S-216: Juniper Networks Secure Access 2000 'rdremediate.cgi' Vulnerability

Tags

Special Forums Cybersecurity Security Advisories (RSS) S-216: Juniper Networks Secure Access 2000 'rdremediate.cgi' Vulnerability

03-04-2008

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

S-216: Juniper Networks Secure Access 2000 'rdremediate.cgi' Vulnerability

Juniper Networks Secure Access 2000 is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. The risk is MEDIUM. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

Previous Thread | Next Thread

6 More Discussions You Might Find Interesting

1. Cybersecurity

WebApp secure access to protected files/programs

Hello, I'm working on an embedded linux project that provides a devices that uses an IPSec VPN (using racoon) to connect back to base. The device also hosts a WebApp that allows admin users to change many aspect of the networking setup, including things like the VPN pre-shared-key, IP addresses...

2. Debian

Secure ftp access to outside chroot

I want to setup ftp on my home server running debian 5.0 I found this guide and have read it carefully. Virtual Hosting With PureFTPd And MySQL (Incl. Quota And Bandwidth Management) On Debian Lenny | HowtoForge - Linux Howtos and Tutorials Before I install/config it I want to know if its...

3. UNIX for Dummies Questions & Answers

Remote access from Windows 2000 into Solaris 8

All, I am looking for the easiest solution that will let me remote access from a Windows 2000 client into a Solaris 8 server. Any suggestions? Thanks Kevin

4. Solaris

secure access using sudo

I just need to know what should be done on a login user so that no one can access it except through sudo i.e. telnet server login: user NO ACCESS telnet server login: mylogin sudo - user <any command> ACCESS GRANTED thanks

5. Windows & DOS: Issues & Discussions

Wants to delete a file on window 2000 Pro but prompt Access Denied

Kindly give me insight to this problem that l am encountering on window 2000 professional. I want to delete a file with .dll. If l delete the file its prompt access denied. Every option under the file attribute signify that the no deny was checked, but still l can't delete the file. Also l tried...

6. UNIX for Dummies Questions & Answers

Access FreeBSD (BSD) partition from Windows NT/2000/XP

Hello, I have already installed FreeBSD into my hard disk. In one partition I have Windows 2000, and on another FreeBSD. I can access Windows partition from FreeBSD, but is there any way to access FreeBSD partition from Windows? I know how to access Linux (ext/ext2) partition from Win, there is...

LEARN ABOUT PHP

upsimage.cgi

UPSIMAGE.CGI(8) 						    NUT Manual							   UPSIMAGE.CGI(8)

NAME

       upsimage.cgi - Image-generating helper for upsstats.cgi

SYNOPSIS

       upsimage.cgi

	   Note
	   As a CGI program, this should be invoked through your web server. If you run it from the command line, it will either complain about
	   unauthorized access or spew a PNG at you.

DESCRIPTION

       upsimage.cgi generates the graphical bars that make up the right side of the page generated by upsstats.cgi(8). These represent the current
       battery charge, utility voltage, and UPS load where available.

       The images are in PNG format, and are created by linking to Boutell's excellent gd library.

ACCESS CONTROL

       upsstats will only talk to upsd(8) servers that have been defined in your hosts.conf(5). If it complains about "Access to that host is not
       authorized", check that file first.

FILES

       hosts.conf(5)

SEE ALSO

       upsd(8), upsstats.cgi(8)

   Internet resources:
       The gd home page: http://www.boutell.com/gd/

       The NUT (Network UPS Tools) home page: http://www.networkupstools.org/

Network UPS Tools						    05/22/2012							   UPSIMAGE.CGI(8)

Security Advisories (RSS)