197 matches found
LANDesk Management Suite Alert Service buffer overflow
Added: 04/23/2007 CVE: CVE-2007-1674 BID: 23483 OSVDB: 34964 Background LANDesk Management Suite automates systems and security management tasks across a network. It runs an Alert Service which listens for communication on port 65535/UDP. Problem A buffer overflow vulnerability in the Alert Servi...
CVE-2007-1674
CVE-2007-1674 is a stack-based buffer overflow in LANDesk Management Suite 8.7’s Alert Service (aolnsrvr.exe) that can be triggered by a crafted UDP packet to port 65535, enabling remote code execution. Public materials indicate a Metasploit module and multiple exploit references exist (e.g., Exp...
LANDesk Management Suite 8.7 Alert Service Buffer Overflow
This module exploits a stack buffer overflow in LANDesk Management Suite 8.7. By sending an overly long string to the Alert Service, a buffer is overwritten and arbitrary code can be executed. This module requires Metasploit: https://metasploit.com/download Current source:...
LANDesk Management Suite 8.7 Alert Service - 'AOLSRVR.exe' Remote Buffer Overflow
source: https://www.securityfocus.com/bid/23483/info LANDesk Management Suite is prone to a remote stack-based buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue t...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 login or 2 mailaddress field in Register.php, or the 3 searchauthor, 4 mode, 5 startyear, 6 endyear, or 7 datetype field in Search.php, a different...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 cat, 2 num, and 3 search parameters to a category.php, and the 4 slideshow, 5 showmetadata, and 6 start parameters to b picture.php, a different...
CVE-2006-1674
Cross-site scripting XSS vulnerability in search.php in PHPWebGallery 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-1675...
CVE-2006-1674
CVE-2006-1674 affects PHPWebGallery 1.4.1, with a Cross-site Scripting (XSS) flaw in search.php where the id parameter can inject arbitrary script/HTML. The Red Hat advisory confirms the same vulnerability but does not provide patch details in the excerpt; other connected records reiterate the is...
CVE-2006-1674
Cross-site scripting XSS vulnerability in search.php in PHPWebGallery 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-1675...
CVE-2002-1674
CVE-2002-1674 affects FreeBSD procfs prior to 4.5. The vulnerability arises when a local user removes a file that the kernel’s fstatfs function refers to, potentially causing a kernel panic (local DoS). The provided documents do not include concrete exploit details or remediation steps.
CVE-2005-1674
CVE-2005-1674 : The provided documents describe a Cross-Site Request Forgery in Help Center Live (view.php) that allows a remote attacker to perform administrator actions via a link or IMG tag. The Red Hat, CVE, CVE List, Exploit-DB, and Nessus entries concur on the vulnerability class and affect...
CVE-2005-1674
Cross-Site Request Forgery CSRF vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php...
CVE-2005-1674
Cross-Site Request Forgery CSRF vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php...
CVE-2004-1674
The CVE-2004-1674 entry concerns Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 (and possibly other versions). The vulnerability is in viewaction.html, where input parameters originalfolder and messageid enable remote attackers to perform file operations. Specifically, attackers can delete a...
CVE-2004-1674
viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to 1 delete arbitrary files via the originalfolder parameter or 2 move arbitrary files via the messageid parameter...
CVE-2004-1674
viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to 1 delete arbitrary files via the originalfolder parameter or 2 move arbitrary files via the messageid parameter...