CVE-2006-5742
https://notcve.org/view.php?id=CVE-2006-5742
The AirMagnet Enterprise console and Remote Sensor console (Laptop) in AirMagnet Enterprise before 7.5 build 6307 allows remote attackers to inject arbitrary web script or HTML from a certain embedded Internet Explorer object into an SSID template value, aka "Cross-Application Scripting (XAS)". La consola de AirMagnet Enterprise y la consola de Sensor Remoto (Laptop) en AirMagnet Enterprise anterior 7.5 construcción 6307 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección desde un determinado objeto embebido de Internet Explorer en un valor de plantilla SSID, también conocido como "ejecución de secuencias de comandos en aplicaciones cruzadas" o XAS (Cross-Application Scripting) • http://secunia.com/advisories/22475 http://www.securityfocus.com/archive/1/449119/100/200/threaded http://www.securityfocus.com/archive/1/449739/100/100/threaded http://www.securityfocus.com/archive/1/451978/100/100/threaded http://www.securityfocus.com/bid/20602 •
CVE-2006-5746
https://notcve.org/view.php?id=CVE-2006-5746
The console in AirMagnet Enterprise before 7.5 build 6307 does not properly validate the Enterprise Server certificate, which allows remote attackers to read network traffic via a man-in-the-middle (MITM) attack, possibly related to the use of self-signed certificates. La consola en AirMagnet Enterprise anterior a 7.5 construccion 6307 no valida adecuadamente el certificado de Enterprise Server, lo cual permite a atacantes remotos leer tráfico de red mediante un ataque de hombre-en-medio (man-in-the-middle o MITM), posiblemente relacionado con el uso de certificados autofirmados. • http://secunia.com/advisories/22475 http://www.osvdb.org/29921 http://www.securityfocus.com/archive/1/449119/100/200/threaded http://www.securityfocus.com/archive/1/449739/100/100/threaded http://www.securityfocus.com/archive/1/451978/100/100/threaded http://www.securityfocus.com/bid/20602 •