S-216: Juniper Networks Secure Access 2000 'rdremediate.cgi' Vulnerability

Tags

Special Forums Cybersecurity Security Advisories (RSS) S-216: Juniper Networks Secure Access 2000 'rdremediate.cgi' Vulnerability

03-04-2008

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

S-216: Juniper Networks Secure Access 2000 'rdremediate.cgi' Vulnerability

Juniper Networks Secure Access 2000 is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. The risk is MEDIUM. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

Previous Thread | Next Thread

6 More Discussions You Might Find Interesting

1. Cybersecurity

WebApp secure access to protected files/programs

Hello, I'm working on an embedded linux project that provides a devices that uses an IPSec VPN (using racoon) to connect back to base. The device also hosts a WebApp that allows admin users to change many aspect of the networking setup, including things like the VPN pre-shared-key, IP addresses...

2. Debian

Secure ftp access to outside chroot

I want to setup ftp on my home server running debian 5.0 I found this guide and have read it carefully. Virtual Hosting With PureFTPd And MySQL (Incl. Quota And Bandwidth Management) On Debian Lenny | HowtoForge - Linux Howtos and Tutorials Before I install/config it I want to know if its...

3. UNIX for Dummies Questions & Answers

Remote access from Windows 2000 into Solaris 8

All, I am looking for the easiest solution that will let me remote access from a Windows 2000 client into a Solaris 8 server. Any suggestions? Thanks Kevin

4. Solaris

secure access using sudo

I just need to know what should be done on a login user so that no one can access it except through sudo i.e. telnet server login: user NO ACCESS telnet server login: mylogin sudo - user <any command> ACCESS GRANTED thanks

5. Windows & DOS: Issues & Discussions

Wants to delete a file on window 2000 Pro but prompt Access Denied

Kindly give me insight to this problem that l am encountering on window 2000 professional. I want to delete a file with .dll. If l delete the file its prompt access denied. Every option under the file attribute signify that the no deny was checked, but still l can't delete the file. Also l tried...

6. UNIX for Dummies Questions & Answers

Access FreeBSD (BSD) partition from Windows NT/2000/XP

Hello, I have already installed FreeBSD into my hard disk. In one partition I have Windows 2000, and on another FreeBSD. I can access Windows partition from FreeBSD, but is there any way to access FreeBSD partition from Windows? I know how to access Linux (ext/ext2) partition from Win, there is...

LEARN ABOUT DEBIAN

cgi_vredirect

cgi_vredirect(3)						     cgi/cgi.h							  cgi_vredirect(3)

NAME

       cgi_vredirect  - send an HTTP 302 redirect response

SYNOPSIS

       #include <cgi/cgi.h>

       void cgi_vredirect (CGI *cgi, int uri, const char *fmt, va_list ap);

ARGUMENTS

       cgi - cgi struct
       uri - whether the URL is full (1) or path only (0)
       fmt - printf format string
       ap - stdarg va_list

DESCRIPTION

       cgi_vredirect is mostly used internally, but can be used if you need a varargs version of the function.

RETURN VALUE

       None

SEE ALSO

       cgi_debug_init(3),  cgi_parse(3),  cgi_destroy(3),  cgi_js_escape(3),  cgi_html_escape_strfunc(3), cgi_register_strfuncs(3), cgi_output(3),
       parse_rfc2388(3), cgi_url_validate(3), open_upload(3), cgi_cs_init(3), cgi_url_escape_more(3), cgi_html_strip_strfunc(3), cgi_neo_error(3),
       cgi_redirect(3),  cgi_filehandle(3),  cgi_register_parse_cb(3),	cgi_url_escape(3),  cgi_init(3), cgi_redirect_uri(3), cgi_cookie_clear(3),
       cgi_url_unescape(3), cgi_vredirect(3), cgi_display(3),  cgi_html_ws_strip(3),  cgi_error(3),  cgi_cookie_set(3),  cgi_text_html_strfunc(3),
       cgi_cookie_authority

ClearSilver							   12 July 2007 						  cgi_vredirect(3)

Security Advisories (RSS)