136 matches found
Microsoft Windows故障切换集群不安全文件权限漏洞（MS10-086）
BUGTRAQ ID: 43818 CVE ID: CVE-2010-3223 Microsoft Windows是微软发布的非常流行的操作系统。 Failover Cluster Manager用户界面处理共享集群磁盘权限的方式存在篡改漏洞，起因是Failover Cluster Manager在向集群添加磁盘时使用了不安全的默认权限。当管理员向共享集群添加磁盘时，Failover Cluster Manager对共享的集群磁盘设置权限的方式允许非授权用户获得对故障切换集群磁盘上的管理共享的读写/删除访问。 Microsoft Windows Server 2008 R2 临时解决方法...
CVE-2010-3223
The CVE-2010-3223 issue affects Microsoft Windows Server 2008 R2 in a failover cluster. The Failover Cluster Manager (MSCS) UI sets permissions on administrative shares of new shared cluster disks using unsecured default ACLs, potentially allowing unauthorized users to read, modify, or delete dat...
CVE-2009-3223
CVE-2009-3223 describes an SQL injection in the Inout Adserver component, specifically in the file ppc-add-keywords.php . The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the id parameter, due to improper input handling in that script. The CVSSv2 base scor...
Fedora Update for drupal FEDORA-2008-6415
Check for the Version of drupal OpenVAS Vulnerability Test Fedora Update for drupal FEDORA-2008-6415 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for drupal FEDORA-2008-6415
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2008-3223
SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."...
CVE-2008-3223
SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."...
CVE-2008-3223
CVE-2008-3223 is a SQL injection in the Drupal 6.x Schema API prior to 6.3. The vulnerability arises from an inappropriate placeholder for numeric fields, enabling remote attackers to execute arbitrary SQL commands. The initial description and connected documents identify Drupal 6.x before 6.3 as...
Fedora 9 : drupal-6.3-1.fc9 (2008-6415)
Update to 6.3, security fixes: SA-2008-044 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Note that Tenable Network Security has extracted the preceding description...
Fedora 8 : drupal-5.8-1.fc8 (2008-6411)
Update to 5.8, security fixes: SA-2008-044 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Note that Tenable Network Security has extracted the preceding description...
CVE-2007-3223
CVE-2007-3223 affects Sun Solaris 10 before 20070613: the NFS server is vulnerable to remote denial of service via certain XDR data in NFS requests, likely tied to processing in xdr_bool and xdrmblk_getint32. Affected product: Solaris 10 (NFS server); vulnerability type: unspecified in the descri...
[Full-disclosure] Layered Defense Advisory: Format String Vuln in CA eTrust
=============================================================== Layered Defense Advisory 27 June 2006 =============================================================== 1 Affected Software Computer Associates: eTrust Antivirus 8.0 Computer Associates: eTrust PestPatrol 8.0 Computer Associates:...
CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability
Title: CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability CA Vulnerability ID: 34325 CA Advisory Date: 2006-06-26 Discovered By: Deral Heiland www.layereddefense.com Impact: Attackers can cause a denial of service condition or possibly execute arbitrary code...
CVE-2006-3223
Format string vulnerability in CA Integrated Threat Management ITM, eTrust Antivirus eAV, and eTrust PestPatrol ePP r8 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a scan job with format strings in the description field...
CVE-2005-3223
The CVE refers to a vulnerability in Rising Antivirus (unspecified versions) where a malware-laden executable in a specially crafted RAR file with malformed central and local headers can bypass virus detection. The issue arises during archive parsing, allowing the file to be opened by some tools ...
