KLA10056 RLF vulnerability in Alcatel-Lucent OmniVista 4760

A directory traversal vulnerability was found in OmniVista. By exploiting this vulnerability malicious users can read local files. This vulnerability can be exploited from the network at a point related to NMS server via specially designed GET request. Original advisories Alcatel bulletin Related...

DDIVRT-2010-30 Alcatel-Lucent OmniVista 4760 NMS 'lang' Directory Traversal Vulnerability [ CVE-2011-0345 ]

Title: DDIVRT-2010-30 Alcatel-Lucent OmniVista 4760 NMS 'lang' Directory Traversal Vulnerability CVE-2011-0345 Severity: High Date Discovered:10/29/2010 Discovered By: Digital Defense, Inc. Vulnerability Research Team Additional Discovered By: r@b13$ Vulnerability Description: The Alcatel-Lucent...

Alcatel-Lucent OmniVista 4760 Network Management System "lang"目录遍历漏洞

BUGTRAQ ID: 46624 CVE ID: CVE-2011-0345 Alcatel-Lucent OmniVista 4760 Network Management System可提供网络安全和优化的管理应用程序集。 Alcatel-Lucent OmniVista 4760 Network Management System在实现上存在目录遍历漏洞，攻击者可利用此漏洞使用目录遍历字符串从受影响系统中检索任意文件。 Alcatel Alcatel-Lucent OmniVista 4760 Network Management S 5.1.06.03 Alcatel...

CVE-2010-0345

The CVE-2010-0345 entry concerns a Cross-site scripting (XSS) vulnerability in the Majordomo extension (version 1.1.3 and earlier) for TYPO3. The affected component is the Majordomo extension within TYPO3, with an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via un...

CentOS Security Advisory CESA-2009:0345 (ghostscript)

The remote host is missing updates to ghostscript announced in advisory CESA-2009:0345. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CentOS Security Advisory CESA-2009:0345 (ghostscript)

The remote host is missing updates to ghostscript announced in advisory CESA-2009:0345. CESA-2009:0345 63705 8 $Id: ovcesa20090345.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0345 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

CVE-2009-0345

Unspecified vulnerability in the Embedded Lights Out Manager ELOM on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor SP commands via unknown vectors, aka Bug ID...

CVE-2009-0345

CVE-2009-0345 affects Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM). The vulnerability lies in ELOM prior to SP/BMC firmware 3.20, enabling remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor (SP) commands via unknown vectors. The iss...

CVE-2008-0345

CVE-2008-0345 : The Connected documents confirm an unspecified vulnerability in the Core RDBMS component of Oracle Database 11.1.0.6. The description provides no detail on the exact affected sub-component, root cause, impact, or exploitation method, only stating “unknown impact” and “remote attac...

CVE-2008-0345

Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08...

CVE-2007-0345

The CVE-2007-0345 description is supported by connected records: on Mac OS X 10.4.8, three utilities located in /Applications/Utilities (Activity Monitor.app/Contents/Resources/pmTool, Keychain Access.app/Contents/Resources/kcproxy, and ODBC Administrator.app/Contents/Resources/iodbcadmintool) ha...

CVE-2005-0345

CVE-2005-0345 affects php-fusion 4.x where viewthread.php does not validate (1) forum_id or (2) forum_cat parameters, enabling remote attackers to view protected forums by supplying a thread_id. Reported impact is partial confidentiality loss; exploitation appears through crafted thread access ra...

CVE-2005-0345

viewthread.php in php-fusion 4.x does not check the 1 forumid or 2 forumcat parameters, which allows remote attackers to view protected forums via the threadid parameter...

PHP-Fusion < 5.00 viewthread.php Arbitrary Message Thread / Forum Access

A vulnerability exists in the version of PHP-Fusion installed on the remote host that may allow an attacker to read the contents of arbitrary forums and threads, regardless of the attacker's privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-2004-0345

Affected software: Red Faction client 1.20 and earlier. The issue is a buffer overflow that allows a remote server to execute arbitrary code via a long server name. This CVE entry does not include explicit remediation details in the provided documents. The exploitation status is not stated.

CVE-2003-0345

Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required...

CVE-2003-0345

The CVE-2003-0345 issue affects Microsoft Windows SMB/CIFS implementations (Windows XP, 2000, NT). The root cause is a buffer overflow in the SMB packet handling where an incoming packet specifies a smaller buffer length than required, enabling a remote attacker to cause a denial of service and, ...

CVE-2002-0345

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges...

CVE-2002-0345

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges...

CVE-2002-0345

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, enabling privilege escalation if an attacker accesses the registry. The CVE-2002-0345 entry documents this plaintext credential storage as the underlying issue with a base impact of partial confide...