CVE-2016-2046

Description

References

• packetstormsecurity.com/files/135709/Sophos-UTM-9-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2016/Feb/60 · Exploit
• halock.com/blog/cve-2016-2046-cross-site-scripting-sophos-utm-9 · Exploit
• securitytracker.com/id/1035048 · Third Party Advisory

unified threat management software의 다른 취약점

• CVE-2016-7442보통 4.4The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information …
• CVE-2016-7397보통 4.4The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information …
• CVE-2015-7547높음 8.1Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc …
• CVE-2016-0778높음 8.1The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certa…
• CVE-2016-0777보통 6.5The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensit…