RSS   Vulnerabilities for '602lan suite'   RSS

2005-06-09
 
CVE-2005-1909

 

 
The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "</pre><!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting (XSS) vulnerability.

 
2005-05-03
 
CVE-2005-1423

 

 
Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote attackers to cause a denial of service and determine the presence of arbitrary files via .. sequences in the A parameter.

 
2005-05-02
 
CVE-2005-0344

 

 
Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.

 
2004-12-31
 
CVE-2004-1502

 

 
The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (socket exhaustion) via a Telnet request to an IP address of the proxy's network interface, which causes a loop.

 
 
CVE-2004-1501

 

 
The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value, then disconnecting without sending that amount of data.

 

 >>> Vendor: Software602 3 Products
602pro lan suite
602lan suite
Groupware server


Copyright 2024, cxsecurity.com

 

Back to Top