376 matches found
CVE-2010-4299
Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management ZHM allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400...
Heap overflow
Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management ZHM allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400...
Novell ZENworks Handheld Management ZfHIPCND.exe Unspecified Buffer Overflow
A vulnerability exists in the server ZfHIPCND.exe, which handles the data received on TCP port 2400. An attacker can overflow a buffer on a heap belonging to the server and possibly execute arbitrary code with SYSTEM privileges. Authentication is not required to exploit this vulnerability. C...
CVE-2010-4299
Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management ZHM allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400...
PT-2010-5407
Name of the Vulnerable Software and Affected Versions Novell Zenworks 7 Handheld Management ZHM affected versions not specified Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a crafted request to the TCP port 2400. Recommendations At...
CVE-2010-4299: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management ZHM allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400...
Novell ZENworks Handheld Management ZfHIPCND.exe Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENworks Handheld Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within module ZfHIPCND.exe. This process is responsible for handling the...
CVE-2010-2400
CVE-2010-2400 is reported as an unspecified local vulnerability in Oracle Solaris 9/10 and OpenSolaris, affecting Kernel/Filesystem and hindering availability. The CVE entry is supported by Oracle’s July 2010 Critical Patch Update documentation, which lists Solaris kernel/Filesystem fixes among 5...
Design/Logic Flaw
Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the...
Default credentials
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...
Design/Logic Flaw
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attacker...
CVE-2010-0595
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...
CVE-2010-0596
CVE-2010-0596 affects Cisco Network Building Mediator (NBM) and legacy Richards‑Zeta Mediator 2500 environments running Mediator Framework releases prior to 3.1.1. Affects NBM-2400/NBM-4800 and Mediator Framework components; described vulnerability allows remote authenticated users to read or mod...
CVE-2010-0597
CVE-2010-0597 affects Cisco Network Building Mediator (NBM) products via the Mediator Framework. Vulnerable are Cisco NBM-2400/4800 and Richards‑Zeta Mediator 2500 firmware releases: Mediator Framework 1.5.x before 1.5.1.build.14-eng, 2.2.x before 2.2.1.dev.1, and 3.0.x before 3.0.9.release.1. An...
CVE-2010-0598
CVE-2010-0598 affects the Cisco Network Building Mediator (NBM-2400/NBM-4800) and the Richards-Zeta Mediator 2500, where HTTP sessions from operator workstations are not encrypted, allowing a remote attacker to sniff credentials of administrators. The vulnerability is one of multiple related issu...
CVE-2010-0598: Undefined Security Weakness
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attacker...
CVE-2010-0595: Undefined Security Weakness
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...
CVE-2010-0600: Undefined Security Weakness
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not properly restrict network access to an unspecified configuration file, which...
CVE-2010-0597: Undefined Security Weakness
Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the...
CVE-2010-0599: Undefined Security Weakness
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt XML RPC sessions from operator workstations, which allows remote...