IBM InfoSphere Data Replication Dashboard User Enumeration

The version of IBM InfoSphere Data Replication Dashboard hosted on the remote web server displays its list of users without requiring authentication. A remote, unauthenticated attacker could use this information to mount further attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

IBM InfoSphere Data Replication Dashboard Detection

IBM InfoSphere Data Replication Dashboard, a component of InfoSphere Data Replication, is hosted on the remote web server. This web application monitors the health of replication and event publishing. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65892;...

IBM InfoSphere Data Replication Dashboard Unpassworded User Enumeration

The version of IBM InfoSphere Data Replication Dashboard hosted on the remote web server displays its list of users that can authenticate without using a password. A remote, unauthenticated attacker could use this information to gain unauthorized access to the application. %NASLMINLEVEL 70300 C...

IBM InfoSphere Data Replication Dashboard Default Credentials

The version of IBM InfoSphere Data Replication Dashboard on the remote web server is secured using default credentials dashboarduser / dashboarduser. A remote attacker could exploit this to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

postgresql: security and bugfix update to 9.0.13 (important)

Postgresql was updated to version 9.0.13 bnc812525: CVE-2013-1899: Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with "-" could be crafted to damage or destroy files within the server's data directory, even if the request is...

Fedora Update for mongodb FEDORA-2013-4531

Check for the Version of mongodb OpenVAS Vulnerability Test Fedora Update for mongodb FEDORA-2013-4531 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for mongodb FEDORA-2013-4539

Check for the Version of mongodb OpenVAS Vulnerability Test Fedora Update for mongodb FEDORA-2013-4539 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 18 Update: mongodb-2.2.3-4.fc18

Mongo from "humongous" is a high-performance, open source, schema-free document-oriented database. MongoDB is written in C++ and offers the follow ing features: Collection oriented storage: easy storage of object/JSON-style data Dynamic queries Full index support, including on inner objects and...

postgresql92: Various security fixes. Update to 9.2.4. (important)

postgresql was updated to version 9.2.4 bnc812525: CVE-2013-1899: Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with "-" could be crafted to damage or destroy files within the server's data directory, even if the request is...

CVE-2013-1901

PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the 1 pgstartbackup or 2 pgstopbackup functions...

Design/Logic Flaw

PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the 1 pgstartbackup or 2 pgstopbackup functions...

CVE-2013-1901

CVE-2013-1901 concerns PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9, where REPLICATION privilege checks fail to verify that the current user is authenticated. This allows remote authenticated users to bypass backup restrictions by invoking pg_start_backup() or pg_stop_backup(), potentiall...

CVE-2012-4861

The web server in InfoSphere Data Replication Dashboard in IBM InfoSphere Replication Server 9.7 and 10.1 through 10.1.0.4 allows remote authenticated users to list directories via a direct request for a directory URL...

CVE-2012-4861

IBM InfoSphere Data Replication Dashboard (InfoSphere Replication Server) is affected by CVE-2012-4861: the dashboard web server can disclose directory listings when a specific directory URL is requested. Affected versions are 9.7 and 10.1 up to 10.1.0.4. The root cause is a directory listing vul...

CVE-2012-4861

The web server in InfoSphere Data Replication Dashboard in IBM InfoSphere Replication Server 9.7 and 10.1 through 10.1.0.4 allows remote authenticated users to list directories via a direct request for a directory URL...

Tips for DAG Exchange Backup and Replication in vSphere

vSphere Snapshot Improvements This article was initially written when vSphere 5 snapshot operations were known and expected to cause small amounts of I/O stun to a VM's guest OS. Improvements in the latter vSphere versions, including significant changes to snapshot operation methodology in vSpher...

Error “Unexpected VHD Feature Mask ‘6’” on Hyper-V backup or replication job

Challenge The feature mask 6 error is Hyper-V specific. This KB covers that error and how to resolve it. Cause Feature mask 6 errors most often occur when a Hyper-V VM was a Physical to Virtual conversion using third party software. The issue is that some third party converter software creates th...

CentOS Update for 389-ds-base CESA-2013:0628 centos6

Check for the Version of 389-ds-base OpenVAS Vulnerability Test CentOS Update for 389-ds-base CESA-2013:0628 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20130311)

A flaw was found in the way LDAPv3 control data was handled by 389 Directory Server. If a malicious user were able to bind to the directory even anonymously and send an LDAP request containing crafted LDAPv3 control data, they could cause the server to crash, denying service to the directory...

389 security update

CentOS Errata and Security Advisory CESA-2013:0628 Updated 389-ds-base packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scori...