91 matches found
IBM Tivoli存储管理器远程堆溢出漏洞
BUGTRAQ ID: 34077 CVECAN ID: CVE-2008-4563 Tivoli Storage Manager是一种遵循ANSI SAN标准的可扩展解决方案，用于发现、监控和管理企业SAN架构组件，并可分配和自动操纵企业的附加磁盘存储资源。 Tivoli存储管理器dsmsvc.exe守护程序的adsmdll.dll库存在堆溢出漏洞。有漏洞的函数分配了固定大小的堆缓冲区用于存储会话相关数据，然后将用户提供的值用作了拷贝操作的字节长度。由于缺少边界检查，未经认证的远程攻击者可以通过提交恶意请求触发堆溢出，导致拒绝服务或执行任意代码。 IBM Tivoli Storage...
CVE-2008-4563
Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon dsmsvc.exe in the backup server in IBM Tivoli Storage Manager TSM Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted...
CVE-2008-4563
CVE-2008-4563 is a heap-based buffer overflow in adsmdll.dll 5.3.7.7296 used by the dsmsvc.exe daemon in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier, and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0. A remote attacker can exploit a crafted length value to execute arbi...
CVE-2007-4563
Cosminexus Manager in Cosminexus Application Server 06-50 and later is affected by CVE-2007-4563, where backend processes for logical J2EE servers may receive incorrect group permissions. This could allow local users to gain privileges. The vulnerability is described as a local privilege escalati...
CVE-2006-4563
CVE-2006-4563 details a cross-site scripting (XSS) flaw in the MyHeadlines before 4.3.2 module for PHP-Nuke. The vulnerability can be exploited remotely to inject arbitrary web script or HTML via the myh_op parameter to modules.php. Per the NVD entry, the CVSSv2 base score is 6.8 (MEDIUM) with ne...
CVE-2005-4563
SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the loginid parameter, a different vulnerability than CVE-2005-3875...
CVE-2005-4563
CVE-2005-4563 describes a SQL injection vulnerability in Enterprise Heart Enterprise Connector 1.0.2 (main.php) allowing remote attackers to execute arbitrary SQL via the loginid parameter and bypass login authentication. This is a different vulnerability from CVE-2005-3875, which covers multiple...
CVE-2018-4563
This CVE ID is rejected/not used and does not represent an active vulnerability entry.
