Symantec Workspace Streaming ManagementAgentServer.putFile XMLRPC Request Arbitrary File Upload

This module exploits a code execution flaw in Symantec Workspace Streaming. The vulnerability exists in the ManagementAgentServer.putFile XMLRPC call exposed by the asagent.exe service, which allows for uploading arbitrary files under the server root. This module abuses the auto deploy feature in...

VMware Horizon Workspace Detection

Binary data vmwarehorizonworkspacedetect.nbin...

VMware Horizon Workspace 1.8 < 1.8.1 OpenSSL Library Multiple Vulnerabilities (VMSA-2014-0004) (Heartbleed)

The version of VMware Horizon Workspace installed on the remote host is version 1.8.x prior to 1.8.1. It is, therefore, reportedly affected by the following vulnerabilities in the OpenSSL library : - An error exists related to the implementation of the Elliptic Curve Digital Signature Algorithm...

CVE-2014-2463

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect integrity via unknown vectors related to Workspace Web Application, a different vulnerability than CVE-2014-4232...

CVE-2014-2439

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Workspace Web Application...

Buffer overflow

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect integrity via unknown vectors related to Workspace Web Application, a different vulnerability than CVE-2014-4232...

Buffer overflow

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Workspace Web Application...

CVE-2014-2439

CVE-2014-2439 affects Oracle Secure Global Desktop (SGD) in Oracle Virtualization 5.0/5.1, with a vulnerability in the Workspace Web Application that could impact confidentiality and integrity via unknown vectors. The linked sources (NVD/NVD-related entries, Nessus plugin notes) confirm the issue...

CVE-2014-2463

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect integrity via unknown vectors related to Workspace Web Application, a different vulnerability than CVE-2014-4232...

PT-2014-4694

Name of the Vulnerable Software and Affected Versions Oracle Virtualization versions 5.0 through 5.1 Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors related to the Workspace Web Application in the Oracle Secure Global Deskto...

PT-2014-4712

Name of the Vulnerable Software and Affected Versions Oracle Virtualization versions 4.63, 4.71, 5.0, and 5.1 Description The issue affects the integrity of the system, related to the Workspace Web Application in the Oracle Secure Global Desktop component. The exact vectors of the attack are...

CVE-2014-2463: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect integrity via unknown vectors related to Workspace Web Application, a different vulnerability than CVE-2014-4232...

CVE-2014-2439: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Workspace Web Application...

Description of the SharePoint Workspace 2010 update 2760601: February 11, 2014

None None...

Oracle Secure Global Desktop Multiple Vulnerabilities (January 2014 CPU)

The remote host has a version of Oracle Secure Global Desktop installed that is affected by multiple vulnerabilities : - Specially crafted requests sent with chunked transfer encoding could allow a remote attacker to perform a 'limited' denial of service attack on the Tomcat server. CVE-2012-3544...

Symantec Workspace Virtualization Agent Detection

Binary data symantecwvinstalled.nbin...

Symantec Workspace Virtualization 6.x < 6.4.1953 Local Privilege Escalation (SYM13-011)

The remote Windows host is running a version of Symantec Workspace Virtualization 6.x prior to 6.4.1953. It is, therefore, affected by a local privilege escalation vulnerability due to a failure to sanitize user-supplied input. An attacker could potentially exploit this vulnerability to run...

CVE-2014-0419

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization SGD before 4.63 with December 2013 PSU, 4.71, 5.0 with December 2013 PSU, and 5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization SGD before 4.63 with December 2013 PSU, 4.71, 5.0 with December 2013 PSU, and 5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...

CVE-2014-0419

Unspecified vulnerability in the Oracle Secure Global Desktop SGD component in Oracle Virtualization SGD before 4.63 with December 2013 PSU, 4.71, 5.0 with December 2013 PSU, and 5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...