Heap
14-04-09, 02:55
NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator privileges via a direct request.
More... (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-6701)
More... (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-6701)