VMSA-2009-0015 : VMware hosted products and ESX patches resolve two security issues

a. Mishandled exception on page faults An improper setting of the exception code on page faults may allow for local privilege escalation on the guest operating system. This vulnerability does not affect the host system. VMware would like to thank Tavis Ormandy and Julien Tinnes of the Google...

CVE-2009-3733

creationtimestamp| type| source ---|---|--- 2009-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33310 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vmware/vmwareserverdirtrav.rb 2024-02-16 14:23:20+00:00...

CVE-2008-3733

Stack-based buffer overflow in EO Video eo-video 1.36 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a .eop aka playlist file with a ProjectElement element that contains a long Name element...

CVE-2008-3733

Summary: EO Video (eo-video) 1.36 is affected by a stack-based buffer overflow through a malformed .eop (playlist) file, where a ProjectElement contains a long Name element. Impact: remote attackers could crash the application or execute arbitrary code. Details available: The vulnerability is doc...

CVE-2007-1157

Cross-site request forgery CSRF vulnerability in jmx-console/HtmlAdaptor in JBoss allows remote attackers to perform privileged actions as administrators via certain MBean operations, a different vulnerability than CVE-2006-3733...

WFTPD <= 3.23 Multiple Command Remote Overflow

Binary data 3733.prm...

CS-MARS JBoss jmx-console access

Added: 07/26/2006 CVE: CVE-2006-3733 BID: 19075 OSVDB: 27419 Background The Cisco Security Monitoring, Analysis, and Response System CS-MARS recognizes and correlates network attacks. Problem CS-MARS includes the JBoss web application server with insufficient access control to the jmx-console...

CVE-2006-3733

jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System CS-MARS before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp...

CVE-2006-3733

The CVE describes a vulnerability in CS-MARS where jmx-console/HtmlAdaptor in the JBoss web server allows a remote attacker to gain CS-MARS administrator privileges and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name. Affected product is Cisco CS-M...

CVE-2006-3733

jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System CS-MARS before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp...

CVE-2005-3733

The Internet Key Exchange version 1 IKEv1 implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as...

CVE-2005-3733

The Internet Key Exchange version 1 IKEv1 implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as...

CVE-2005-3733

Technical details for CVE-2005-3733 are not publicly provided in the connected documents. The sources reference related CVEs (CVE-2005-3666/3667/3668/3732) but do not specify Juniper JUNOS/E-series specifics or IKEv1 conditions for this CVE.