Novell ZENworks Handheld Management ZfHIPCND.exe Unspecified Buffer Overflow

A vulnerability exists in the server ZfHIPCND.exe, which handles the data received on TCP port 2400. An attacker can overflow a buffer on a heap belonging to the server and possibly execute arbitrary code with SYSTEM privileges. Authentication is not required to exploit this vulnerability. C...

CVE-2010-4299

Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management ZHM allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400...

Novell ZENworks Handheld Management ZfHIPCND.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENworks Handheld Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within module ZfHIPCND.exe. This process is responsible for handling the...

CVE-2010-2400

CVE-2010-2400 is reported as an unspecified local vulnerability in Oracle Solaris 9/10 and OpenSolaris, affecting Kernel/Filesystem and hindering availability. The CVE entry is supported by Oracle’s July 2010 Critical Patch Update documentation, which lists Solaris kernel/Filesystem fixes among 5...

Default credentials

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...

Design/Logic Flaw

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attacker...

Design/Logic Flaw

Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the...

CVE-2010-0596

CVE-2010-0596 affects Cisco Network Building Mediator (NBM) and legacy Richards‑Zeta Mediator 2500 environments running Mediator Framework releases prior to 3.1.1. Affects NBM-2400/NBM-4800 and Mediator Framework components; described vulnerability allows remote authenticated users to read or mod...

CVE-2010-0595

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...

CVE-2010-0597

CVE-2010-0597 affects Cisco Network Building Mediator (NBM) products via the Mediator Framework. Vulnerable are Cisco NBM-2400/4800 and Richards‑Zeta Mediator 2500 firmware releases: Mediator Framework 1.5.x before 1.5.1.build.14-eng, 2.2.x before 2.2.1.dev.1, and 3.0.x before 3.0.9.release.1. An...

CVE-2010-0598

CVE-2010-0598 affects the Cisco Network Building Mediator (NBM-2400/NBM-4800) and the Richards-Zeta Mediator 2500, where HTTP sessions from operator workstations are not encrypted, allowing a remote attacker to sniff credentials of administrators. The vulnerability is one of multiple related issu...

CVE-2009-2400

SQL injection vulnerability in the PHP comphp component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2009-2400

CVE-2009-2400 is a documented SQL injection in the Joomla! PHP component com_php, exploitable via the id parameter to index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network attack vector and low c...

CVE-2008-2400

The connected Nessus entry confirms a Local Privilege Escalation in stunnel prior to 4.23 when run as a Windows service, allowing a local user to gain LocalSystem privileges due to an unspecified error. Affected software: stunnel.exe running as a service on Windows; root cause: unspecified error ...

CVE-2003-1386

AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file...

CVE-2003-1386

Affected product: Axis 2400 Video Server 2.00–2.33. The vulnerability allows remote attackers to obtain sensitive information by requesting /support/messages, which displays the server’s /var/log/messages log. This is a network-based information disclosure with low attack complexity and no authen...

CVE-2007-2400

Apple Safari affected: Safari 3 Beta up to 3.0.2 and iPhone Safari before 1.0.1. Root cause is a race condition during page updates and HTTP redirects, enabling cross-domain access and cross-site scripting via same-origin violations. Impact described as bypassing JavaScript security model and mod...

CVE-2007-2239

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control aka CamImage ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service...

CVE-2006-2400

The CVE-2006-2400 entry affects Outgun 1.0.3 bot version 2 and earlier, where the leetnet functions (leetnet/rudp.cpp) are vulnerable to crafted large packets sent over the network. This can cause an unhandled exception and result in a denial of service (game interruption). The available sources ...

CVE-2004-2400

Summary: CVE-2004-2400 affects WinFTP Server 1.6. The vulnerability arises because credentials (username and password) are stored in plaintext in the file data\user.wfd, allowing local users to obtain credentials. The NVD reports a low base score (2.1) with LOCAL attack vector and PARTIAL confide...