CVE-2016-2046

概要

参考情報

• packetstormsecurity.com/files/135709/Sophos-UTM-9-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2016/Feb/60 · Exploit
• halock.com/blog/cve-2016-2046-cross-site-scripting-sophos-utm-9 · Exploit
• securitytracker.com/id/1035048 · Third Party Advisory

unified threat management software のその他の脆弱性

• CVE-2016-7442中 4.4The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information …
• CVE-2016-7397中 4.4The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information …
• CVE-2015-7547高 8.1Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc …
• CVE-2016-0778高 8.1The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certa…
• CVE-2016-0777中 6.5The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensit…