what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

CX-2007-05.txt

Posted Jul 12, 2007

Authored by Daniel Weber

Calyptix Security Advisory - Multiple versions of eSoft's InstaGate EX2 UTM device are vulnerable to cross-site request forgery. The vulnerable firmwares include 3.1.20031001, 3.1.20060921, and 3.1.20070605. Other eSoft products were not tested. This vulnerability allows an attacker to run commands on the web interface if the attacker can get the eSoft user to view a hostile web page while logged into his eSoft. These actions could include opening up remote access.

tags | advisory, remote, web, csrf

SHA-256 | ff2820b979ab7a729e267c92c50a8b221b9ffde20769cec07007eaf16aff470b

Download | Favorite | View

Related Files

No related files