 |
| apple | mac_os_x | 10.3.3 |
| 4d | webstar | 5.2.3 |
| novell | edirectory | 8.6.2 |
| freebsd | freebsd | 5.2.1 |
| stonesoft | stonebeat_fullcluster | 3.0 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc1 |
| openbsd | openbsd | 3.3 |
| freebsd | freebsd | 5.1 |
| avaya | sg200 | 4.31.29 |
| openssl | openssl | 0.9.6k |
| cisco | pix_firewall_software | 6.0(4) |
| 4d | webstar | 5.2.4 |
| avaya | vsu | 500 |
| 4d | webstar | 4.0 |
| stonesoft | stonegate_vpn_client | 2.0.9 |
| stonesoft | stonebeat_fullcluster | 2.5 |
| stonesoft | stonegate | 2.2 |
| stonesoft | stonegate | 2.0.5 |
| cisco | ciscoworks_common_management_foundation | 2.1 |
| avaya | vsu | 5000_r2.0.1 |
| avaya | vsu | 10000_r2.0.1 |
| tarantella | tarantella_enterprise | 3.20 |
| bluecoat | proxysg | * |
| stonesoft | stonegate | 2.0.4 |
| checkpoint | vpn-1 | next_generation_fp0 |
| cisco | mds_9000 | * |
| cisco | pix_firewall_software | 6.1(3) |
| cisco | pix_firewall_software | 6.1(1) |
| lite | speed_technologies_litespeed_web_server | 1.3.1 |
| cisco | pix_firewall_software | 6.3(3.102) |
| lite | speed_technologies_litespeed_web_server | 1.3_rc3 |
| stonesoft | stonebeat_securitycluster | 2.0 |
| cisco | ciscoworks_common_services | 2.2 |
| avaya | vsu | 5x |
| cisco | webns | 6.10 |
| freebsd | freebsd | 4.8 |
| hp | wbem | a.01.05.08 |
| openssl | openssl | 0.9.7c |
| hp | apache-based_web_server | 2.0.43.00 |
| lite | speed_technologies_litespeed_web_server | 1.2_rc1 |
| redhat | linux | 7.2 |
| checkpoint | vpn-1 | next_generation |
| cisco | ios | 12.1(11b)e12 |
| avaya | s8700 | r2.0.1 |
| securecomputing | sidewinder | 5.2 |
| sgi | propack | 2.4 |
| cisco | pix_firewall_software | 6.1(5) |
| cisco | ios | 12.1(11b)e14 |
| openssl | openssl | 0.9.6c |
| hp | aaa_server | * |
| avaya | vsu | 5 |
| apple | mac_os_x_server | 10.3.3 |
| openssl | openssl | 0.9.6e |
| cisco | firewall_services_module | 1.1.2 |
| stonesoft | stonebeat_webcluster | 2.5 |
| 4d | webstar | 5.2.1 |
| stonesoft | stonegate | 2.0.7 |
| hp | hp-ux | 8.05 |
| avaya | s8300 | r2.0.1 |
| avaya | sg5 | 4.3 |
| stonesoft | stonebeat_fullcluster | 1_2.0 |
| cisco | ios | 12.2sy |
| lite | speed_technologies_litespeed_web_server | 1.2.2 |
| avaya | s8500 | r2.0.1 |
| avaya | intuity_audix | s3210 |
| cisco | css_secure_content_accelerator | 1.0 |
| avaya | sg5 | 4.4 |
| checkpoint | vpn-1 | next_generation_fp1 |
| securecomputing | sidewinder | 5.2.0.02 |
| openssl | openssl | 0.9.7 |
| stonesoft | stonegate | 2.2.4 |
| stonesoft | stonegate | 2.1 |
| cisco | pix_firewall_software | 6.0 |
| neoteris | instant_virtual_extranet | 3.0 |
| novell | imanager | 1.5 |
| stonesoft | stonegate | 1.5.18 |
| stonesoft | servercluster | 2.5.2 |
| cisco | pix_firewall_software | 6.2(3.100) |
| checkpoint | firewall-1 | next_generation_fp0 |
| stonesoft | stonebeat_securitycluster | 2.5 |
| cisco | pix_firewall_software | 6.0(4.101) |
| novell | edirectory | 8.5.27 |
| cisco | css_secure_content_accelerator | 2.0 |
| stonesoft | stonegate | 1.7 |
| cisco | ios | 12.1(19)e1 |
| sco | openserver | 5.0.6 |
| 4d | webstar | 5.3.1 |
| novell | edirectory | 8.7 |
| redhat | enterprise_linux | 3.0 |
| avaya | sg208 | 4.4 |
| checkpoint | vpn-1 | vsx_ng_with_application_intelligence |
| cisco | webns | 7.2_0.0.03 |
| stonesoft | stonegate | 1.7.2 |
| 4d | webstar | 5.2 |
| lite | speed_technologies_litespeed_web_server | 1.2.1 |
| sco | openserver | 5.0.7 |
| lite | speed_technologies_litespeed_web_server | 1.1 |
| avaya | sg203 | 4.4 |
| openssl | openssl | 0.9.6i |
| avaya | intuity_audix | s3400 |
| cisco | pix_firewall_software | 6.1(4) |
| avaya | vsu | 100_r2.0.1 |
| stonesoft | stonebeat_fullcluster | 1_3.0 |
| redhat | linux | 7.3 |
| securecomputing | sidewinder | 5.2.0.04 |
| hp | wbem | a.02.00.00 |
| cisco | pix_firewall_software | 6.1(2) |
| openssl | openssl | 0.9.6d |
| hp | hp-ux | 11.23 |
| checkpoint | firewall-1 | next_generation_fp1 |
| stonesoft | stonegate | 2.0.1 |
| 4d | webstar | 5.3 |
| cisco | call_manager | * |
| stonesoft | stonegate | 2.0.8 |
| cisco | ios | 12.1(11b)e |
| stonesoft | stonegate | 1.5.17 |
| avaya | vsu | 2000_r2.0.1 |
| cisco | threat_response | * |
| stonesoft | stonegate | 2.0.9 |
| securecomputing | sidewinder | 5.2.0.01 |
| cisco | pix_firewall | 6.2.2_.111 |
| neoteris | instant_virtual_extranet | 3.3 |
| redhat | openssl | 0.9.6-15 |
| cisco | ios | 12.2(14)sy |
| hp | hp-ux | 11.11 |
| lite | speed_technologies_litespeed_web_server | 1.2_rc2 |
| avaya | sg200 | 4.4 |
| stonesoft | stonegate | 1.6.2 |
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-125,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| cisco | application_and_content_networking_software | * |
| forcepoint | stonegate | 2.2.1 |
| cisco | pix_firewall_software | 6.1 |
| cisco | pix_firewall_software | 6.0(3) |
| vmware | gsx_server | 2.0 |
| cisco | gss_4480_global_site_selector | * |
| cisco | secure_content_accelerator | 10000 |
| avaya | sg203 | 4.31.29 |
| avaya | intuity_audix | 5.1.46 |
| vmware | gsx_server | 2.5.1_build_5336 |
| cisco | pix_firewall_software | 6.0(1) |
| cisco | pix_firewall_software | 6.3 |
| cisco | ios | 12.2za |
| cisco | webns | 7.1_0.2.06 |
| cisco | webns | 7.10 |
| avaya | converged_communications_server | 2.0 |
| tarantella | tarantella_enterprise | 3.40 |
| cisco | pix_firewall_software | 6.2 |
| avaya | s8300 | r2.0.0 |
| stonesoft | servercluster | 2.5 |
| openssl | openssl | 0.9.6g |
| bluecoat | cacheos_ca_sa | 4.1.12 |
| cisco | access_registrar | * |
| sgi | propack | 2.3 |
| securecomputing | sidewinder | 5.2.1 |
| forcepoint | stonegate | 1.6.3 |
| cisco | firewall_services_module | * |
| sgi | propack | 3.0 |
| avaya | vsu | 7500_r2.0.1 |
| neoteris | instant_virtual_extranet | 3.1 |
| cisco | pix_firewall_software | 6.3(2) |
| securecomputing | sidewinder | 5.2.1.02 |
| openbsd | openbsd | 3.4 |
| cisco | pix_firewall_software | 6.3(1) |
| hp | apache-based_web_server | 2.0.43.04 |
| vmware | gsx_server | 2.0.1_build_2129 |
| forcepoint | stonegate | 2.2.4 |
| openssl | openssl | 0.9.6j |
| novell | edirectory | 8.7.1 |
| openssl | openssl | 0.9.7a |
| novell | edirectory | 8.5.12a |
| avaya | intuity_audix | * |
| checkpoint | firewall-1 | * |
| cisco | pix_firewall_software | 6.2(1) |
| freebsd | freebsd | 5.2 |
| openssl | openssl | 0.9.7b |
| openssl | openssl | 0.9.6f |
| cisco | webns | 7.1_0.1.02 |
| cisco | pix_firewall_software | 6.2(2) |
| cisco | webns | 7.10_.0.06s |
| forcepoint | stonegate | 2.0.9 |
| securecomputing | sidewinder | 5.2.0.03 |
| cisco | firewall_services_module | 1.1_(3.005) |
| cisco | okena_stormwatch | 3.2 |
| sun | crypto_accelerator_4000 | 1.0 |
| novell | imanager | 2.0 |
| forcepoint | stonegate | 1.7.1 |
| cisco | pix_firewall_software | 6.2(3) |
| cisco | ios | 12.1(11)e |
| litespeedtech | litespeed_web_server | 1.0.1 |
| checkpoint | firewall-1 | 2.0 |
| redhat | linux | 8.0 |
| hp | wbem | a.02.00.01 |
| vmware | gsx_server | 3.0_build_7592 |
| openssl | openssl | 0.9.6h |
| freebsd | freebsd | 4.9 |
| novell | edirectory | 8.5 |
| cisco | content_services_switch_11500 | * |
| forcepoint | stonegate | 1.7.2 |
| redhat | enterprise_linux_desktop | 3.0 |
| cisco | ios | 12.2(14)sy1 |
| forcepoint | stonegate | 2.0.5 |
| checkpoint | firewall-1 | next_generation_fp2 |
| stonesoft | stonebeat_webcluster | 2.0 |
| cisco | firewall_services_module | 2.1_(0.208) |
| stonesoft | stonebeat_fullcluster | 2.0 |
| forcepoint | stonegate | 2.2 |
| avaya | s8700 | r2.0.0 |
| redhat | openssl | 0.9.6b-3 |
| forcepoint | stonegate | 2.0.6 |
| vmware | gsx_server | 2.5.1 |
| cisco | webns | 6.10_b4 |
| bluecoat | cacheos_ca_sa | 4.1.10 |
| cisco | css11000_content_services_switch | * |
| 4d | webstar | 5.2.2 |
| tarantella | tarantella_enterprise | 3.30 |
| cisco | pix_firewall_software | 6.3(3.109) |
| dell | bsafe_ssl-j | 3.0.1 |
| avaya | s8500 | r2.0.0 |
| novell | edirectory | 8.0 |
| neoteris | instant_virtual_extranet | 3.2 |
| checkpoint | provider-1 | 4.1 |
| forcepoint | stonegate | 1.5.18 |
| symantec | clientless_vpn_gateway_4400 | 5.0 |
| hp | hp-ux | 11.00 |
| avaya | sg208 | * |
| neoteris | instant_virtual_extranet | 3.3.1 |
| cisco | gss_4490_global_site_selector | * |
| redhat | openssl | 0.9.7a-2 |
| forcepoint | stonegate | 1.7 |
| cisco | firewall_services_module | 1.1.3 |
| dell | bsafe_ssl-j | 3.0 |
| avaya | sg5 | 4.2 |
| cisco | ios | 12.1(13)e9 |
| cisco | pix_firewall_software | 6.0(2) |
| dell | bsafe_ssl-j | 3.1 |
| apple | mac_os_x | 10.3.3 |
| 4d | webstar | 5.2.3 |
| novell | edirectory | 8.6.2 |
| freebsd | freebsd | 5.2.1 |
| stonesoft | stonebeat_fullcluster | 3.0 |
| openbsd | openbsd | 3.3 |
| freebsd | freebsd | 5.1 |
| avaya | sg200 | 4.31.29 |
| forcepoint | stonegate | 2.0.1 |
| openssl | openssl | 0.9.6k |
| cisco | pix_firewall_software | 6.0(4) |
| 4d | webstar | 5.2.4 |
| avaya | vsu | 500 |
| 4d | webstar | 4.0 |
| stonesoft | stonebeat_fullcluster | 2.5 |
| forcepoint | stonegate | 2.0.7 |
| cisco | ciscoworks_common_management_foundation | 2.1 |
| avaya | vsu | 5000_r2.0.1 |
| avaya | vsu | 10000_r2.0.1 |
| tarantella | tarantella_enterprise | 3.20 |
| bluecoat | proxysg | * |
| checkpoint | vpn-1 | next_generation_fp0 |
| cisco | mds_9000 | * |
| cisco | pix_firewall_software | 6.1(3) |
| cisco | pix_firewall_software | 6.1(1) |
| forcepoint | stonegate | 2.0.4 |
| cisco | pix_firewall_software | 6.3(3.102) |
| stonesoft | stonebeat_securitycluster | 2.0 |
| cisco | ciscoworks_common_services | 2.2 |
| avaya | vsu | 5x |
| cisco | webns | 6.10 |
| freebsd | freebsd | 4.8 |
| hp | wbem | a.01.05.08 |
| forcepoint | stonegate | 1.5.17 |
| openssl | openssl | 0.9.7c |
| hp | apache-based_web_server | 2.0.43.00 |
| redhat | linux | 7.2 |
| cisco | ios | 12.1(11b)e12 |
| avaya | s8700 | r2.0.1 |
| securecomputing | sidewinder | 5.2 |
| forcepoint | stonegate | 1.6.2 |
| sgi | propack | 2.4 |
| cisco | pix_firewall_software | 6.1(5) |
| cisco | ios | 12.1(11b)e14 |
| openssl | openssl | 0.9.6c |
| hp | aaa_server | * |
| avaya | vsu | 5 |
| apple | mac_os_x_server | 10.3.3 |
| openssl | openssl | 0.9.6e |
| cisco | firewall_services_module | 1.1.2 |
| stonesoft | stonebeat_webcluster | 2.5 |
| 4d | webstar | 5.2.1 |
| hp | hp-ux | 8.05 |
| avaya | s8300 | r2.0.1 |
| avaya | sg5 | 4.3 |
| stonesoft | stonebeat_fullcluster | 1_2.0 |
| cisco | ios | 12.2sy |
| avaya | s8500 | r2.0.1 |
| avaya | intuity_audix | s3210 |
| cisco | css_secure_content_accelerator | 1.0 |
| avaya | sg5 | 4.4 |
| checkpoint | vpn-1 | next_generation_fp1 |
| securecomputing | sidewinder | 5.2.0.02 |
| openssl | openssl | 0.9.7 |
| cisco | pix_firewall_software | 6.0 |
| neoteris | instant_virtual_extranet | 3.0 |
| novell | imanager | 1.5 |
| stonesoft | servercluster | 2.5.2 |
| cisco | pix_firewall_software | 6.2(3.100) |
| checkpoint | firewall-1 | next_generation_fp0 |
| stonesoft | stonebeat_securitycluster | 2.5 |
| cisco | pix_firewall_software | 6.0(4.101) |
| novell | edirectory | 8.5.27 |
| forcepoint | stonegate | 2.0.8 |
| cisco | css_secure_content_accelerator | 2.0 |
| cisco | ios | 12.1(19)e1 |
| sco | openserver | 5.0.6 |
| 4d | webstar | 5.3.1 |
| novell | edirectory | 8.7 |
| redhat | enterprise_linux | 3.0 |
| avaya | sg208 | 4.4 |
| checkpoint | vpn-1 | vsx_ng_with_application_intelligence |
| cisco | webns | 7.2_0.0.03 |
| 4d | webstar | 5.2 |
| sco | openserver | 5.0.7 |
| avaya | sg203 | 4.4 |
| openssl | openssl | 0.9.6i |
| avaya | intuity_audix | s3400 |
| cisco | pix_firewall_software | 6.1(4) |
| avaya | vsu | 100_r2.0.1 |
| stonesoft | stonebeat_fullcluster | 1_3.0 |
| redhat | linux | 7.3 |
| securecomputing | sidewinder | 5.2.0.04 |
| hp | wbem | a.02.00.00 |
| cisco | pix_firewall_software | 6.1(2) |
| openssl | openssl | 0.9.6d |
| hp | hp-ux | 11.23 |
| checkpoint | firewall-1 | next_generation_fp1 |
| 4d | webstar | 5.3 |
| cisco | call_manager | * |
| cisco | ios | 12.1(11b)e |
| forcepoint | stonegate | 2.1 |
| avaya | vsu | 2000_r2.0.1 |
| cisco | threat_response | * |
| securecomputing | sidewinder | 5.2.0.01 |
| cisco | pix_firewall | 6.2.2_.111 |
| neoteris | instant_virtual_extranet | 3.3 |
| redhat | openssl | 0.9.6-15 |
| cisco | ios | 12.2(14)sy |
| hp | hp-ux | 11.11 |
| avaya | sg200 | 4.4 |
| checkpoint | vpn-1 | next_generation_fp2 |
changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| neoteris | instant_virtual_extranet | * |
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| juniper | netscreen_screenos | 2.1 |
| juniper | netscreen_screenos | 3.1.0r1 |
| juniper | netscreen_screenos | 3.1.1_r2 |
| juniper | netscreen_screenos | 3.0.1r7 |
| juniper | netscreen_screenos | 4.0.1r3 |
| juniper | netscreen_screenos | 4.0.3 |
| juniper | netscreen_screenos | 3.0.3_r1.1 |
| juniper | netscreen_screenos | 2.7.1 |
| juniper | netscreen_screenos | 2.6.1r2 |
| juniper | netscreen_screenos | 3.1.0r8 |
| juniper | netscreen_screenos | 2.5r1 |
| juniper | netscreen_screenos | 4.0.0r9 |
| juniper | netscreen_screenos | 1.73_r2 |
| juniper | netscreen_screenos | 4.0.0r3 |
| juniper | netscreen_screenos | 3.0.3r6 |
| netscreen | netscreen-sa_5020_series | 4.2_r2.2 |
| juniper | netscreen_screenos | 2.6.1r9 |
| netscreen | ns-204 | 0110.0_11_4.0_r10.0 |
| juniper | netscreen_screenos | 3.1.0r11 |
| netscreen | ns-50ns25 | 5.0.0_r6.0 |
| juniper | netscreen_screenos | 5.1.0r3a |
| netscreen | netscreen-sa_5000_series | * |
| juniper | netscreen_screenos | 4.0.0r12 |
| juniper | netscreen_screenos | 4.0.0r11 |
| juniper | netscreen_screenos | 4.0.0r7 |
| juniper | netscreen_screenos | 3.0.3r1 |
| juniper | netscreen_screenos | 3.0.1r5 |
| juniper | netscreen_screenos | 4.0.1r1 |
| juniper | netscreen_screenos | 4.0.3r1 |
| juniper | netscreen_screenos | 2.7.1r3 |
| juniper | netscreen_screenos | 4.0.1r9 |
| juniper | netscreen_screenos | 3.0.1r3 |
| neoteris | instant_virtual_extranet | 3.1 |
| juniper | netscreen_screenos | 3.0.1r1 |
| juniper | netscreen_screenos | 4.0.1r6 |
| juniper | netscreen_screenos | 2.8_r1 |
| juniper | netscreen_screenos | 4.0.1r4 |
| juniper | netscreen_screenos | 2.6.1r8 |
| juniper | netscreen_screenos | 4.0.2 |
| juniper | netscreen_screenos | 2.10_r3 |
| juniper | netscreen_screenos | 4.0.3r3 |
| juniper | netscreen_screenos | 1.73_r1 |
| juniper | netscreen_screenos | 5.2.0 |
| juniper | netscreen_screenos | 2.5r2 |
| juniper | netscreen_screenos | 4.0.0r1 |
| juniper | netscreen_screenos | 2.6.1r12 |
| juniper | netscreen_screenos | 1.66_r2 |
| juniper | netscreen_screenos | 3.1.0r7 |
| juniper | netscreen_screenos | 1.7 |
| juniper | netscreen-idp | 3.0 |
| juniper | netscreen_screenos | 2.6.1r5 |
| juniper | netscreen_screenos | 2.6.1r6 |
| juniper | netscreen_screenos | 2.6.1r10 |
| netscreen | netscreen-sa_5050_series | 4.2_r2.2 |
| juniper | netscreen_screenos | 3.1.0r4 |
| netscreen | ns-100 | 3.0_.pe1.0 |
| juniper | netscreen_screenos | 2.1_r7 |
| juniper | netscreen-idp_100 | 3.0.1_r1 |
| juniper | netscreen_screenos | 3.0.0r3 |
| juniper | netscreen_screenos | 4.0.1r2 |
| juniper | netscreen_screenos | 3.0.3 |
| juniper | netscreen_screenos | 2.6.1r4 |
| juniper | netscreen_screenos | 4.0.1r8 |
| juniper | netscreen_screenos | 3.0.3r8 |
| juniper | netscreen_screenos | 2.6.1r1 |
| juniper | netscreen_screenos | 3.0.1r4 |
| juniper | netscreen_screenos | 4.0.1r7 |
| juniper | netscreen_screenos | 2.0.1_r8 |
| juniper | netscreen_screenos | 3.0.1r6 |
| juniper | netscreen_screenos | 4.0.0r8 |
| juniper | netscreen_screenos | 3.0.1r2 |
| juniper | netscreen_screenos | 2.7.1r2 |
| juniper | netscreen_screenos | 3.0.0 |
| juniper | netscreen-idp_10 | 3.0.1_r1 |
| neoteris | instant_virtual_extranet | 3.0 |
| juniper | netscreen_screenos | 4.0.0r2 |
| netscreen | ns-500 | 4110.0_11_4.0_r10.0 |
| juniper | netscreen-idp | 3.0r2 |
| juniper | netscreen_screenos | 3.1.0r5 |
| juniper | netscreen_screenos | 5.1.0 |
| juniper | netscreen-idp | 3.0r1 |
| juniper | netscreen_screenos | 4.0.0r4 |
| juniper | netscreen_screenos | 2.5r6 |
| juniper | netscreen_screenos | 3.1.0r2 |
| juniper | netscreen_screenos | 3.0.1 |
| juniper | netscreen_screenos | 3.0.3r7 |
| juniper | netscreen-5gt | 5.0 |
| juniper | netscreen_screenos | 1.66 |
| netscreen | ns-204 | 5.0.0_r6.0 |
| netscreen | ns-10 | * |
| netscreen | ns-204 | 0110.0_11_5.1.0_r3a |
| juniper | netscreen_screenos | 1.64 |
| juniper | netscreen_screenos | 3.1.0 |
| juniper | netscreen_screenos | 4.0.0 |
| juniper | netscreen_screenos | 3.0.3r3 |
| juniper | netscreen_screenos | 4.0.0r6 |
| juniper | netscreen_screenos | 3.1.0r6 |
| juniper | netscreen_screenos | 3.0.2 |
| juniper | netscreen_screenos | 4.0.3r4 |
| juniper | netscreen_screenos | 4.0.3r2 |
| juniper | netscreen_screenos | 2.5 |
| juniper | netscreen-idp_1000 | 3.0.1_r1 |
| juniper | netscreen_screenos | 4.0.0r5 |
| juniper | netscreen_screenos | 4.0.1r5 |
| juniper | netscreen_screenos | 3.0.0r4 |
| juniper | netscreen_screenos | 2.7.1r1 |
| juniper | netscreen_screenos | 2.6.1r7 |
| juniper | netscreen_screenos | 3.1.0r10 |
| juniper | netscreen_screenos | 3.0.0r2 |
| neoteris | instant_virtual_extranet | 3.2 |
| juniper | netscreen_screenos | 4.0.1r10 |
| juniper | netscreen-idp_500 | 3.0.1_r1 |
| juniper | netscreen_screenos | 3.0.3r4 |
| juniper | netscreen_screenos | 2.6.1 |
| juniper | netscreen_screenos | 2.10_r4 |
| juniper | netscreen_screenos | 2.6.1r11 |
| juniper | netscreen_screenos | 5.0.0 |
| juniper | netscreen_screenos | 3.0.3r2 |
| juniper | netscreen_screenos | 3.1.0r9 |
| juniper | netscreen_screenos | 2.6.1r3 |
| juniper | netscreen_screenos | 3.1.0r12 |
| neoteris | instant_virtual_extranet | 3.3.1 |
| netscreen | ns-500 | 4110.0_11_5.1.0_r3a |
| juniper | netscreen_screenos | 2.6.0 |
| juniper | netscreen_screenos | 2.1_r6 |
| neoteris | instant_virtual_extranet | 3.3 |
| juniper | netscreen_screenos | 3.1.0r3 |
| juniper | netscreen_screenos | 3.0.3r5 |
| juniper | netscreen_screenos | 4.0.1 |
| juniper | netscreen_screenos | 3.0.0r1 |
| juniper | netscreen_screenos | 4.0.0r10 |
| juniper | netscreen_screenos | 2.8 |