CVE-2010-0715
published 2010-02-26CVE-2010-0715: Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management…
PriorityP423medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.31%
67.4th percentile
Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the query string.
Affected
77 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | lotus_quickr | — | — |
| ibm | lotus_quickr | — | — |
| ibm | lotus_quickr | — | — |
| ibm | lotus_quickr | — | — |
| ibm | lotus_quickr | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
| ibm | lotus_web_content_management | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
GPL NETBIOS DCERPC Remote Activation bind attempt
suricata·2010-09-23
CVE-2003-0528 GPL NETBIOS DCERPC Remote Activation bind attempt
GPL NETBIOS DCERPC Remote Activation bind attempt
Rule: alert tcp $EXTERNAL_NET any -> $HOME_NET 135 (msg:"GPL NETBIOS DCERPC Remote Activation bind attempt"; flow:established,to_server; content:"|05|"; content:"|0B|"; within:1; distance:1; byte_test:1,&,1,0,relative; content:"|B8|J|9F|M|1C|}|CF 11 86 1E 00| |AF|n|7C|W"; within:16; distance:29; tag:session,5,packets; reference:bugtraq,8234; reference:bugtraq,8458; reference:cve,2003-0528; reference:cve,2003-0605; reference:cve,2003-0715; reference:nessus,11798; reference:nessus,11835; reference:url,www.microsoft.com/technet/security/bulletin/MS03-039.mspx; classtype:attempted-admin; sid:2102251; rev:17; metadata:created_at 2010_09_23, cve CVE_2003_0528, signature_severity Informational, updated_at 2024_03_08;)
No public exploits indexed.
No writeups or analysis indexed.
http://www-01.ibm.com/support/docview.wss?uid=swg21421469http://www.hacktics.com/content/advisories/AdvIBM20100224.htmlhttp://www.securityfocus.com/archive/1/509744/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/56602http://www-01.ibm.com/support/docview.wss?uid=swg21421469http://www.hacktics.com/content/advisories/AdvIBM20100224.htmlhttp://www.securityfocus.com/archive/1/509744/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/56602
2010-02-26
Published