Re: [Full-disclosure] Universal PDF XSS After Party(posible solution)

2007-01-04 Thread Darren Bounds
rsion to version. -- Thank you, Darren Bounds On 1/4/07, Noe Espinoza M. <[EMAIL PROTECTED]> wrote: We need to force to the users do download the pdf files And we can add to the httpd.conf or .htaccess the next code SetEnvIf Request_URI "\.pdf$" requested_pdf=pdf Header ad

Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability

2006-07-10 Thread Darren Bounds
Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability July 10, 2006 Product Overview: The Juniper Networks (Redline) DX application acceleration platform delivers a complete data center acceleration solution for web-enabled and IP-based business applications. Vulnerabil

Cisco Secure ACS Weak Session Management Vulnerability

2006-06-23 Thread Darren Bounds
ecure ACS to restrict access to the web interface from only 'secure' network address space. Cisco has confirmed this vulnerability and is working on a patch. References: http://www.cisco.com/en/US/products/sw/secursw/ps2086/index.html -- Thank you, Darren Bounds

Trend Micro Control Manager (TMCM) Persistent XSS Vulnerability

2006-06-23 Thread Darren Bounds
ected Versions: Trend Micro Control Manager 3.5 Olders versions may also be affected. Workarounds: Control network access to the TMCM web console. References: http://www.trendmicro.com/en/products/management/tmcm/ Vendor was contacted on several occasions with no response. -- Thank you, Darren Bounds