Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the pg parameter.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| tarantella | tarantella_enterprise | 3.01 |
| tarantella | tarantella_enterprise | 3.0 |
ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| tarantella | tarantella_enterprise | 3.20 |
| tarantella | tarantella_enterprise | 3.10 |
| tarantella | tarantella_enterprise | 3.0 |
Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| tarantella | tarantella_enterprise | 3.3.0.1 |
| tarantella | tarantella_enterprise | 3.3.0 |
| tarantella | tarantella_enterprise | 3.3.11 |
| tarantella | tarantella_enterprise | 3.3.10 |
| tarantella | tarantella_enterprise | 3.3.20 |
The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.
CVSS 2.0
Severity: LOW
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| tarantella | tarantella_enterprise | 3.01 |
| tarantella | tarantella_enterprise | 3.11 |
| tarantella | tarantella_enterprise | 3.20 |
| tarantella | tarantella_enterprise | 3.10 |
| tarantella | tarantella_enterprise | 3.0 |
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 3.9 | 3.6 |
| nvd@nist.gov | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 3.9 | 3.6 |
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-476,CWE-476,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| cisco | webns | 7.10 |
| bluecoat | cacheos_ca_sa | 4.1.12 |
| sco | openserver | 5.0.7 |
| tarantella | tarantella_enterprise | 3.30 |
| neoteris | instant_virtual_extranet | 3.3 |
| redhat | linux | 7.3 |
| cisco | firewall_services_module | 1.1.3 |
| hp | wbem | a.02.00.01 |
| cisco | pix_firewall_software | 6.1 |
| avaya | sg203 | 4.31.29 |
| securecomputing | sidewinder | 5.2.0.02 |
| cisco | pix_firewall_software | 6.2(2) |
| cisco | access_registrar | * |
| cisco | pix_firewall | 6.2.2_.111 |
| avaya | vsu | 500 |
| cisco | ios | 12.1(19)e1 |
| lite | speed_technologies_litespeed_web_server | 1.1 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc1 |
| openssl | openssl | 0.9.7b |
| lite | speed_technologies_litespeed_web_server | 1.0.2 |
| vmware | gsx_server | 2.5.1_build_5336 |
| redhat | enterprise_linux_desktop | 3.0 |
| avaya | intuity_audix | s3210 |
| dell | bsafe_ssl-j | 3.1 |
| lite | speed_technologies_litespeed_web_server | 1.2.1 |
| checkpoint | firewall-1 | next_generation_fp0 |
| stonesoft | stonegate_vpn_client | 2.0.7 |
| avaya | converged_communications_server | 2.0 |
| cisco | webns | 6.10_b4 |
| openbsd | openbsd | 3.4 |
| cisco | pix_firewall_software | 6.2(3) |
| novell | edirectory | 8.5 |
| sun | crypto_accelerator_4000 | 1.0 |
| openssl | openssl | 0.9.6h |
| neoteris | instant_virtual_extranet | 3.1 |
| sgi | propack | 3.0 |
| openbsd | openbsd | 3.3 |
| cisco | ios | 12.1(13)e9 |
| 4d | webstar | 5.2.3 |
| openssl | openssl | 0.9.6f |
| neoteris | instant_virtual_extranet | 3.2 |
| cisco | ios | 12.2sy |
| stonesoft | stonebeat_fullcluster | 1_2.0 |
| cisco | pix_firewall_software | 6.0(3) |
| freebsd | freebsd | 5.2.1 |
| cisco | pix_firewall_software | 6.2(1) |
| 4d | webstar | 5.2.1 |
| avaya | vsu | 5 |
| novell | edirectory | 8.6.2 |
| stonesoft | stonegate_vpn_client | 1.7 |
| checkpoint | vpn-1 | next_generation_fp1 |
| novell | edirectory | 8.7.1 |
| cisco | css_secure_content_accelerator | 1.0 |
| neoteris | instant_virtual_extranet | 3.3.1 |
| novell | edirectory | 8.7 |
| openssl | openssl | 0.9.6g |
| checkpoint | vpn-1 | next_generation_fp0 |
| openssl | openssl | 0.9.6d |
| hp | wbem | a.02.00.00 |
| cisco | call_manager | * |
| freebsd | freebsd | 4.9 |
| 4d | webstar | 4.0 |
| cisco | pix_firewall_software | 6.3(3.102) |
| vmware | gsx_server | 3.0_build_7592 |
| stonesoft | stonebeat_webcluster | 2.5 |
| cisco | webns | 7.10_.0.06s |
| stonesoft | stonegate_vpn_client | 1.7.2 |
| avaya | s8500 | r2.0.1 |
| securecomputing | sidewinder | 5.2.0.01 |
| cisco | webns | 7.2_0.0.03 |
| lite | speed_technologies_litespeed_web_server | 1.0.1 |
| avaya | s8700 | r2.0.1 |
| cisco | ios | 12.2(14)sy1 |
| lite | speed_technologies_litespeed_web_server | 1.1.1 |
| stonesoft | stonegate | 2.0.1 |
| apple | mac_os_x | 10.3.3 |
| cisco | firewall_services_module | 1.1_(3.005) |
| cisco | secure_content_accelerator | 10000 |
| cisco | gss_4490_global_site_selector | * |
| symantec | clientless_vpn_gateway_4400 | 5.0 |
| stonesoft | stonegate | 1.6.2 |
| stonesoft | stonebeat_fullcluster | 2.5 |
| openssl | openssl | 0.9.7 |
| avaya | sg5 | 4.2 |
| sco | openserver | 5.0.6 |
| cisco | firewall_services_module | 1.1.2 |
| checkpoint | provider-1 | 4.1 |
| 4d | webstar | 5.2.2 |
| avaya | vsu | 5x |
| stonesoft | stonegate | 2.0.7 |
| redhat | linux | 8.0 |
| stonesoft | stonegate | 1.6.3 |
| cisco | ios | 12.2(14)sy |
| dell | bsafe_ssl-j | 3.0.1 |
| lite | speed_technologies_litespeed_web_server | 1.0.3 |
| cisco | pix_firewall_software | 6.2 |
| stonesoft | stonegate | 1.7.2 |
| cisco | pix_firewall_software | 6.1(4) |
| avaya | sg200 | 4.31.29 |
| securecomputing | sidewinder | 5.2 |
| freebsd | freebsd | 5.2 |
| stonesoft | stonegate | 1.5.17 |
| hp | hp-ux | 8.05 |
| apple | mac_os_x_server | 10.3.3 |
| avaya | intuity_audix | * |
| stonesoft | stonebeat_securitycluster | 2.0 |
| novell | imanager | 2.0 |
| cisco | pix_firewall_software | 6.1(1) |
| avaya | vsu | 10000_r2.0.1 |
| lite | speed_technologies_litespeed_web_server | 1.2_rc2 |
| vmware | gsx_server | 2.0.1_build_2129 |
| stonesoft | stonegate | 2.0.5 |
| openssl | openssl | 0.9.7c |
| securecomputing | sidewinder | 5.2.0.04 |
| cisco | pix_firewall_software | 6.1(3) |
| stonesoft | stonegate | 2.2.1 |
| cisco | pix_firewall_software | 6.0(4) |
| cisco | ios | 12.1(11b)e14 |
| bluecoat | proxysg | * |
| hp | apache-based_web_server | 2.0.43.00 |
| cisco | pix_firewall_software | 6.0(2) |
| cisco | pix_firewall_software | 6.0(4.101) |
| novell | edirectory | 8.0 |
| cisco | ciscoworks_common_management_foundation | 2.1 |
| avaya | intuity_audix | 5.1.46 |
| stonesoft | stonebeat_fullcluster | 1_3.0 |
| hp | hp-ux | 11.11 |
| cisco | pix_firewall_software | 6.3(2) |
| openssl | openssl | 0.9.6e |
| lite | speed_technologies_litespeed_web_server | 1.2.2 |
| stonesoft | stonegate | 1.7.1 |
| cisco | application_and_content_networking_software | * |
| openssl | openssl | 0.9.6i |
| cisco | webns | 6.10 |
| stonesoft | stonegate | 2.1 |
| stonesoft | stonegate | 2.0.6 |
| 4d | webstar | 5.3.1 |
| stonesoft | stonegate | 1.5.18 |
| checkpoint | firewall-1 | next_generation_fp1 |
| avaya | intuity_audix | s3400 |
| cisco | ciscoworks_common_services | 2.2 |
| sgi | propack | 2.4 |
| stonesoft | stonebeat_webcluster | 2.0 |
| avaya | sg5 | 4.3 |
| cisco | ios | 12.1(11b)e |
| stonesoft | stonebeat_securitycluster | 2.5 |
| 4d | webstar | 5.2 |
| stonesoft | stonebeat_fullcluster | 3.0 |
| stonesoft | stonegate_vpn_client | 2.0.8 |
| stonesoft | stonegate_vpn_client | 2.0.9 |
| freebsd | freebsd | 5.1 |
| avaya | sg203 | 4.4 |
| cisco | pix_firewall_software | 6.1(5) |
| dell | bsafe_ssl-j | 3.0 |
| securecomputing | sidewinder | 5.2.1.02 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc3 |
| cisco | mds_9000 | * |
| stonesoft | stonegate | 2.0.9 |
| securecomputing | sidewinder | 5.2.0.03 |
| avaya | sg200 | 4.4 |
| 4d | webstar | 5.3 |
| stonesoft | stonegate | 2.2.4 |
| cisco | css_secure_content_accelerator | 2.0 |
| stonesoft | servercluster | 2.5 |
| cisco | webns | 7.1_0.2.06 |
| redhat | linux | 7.2 |
| stonesoft | servercluster | 2.5.2 |
| 4d | webstar | 5.2.4 |
| cisco | threat_response | * |
| cisco | pix_firewall_software | 6.3 |
| avaya | vsu | 5000_r2.0.1 |
| stonesoft | stonegate | 1.7 |
| avaya | vsu | 100_r2.0.1 |
| cisco | pix_firewall_software | 6.1(2) |
| cisco | pix_firewall_software | 6.2(3.100) |
| hp | hp-ux | 11.23 |
| hp | wbem | a.01.05.08 |
| checkpoint | firewall-1 | 2.0 |
| checkpoint | firewall-1 | * |
| cisco | pix_firewall_software | 6.0(1) |
| vmware | gsx_server | 2.5.1 |
| stonesoft | stonegate | 2.0.4 |
| cisco | ios | 12.1(11)e |
| tarantella | tarantella_enterprise | 3.40 |
| stonesoft | stonegate | 2.0.8 |
| checkpoint | firewall-1 | next_generation_fp2 |
| avaya | s8700 | r2.0.0 |
| openssl | openssl | 0.9.6j |
| avaya | s8300 | r2.0.0 |
| novell | edirectory | 8.5.12a |
| freebsd | freebsd | 4.8 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc2 |
| tarantella | tarantella_enterprise | 3.20 |
| avaya | s8300 | r2.0.1 |
| openssl | openssl | 0.9.6k |
| cisco | content_services_switch_11500 | * |
| lite | speed_technologies_litespeed_web_server | 1.3.1 |
| redhat | openssl | 0.9.7a-2 |
| openssl | openssl | 0.9.7a |
| cisco | okena_stormwatch | 3.2 |
| redhat | enterprise_linux | 3.0 |
| avaya | sg5 | 4.4 |
| lite | speed_technologies_litespeed_web_server | 1.2_rc1 |
| lite | speed_technologies_litespeed_web_server | 1.3 |
| cisco | firewall_services_module | * |
| hp | aaa_server | * |
| cisco | css11000_content_services_switch | * |
| avaya | vsu | 7500_r2.0.1 |
| novell | imanager | 1.5 |
| redhat | openssl | 0.9.6b-3 |
| cisco | firewall_services_module | 2.1_(0.208) |
| avaya | sg208 | 4.4 |
| hp | hp-ux | 11.00 |
| avaya | s8500 | r2.0.0 |
| avaya | vsu | 2000_r2.0.1 |
| cisco | pix_firewall_software | 6.3(1) |
| checkpoint | vpn-1 | vsx_ng_with_application_intelligence |
| checkpoint | vpn-1 | next_generation_fp2 |
| cisco | pix_firewall_software | 6.0 |
| hp | apache-based_web_server | 2.0.43.04 |
| avaya | sg208 | * |
| securecomputing | sidewinder | 5.2.1 |
| cisco | pix_firewall_software | 6.3(3.109) |
| cisco | ios | 12.2za |
| stonesoft | stonebeat_fullcluster | 2.0 |
| stonesoft | stonegate | 2.2 |
| cisco | ios | 12.1(11b)e12 |
| sgi | propack | 2.3 |
| redhat | openssl | 0.9.6-15 |
| vmware | gsx_server | 2.0 |
| stonesoft | stonegate_vpn_client | 2.0 |
| cisco | gss_4480_global_site_selector | * |
| bluecoat | cacheos_ca_sa | 4.1.10 |
| cisco | webns | 7.1_0.1.02 |
| neoteris | instant_virtual_extranet | 3.0 |
| novell | edirectory | 8.5.27 |
| openssl | openssl | 0.9.6c |
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| cisco | webns | 7.10 |
| bluecoat | cacheos_ca_sa | 4.1.12 |
| sco | openserver | 5.0.7 |
| tarantella | tarantella_enterprise | 3.30 |
| neoteris | instant_virtual_extranet | 3.3 |
| redhat | linux | 7.3 |
| cisco | firewall_services_module | 1.1.3 |
| hp | wbem | a.02.00.01 |
| cisco | pix_firewall_software | 6.1 |
| avaya | sg203 | 4.31.29 |
| securecomputing | sidewinder | 5.2.0.02 |
| cisco | pix_firewall_software | 6.2(2) |
| cisco | access_registrar | * |
| cisco | pix_firewall | 6.2.2_.111 |
| avaya | vsu | 500 |
| cisco | ios | 12.1(19)e1 |
| lite | speed_technologies_litespeed_web_server | 1.1 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc1 |
| openssl | openssl | 0.9.7b |
| lite | speed_technologies_litespeed_web_server | 1.0.2 |
| vmware | gsx_server | 2.5.1_build_5336 |
| redhat | enterprise_linux_desktop | 3.0 |
| avaya | intuity_audix | s3210 |
| dell | bsafe_ssl-j | 3.1 |
| lite | speed_technologies_litespeed_web_server | 1.2.1 |
| checkpoint | firewall-1 | next_generation_fp0 |
| stonesoft | stonegate_vpn_client | 2.0.7 |
| avaya | converged_communications_server | 2.0 |
| cisco | webns | 6.10_b4 |
| openbsd | openbsd | 3.4 |
| cisco | pix_firewall_software | 6.2(3) |
| novell | edirectory | 8.5 |
| sun | crypto_accelerator_4000 | 1.0 |
| openssl | openssl | 0.9.6h |
| neoteris | instant_virtual_extranet | 3.1 |
| sgi | propack | 3.0 |
| openbsd | openbsd | 3.3 |
| cisco | ios | 12.1(13)e9 |
| 4d | webstar | 5.2.3 |
| openssl | openssl | 0.9.6f |
| neoteris | instant_virtual_extranet | 3.2 |
| cisco | ios | 12.2sy |
| stonesoft | stonebeat_fullcluster | 1_2.0 |
| cisco | pix_firewall_software | 6.0(3) |
| freebsd | freebsd | 5.2.1 |
| cisco | pix_firewall_software | 6.2(1) |
| 4d | webstar | 5.2.1 |
| avaya | vsu | 5 |
| novell | edirectory | 8.6.2 |
| stonesoft | stonegate_vpn_client | 1.7 |
| checkpoint | vpn-1 | next_generation_fp1 |
| novell | edirectory | 8.7.1 |
| cisco | css_secure_content_accelerator | 1.0 |
| neoteris | instant_virtual_extranet | 3.3.1 |
| novell | edirectory | 8.7 |
| openssl | openssl | 0.9.6g |
| checkpoint | vpn-1 | next_generation_fp0 |
| openssl | openssl | 0.9.6d |
| hp | wbem | a.02.00.00 |
| cisco | call_manager | * |
| freebsd | freebsd | 4.9 |
| 4d | webstar | 4.0 |
| cisco | pix_firewall_software | 6.3(3.102) |
| vmware | gsx_server | 3.0_build_7592 |
| stonesoft | stonebeat_webcluster | 2.5 |
| cisco | webns | 7.10_.0.06s |
| stonesoft | stonegate_vpn_client | 1.7.2 |
| avaya | s8500 | r2.0.1 |
| securecomputing | sidewinder | 5.2.0.01 |
| cisco | webns | 7.2_0.0.03 |
| lite | speed_technologies_litespeed_web_server | 1.0.1 |
| avaya | s8700 | r2.0.1 |
| cisco | ios | 12.2(14)sy1 |
| lite | speed_technologies_litespeed_web_server | 1.1.1 |
| stonesoft | stonegate | 2.0.1 |
| apple | mac_os_x | 10.3.3 |
| cisco | firewall_services_module | 1.1_(3.005) |
| cisco | secure_content_accelerator | 10000 |
| cisco | gss_4490_global_site_selector | * |
| symantec | clientless_vpn_gateway_4400 | 5.0 |
| stonesoft | stonegate | 1.6.2 |
| stonesoft | stonebeat_fullcluster | 2.5 |
| openssl | openssl | 0.9.7 |
| avaya | sg5 | 4.2 |
| sco | openserver | 5.0.6 |
| cisco | firewall_services_module | 1.1.2 |
| checkpoint | provider-1 | 4.1 |
| 4d | webstar | 5.2.2 |
| avaya | vsu | 5x |
| stonesoft | stonegate | 2.0.7 |
| redhat | linux | 8.0 |
| stonesoft | stonegate | 1.6.3 |
| cisco | ios | 12.2(14)sy |
| dell | bsafe_ssl-j | 3.0.1 |
| lite | speed_technologies_litespeed_web_server | 1.0.3 |
| cisco | pix_firewall_software | 6.2 |
| stonesoft | stonegate | 1.7.2 |
| cisco | pix_firewall_software | 6.1(4) |
| avaya | sg200 | 4.31.29 |
| securecomputing | sidewinder | 5.2 |
| freebsd | freebsd | 5.2 |
| stonesoft | stonegate | 1.5.17 |
| hp | hp-ux | 8.05 |
| apple | mac_os_x_server | 10.3.3 |
| avaya | intuity_audix | * |
| stonesoft | stonebeat_securitycluster | 2.0 |
| novell | imanager | 2.0 |
| cisco | pix_firewall_software | 6.1(1) |
| avaya | vsu | 10000_r2.0.1 |
| lite | speed_technologies_litespeed_web_server | 1.2_rc2 |
| vmware | gsx_server | 2.0.1_build_2129 |
| stonesoft | stonegate | 2.0.5 |
| openssl | openssl | 0.9.7c |
| securecomputing | sidewinder | 5.2.0.04 |
| cisco | pix_firewall_software | 6.1(3) |
| stonesoft | stonegate | 2.2.1 |
| cisco | pix_firewall_software | 6.0(4) |
| cisco | ios | 12.1(11b)e14 |
| bluecoat | proxysg | * |
| hp | apache-based_web_server | 2.0.43.00 |
| cisco | pix_firewall_software | 6.0(2) |
| cisco | pix_firewall_software | 6.0(4.101) |
| novell | edirectory | 8.0 |
| cisco | ciscoworks_common_management_foundation | 2.1 |
| avaya | intuity_audix | 5.1.46 |
| stonesoft | stonebeat_fullcluster | 1_3.0 |
| hp | hp-ux | 11.11 |
| cisco | pix_firewall_software | 6.3(2) |
| openssl | openssl | 0.9.6e |
| checkpoint | vpn-1 | next_generation |
| lite | speed_technologies_litespeed_web_server | 1.2.2 |
| stonesoft | stonegate | 1.7.1 |
| cisco | application_and_content_networking_software | * |
| openssl | openssl | 0.9.6i |
| cisco | webns | 6.10 |
| stonesoft | stonegate | 2.1 |
| stonesoft | stonegate | 2.0.6 |
| 4d | webstar | 5.3.1 |
| stonesoft | stonegate | 1.5.18 |
| checkpoint | firewall-1 | next_generation_fp1 |
| avaya | intuity_audix | s3400 |
| cisco | ciscoworks_common_services | 2.2 |
| sgi | propack | 2.4 |
| stonesoft | stonebeat_webcluster | 2.0 |
| avaya | sg5 | 4.3 |
| cisco | ios | 12.1(11b)e |
| stonesoft | stonebeat_securitycluster | 2.5 |
| 4d | webstar | 5.2 |
| stonesoft | stonebeat_fullcluster | 3.0 |
| stonesoft | stonegate_vpn_client | 2.0.8 |
| stonesoft | stonegate_vpn_client | 2.0.9 |
| freebsd | freebsd | 5.1 |
| avaya | sg203 | 4.4 |
| cisco | pix_firewall_software | 6.1(5) |
| dell | bsafe_ssl-j | 3.0 |
| securecomputing | sidewinder | 5.2.1.02 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc3 |
| cisco | mds_9000 | * |
| stonesoft | stonegate | 2.0.9 |
| securecomputing | sidewinder | 5.2.0.03 |
| avaya | sg200 | 4.4 |
| 4d | webstar | 5.3 |
| stonesoft | stonegate | 2.2.4 |
| cisco | css_secure_content_accelerator | 2.0 |
| stonesoft | servercluster | 2.5 |
| cisco | webns | 7.1_0.2.06 |
| redhat | linux | 7.2 |
| stonesoft | servercluster | 2.5.2 |
| 4d | webstar | 5.2.4 |
| cisco | threat_response | * |
| cisco | pix_firewall_software | 6.3 |
| avaya | vsu | 5000_r2.0.1 |
| stonesoft | stonegate | 1.7 |
| avaya | vsu | 100_r2.0.1 |
| cisco | pix_firewall_software | 6.1(2) |
| cisco | pix_firewall_software | 6.2(3.100) |
| hp | hp-ux | 11.23 |
| hp | wbem | a.01.05.08 |
| checkpoint | firewall-1 | 2.0 |
| checkpoint | firewall-1 | * |
| cisco | pix_firewall_software | 6.0(1) |
| vmware | gsx_server | 2.5.1 |
| stonesoft | stonegate | 2.0.4 |
| cisco | ios | 12.1(11)e |
| tarantella | tarantella_enterprise | 3.40 |
| stonesoft | stonegate | 2.0.8 |
| checkpoint | firewall-1 | next_generation_fp2 |
| avaya | s8700 | r2.0.0 |
| openssl | openssl | 0.9.6j |
| avaya | s8300 | r2.0.0 |
| novell | edirectory | 8.5.12a |
| freebsd | freebsd | 4.8 |
| lite | speed_technologies_litespeed_web_server | 1.3_rc2 |
| tarantella | tarantella_enterprise | 3.20 |
| avaya | s8300 | r2.0.1 |
| openssl | openssl | 0.9.6k |
| cisco | content_services_switch_11500 | * |
| lite | speed_technologies_litespeed_web_server | 1.3.1 |
| redhat | openssl | 0.9.7a-2 |
| openssl | openssl | 0.9.7a |
| cisco | okena_stormwatch | 3.2 |
| redhat | enterprise_linux | 3.0 |
| avaya | sg5 | 4.4 |
| lite | speed_technologies_litespeed_web_server | 1.2_rc1 |
| lite | speed_technologies_litespeed_web_server | 1.3 |
| cisco | firewall_services_module | * |
| hp | aaa_server | * |
| cisco | css11000_content_services_switch | * |
| avaya | vsu | 7500_r2.0.1 |
| novell | imanager | 1.5 |
| redhat | openssl | 0.9.6b-3 |
| cisco | firewall_services_module | 2.1_(0.208) |
| avaya | sg208 | 4.4 |
| hp | hp-ux | 11.00 |
| avaya | s8500 | r2.0.0 |
| avaya | vsu | 2000_r2.0.1 |
| cisco | pix_firewall_software | 6.3(1) |
| checkpoint | vpn-1 | vsx_ng_with_application_intelligence |
| cisco | pix_firewall_software | 6.0 |
| hp | apache-based_web_server | 2.0.43.04 |
| avaya | sg208 | * |
| securecomputing | sidewinder | 5.2.1 |
| cisco | pix_firewall_software | 6.3(3.109) |
| cisco | ios | 12.2za |
| stonesoft | stonebeat_fullcluster | 2.0 |
| stonesoft | stonegate | 2.2 |
| cisco | ios | 12.1(11b)e12 |
| sgi | propack | 2.3 |
| redhat | openssl | 0.9.6-15 |
| vmware | gsx_server | 2.0 |
| stonesoft | stonegate_vpn_client | 2.0 |
| cisco | gss_4480_global_site_selector | * |
| bluecoat | cacheos_ca_sa | 4.1.10 |
| cisco | webns | 7.1_0.1.02 |
| neoteris | instant_virtual_extranet | 3.0 |
| novell | edirectory | 8.5.27 |
| openssl | openssl | 0.9.6c |
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-125,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| cisco | webns | 7.10 |
| bluecoat | cacheos_ca_sa | 4.1.12 |
| sco | openserver | 5.0.7 |
| tarantella | tarantella_enterprise | 3.30 |
| forcepoint | stonegate | 1.6.2 |
| neoteris | instant_virtual_extranet | 3.3 |
| redhat | linux | 7.3 |
| cisco | firewall_services_module | 1.1.3 |
| hp | wbem | a.02.00.01 |
| cisco | pix_firewall_software | 6.1 |
| avaya | sg203 | 4.31.29 |
| securecomputing | sidewinder | 5.2.0.02 |
| cisco | pix_firewall_software | 6.2(2) |
| cisco | access_registrar | * |
| forcepoint | stonegate | 2.0.4 |
| cisco | pix_firewall | 6.2.2_.111 |
| avaya | vsu | 500 |
| cisco | ios | 12.1(19)e1 |
| openssl | openssl | 0.9.7b |
| vmware | gsx_server | 2.5.1_build_5336 |
| redhat | enterprise_linux_desktop | 3.0 |
| avaya | intuity_audix | s3210 |
| dell | bsafe_ssl-j | 3.1 |
| checkpoint | firewall-1 | next_generation_fp0 |
| avaya | converged_communications_server | 2.0 |
| cisco | webns | 6.10_b4 |
| openbsd | openbsd | 3.4 |
| cisco | pix_firewall_software | 6.2(3) |
| novell | edirectory | 8.5 |
| sun | crypto_accelerator_4000 | 1.0 |
| openssl | openssl | 0.9.6h |
| neoteris | instant_virtual_extranet | 3.1 |
| sgi | propack | 3.0 |
| openbsd | openbsd | 3.3 |
| cisco | ios | 12.1(13)e9 |
| 4d | webstar | 5.2.3 |
| openssl | openssl | 0.9.6f |
| neoteris | instant_virtual_extranet | 3.2 |
| cisco | ios | 12.2sy |
| stonesoft | stonebeat_fullcluster | 1_2.0 |
| cisco | pix_firewall_software | 6.0(3) |
| freebsd | freebsd | 5.2.1 |
| cisco | pix_firewall_software | 6.2(1) |
| 4d | webstar | 5.2.1 |
| avaya | vsu | 5 |
| novell | edirectory | 8.6.2 |
| checkpoint | vpn-1 | next_generation_fp1 |
| novell | edirectory | 8.7.1 |
| cisco | css_secure_content_accelerator | 1.0 |
| neoteris | instant_virtual_extranet | 3.3.1 |
| novell | edirectory | 8.7 |
| openssl | openssl | 0.9.6g |
| checkpoint | vpn-1 | next_generation_fp0 |
| openssl | openssl | 0.9.6d |
| forcepoint | stonegate | 2.0.1 |
| hp | wbem | a.02.00.00 |
| cisco | call_manager | * |
| freebsd | freebsd | 4.9 |
| 4d | webstar | 4.0 |
| cisco | pix_firewall_software | 6.3(3.102) |
| vmware | gsx_server | 3.0_build_7592 |
| stonesoft | stonebeat_webcluster | 2.5 |
| cisco | webns | 7.10_.0.06s |
| avaya | s8500 | r2.0.1 |
| securecomputing | sidewinder | 5.2.0.01 |
| cisco | webns | 7.2_0.0.03 |
| avaya | s8700 | r2.0.1 |
| cisco | ios | 12.2(14)sy1 |
| litespeedtech | litespeed_web_server | 1.0.1 |
| apple | mac_os_x | 10.3.3 |
| cisco | firewall_services_module | 1.1_(3.005) |
| cisco | secure_content_accelerator | 10000 |
| cisco | gss_4490_global_site_selector | * |
| symantec | clientless_vpn_gateway_4400 | 5.0 |
| stonesoft | stonebeat_fullcluster | 2.5 |
| openssl | openssl | 0.9.7 |
| avaya | sg5 | 4.2 |
| forcepoint | stonegate | 2.0.7 |
| sco | openserver | 5.0.6 |
| cisco | firewall_services_module | 1.1.2 |
| checkpoint | provider-1 | 4.1 |
| 4d | webstar | 5.2.2 |
| avaya | vsu | 5x |
| redhat | linux | 8.0 |
| cisco | ios | 12.2(14)sy |
| forcepoint | stonegate | 1.7.2 |
| dell | bsafe_ssl-j | 3.0.1 |
| cisco | pix_firewall_software | 6.2 |
| cisco | pix_firewall_software | 6.1(4) |
| avaya | sg200 | 4.31.29 |
| securecomputing | sidewinder | 5.2 |
| freebsd | freebsd | 5.2 |
| hp | hp-ux | 8.05 |
| apple | mac_os_x_server | 10.3.3 |
| avaya | intuity_audix | * |
| stonesoft | stonebeat_securitycluster | 2.0 |
| novell | imanager | 2.0 |
| cisco | pix_firewall_software | 6.1(1) |
| avaya | vsu | 10000_r2.0.1 |
| vmware | gsx_server | 2.0.1_build_2129 |
| openssl | openssl | 0.9.7c |
| securecomputing | sidewinder | 5.2.0.04 |
| forcepoint | stonegate | 2.0.8 |
| cisco | pix_firewall_software | 6.1(3) |
| cisco | pix_firewall_software | 6.0(4) |
| forcepoint | stonegate | 1.5.18 |
| cisco | ios | 12.1(11b)e14 |
| bluecoat | proxysg | * |
| hp | apache-based_web_server | 2.0.43.00 |
| cisco | pix_firewall_software | 6.0(2) |
| cisco | pix_firewall_software | 6.0(4.101) |
| novell | edirectory | 8.0 |
| cisco | ciscoworks_common_management_foundation | 2.1 |
| avaya | intuity_audix | 5.1.46 |
| forcepoint | stonegate | 1.6.3 |
| stonesoft | stonebeat_fullcluster | 1_3.0 |
| hp | hp-ux | 11.11 |
| cisco | pix_firewall_software | 6.3(2) |
| forcepoint | stonegate | 2.2.4 |
| openssl | openssl | 0.9.6e |
| forcepoint | stonegate | 2.0.5 |
| cisco | application_and_content_networking_software | * |
| openssl | openssl | 0.9.6i |
| cisco | webns | 6.10 |
| forcepoint | stonegate | 2.1 |
| 4d | webstar | 5.3.1 |
| checkpoint | firewall-1 | next_generation_fp1 |
| avaya | intuity_audix | s3400 |
| cisco | ciscoworks_common_services | 2.2 |
| sgi | propack | 2.4 |
| stonesoft | stonebeat_webcluster | 2.0 |
| avaya | sg5 | 4.3 |
| cisco | ios | 12.1(11b)e |
| stonesoft | stonebeat_securitycluster | 2.5 |
| 4d | webstar | 5.2 |
| stonesoft | stonebeat_fullcluster | 3.0 |
| freebsd | freebsd | 5.1 |
| avaya | sg203 | 4.4 |
| cisco | pix_firewall_software | 6.1(5) |
| dell | bsafe_ssl-j | 3.0 |
| securecomputing | sidewinder | 5.2.1.02 |
| cisco | mds_9000 | * |
| securecomputing | sidewinder | 5.2.0.03 |
| avaya | sg200 | 4.4 |
| 4d | webstar | 5.3 |
| cisco | css_secure_content_accelerator | 2.0 |
| stonesoft | servercluster | 2.5 |
| cisco | webns | 7.1_0.2.06 |
| redhat | linux | 7.2 |
| stonesoft | servercluster | 2.5.2 |
| 4d | webstar | 5.2.4 |
| cisco | threat_response | * |
| cisco | pix_firewall_software | 6.3 |
| avaya | vsu | 5000_r2.0.1 |
| avaya | vsu | 100_r2.0.1 |
| cisco | pix_firewall_software | 6.1(2) |
| cisco | pix_firewall_software | 6.2(3.100) |
| hp | hp-ux | 11.23 |
| hp | wbem | a.01.05.08 |
| checkpoint | firewall-1 | 2.0 |
| checkpoint | firewall-1 | * |
| cisco | pix_firewall_software | 6.0(1) |
| vmware | gsx_server | 2.5.1 |
| forcepoint | stonegate | 2.2.1 |
| cisco | ios | 12.1(11)e |
| tarantella | tarantella_enterprise | 3.40 |
| checkpoint | firewall-1 | next_generation_fp2 |
| avaya | s8700 | r2.0.0 |
| openssl | openssl | 0.9.6j |
| avaya | s8300 | r2.0.0 |
| forcepoint | stonegate | 2.0.6 |
| novell | edirectory | 8.5.12a |
| freebsd | freebsd | 4.8 |
| tarantella | tarantella_enterprise | 3.20 |
| avaya | s8300 | r2.0.1 |
| openssl | openssl | 0.9.6k |
| forcepoint | stonegate | 2.2 |
| cisco | content_services_switch_11500 | * |
| redhat | openssl | 0.9.7a-2 |
| openssl | openssl | 0.9.7a |
| cisco | okena_stormwatch | 3.2 |
| redhat | enterprise_linux | 3.0 |
| avaya | sg5 | 4.4 |
| cisco | firewall_services_module | * |
| hp | aaa_server | * |
| cisco | css11000_content_services_switch | * |
| avaya | vsu | 7500_r2.0.1 |
| forcepoint | stonegate | 1.7.1 |
| novell | imanager | 1.5 |
| redhat | openssl | 0.9.6b-3 |
| cisco | firewall_services_module | 2.1_(0.208) |
| avaya | sg208 | 4.4 |
| hp | hp-ux | 11.00 |
| avaya | s8500 | r2.0.0 |
| avaya | vsu | 2000_r2.0.1 |
| cisco | pix_firewall_software | 6.3(1) |
| forcepoint | stonegate | 2.0.9 |
| checkpoint | vpn-1 | vsx_ng_with_application_intelligence |
| checkpoint | vpn-1 | next_generation_fp2 |
| cisco | pix_firewall_software | 6.0 |
| hp | apache-based_web_server | 2.0.43.04 |
| avaya | sg208 | * |
| securecomputing | sidewinder | 5.2.1 |
| cisco | pix_firewall_software | 6.3(3.109) |
| cisco | ios | 12.2za |
| forcepoint | stonegate | 1.5.17 |
| stonesoft | stonebeat_fullcluster | 2.0 |
| cisco | ios | 12.1(11b)e12 |
| sgi | propack | 2.3 |
| redhat | openssl | 0.9.6-15 |
| vmware | gsx_server | 2.0 |
| cisco | gss_4480_global_site_selector | * |
| bluecoat | cacheos_ca_sa | 4.1.10 |
| cisco | webns | 7.1_0.1.02 |
| neoteris | instant_virtual_extranet | 3.0 |
| novell | edirectory | 8.5.27 |
| forcepoint | stonegate | 1.7 |
| openssl | openssl | 0.9.6c |
Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| tarantella | secure_global_desktop | enterprise_4.0 |
| tarantella | tarantella_enterprise | 3.30 |
| tarantella | tarantella_enterprise | 3.40 |
| tarantella | secure_global_desktop | enterprise_3.42 |