Stable Channel Update

The stable channel has been updated to 50.0.2661.94 for Windows, Mac, and Linux. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library th...

Asseco SEE iBank FX Client 2.0.9.3 - Local Privilege Escalation

Asseco SEE iBank FX Client 2.0.9.3 - Local Privilege Escalation Asseco SEE iBank FX Client = 2.0.9.3 Local Privilege Escalation Vulnerability Vendor: Asseco SEE Product web page: http://www.asseco.com Affected version: 2.0.9.3 Build 22.06.2011 - Desktop/Enterprise Edition 1.2 1.1.5.1270 Service...

CVE-2013-5168

CVE-2013-5168 affects Apple Mac OS X before 10.9. The vulnerability in the Console component allows a user-assisted remote attacker to execute arbitrary applications by triggering a log entry with a crafted attached URL. This payload mechanism relies on the Console/logging workflow to run arbitra...

Fedora 19 : gsi-openssh-6.1p1-5.fc19 (2013-5044)

Security fix for vulnerability - http://grid.ncsa.illinois.edu/ssh/pamuserchange-2013-01. adv - https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2013-5168 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

CVE-2012-5168

CVE-2012-5168 affects ATutor AContent prior to 1.2-1. It enables remote attackers to modify arbitrary user passwords or category names by sending crafted requests to (1) user/index_inline_editor_submit.php or (2) course_category/index_inline_editor_submit.php. The vulnerability arises from insuff...

Multiple vulnerabilities in AContent

Advisory ID: HTB23117 Product: AContent Vendor: ATutor Vulnerable Versions: 1.2 and probably prior Tested Version: 1.2 Vendor Notification: September 26, 2012 Public Disclosure: October 17, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Cross-Site Scripting CWE-79...

ATutor 1.2 - Multiple Vulnerabilities

ATutor 1.2 - Multiple Vulnerabilities Advisory ID: HTB23117 Product: AContent Vendor: ATutor Vulnerable Versions: 1.2 and probably prior Tested Version: 1.2 Vendor Notification: September 26, 2012 Public Disclosure: October 17, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authenticatio...

ATutor 1.2 - Multiple Vulnerabilities

Advisory ID: HTB23117 Product: AContent Vendor: ATutor Vulnerable Versions: 1.2 and probably prior Tested Version: 1.2 Vendor Notification: September 26, 2012 Public Disclosure: October 17, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Cross-Site Scripting CWE-79...

ATutor AContent 1.2 XSS / Authentication / SQL Injection

Advisory ID: HTB23117 Product: AContent Vendor: ATutor Vulnerable Versions: 1.2 and probably prior Tested Version: 1.2 Vendor Notification: September 26, 2012 Public Disclosure: October 17, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Cross-Site Scripting CWE-79...

CVE-2011-5168

Banana Dance is affected by CVE-2011-5168 via the user.php file. The issue enables SQL injection through the id parameter, allowing arbitrary SQL execution. The known remediation is to upgrade Banana Dance to version B.1.5 or later; a temporary workaround is to restrict access to the user.php fil...

CVE-2010-5168

CVE-2010-5168 describes a race condition in Symantec Norton Internet Security 2010 (version 17.5.0.127) on Windows XP that allows local users to bypass kernel-mode hook handlers and run code that would normally be blocked by a hook, via certain user-space memory changes during hook-handler execut...

CVE-2008-5168

creationtimestamp| type| source ---|---|--- 2008-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5947...

Trend Micro ServerProtect StRpcSrv.dll RPC接口不安全实现方式漏洞

BUGTRAQ ID: 26912 Trend ServerProtect是一款企业级反病毒程序。 ServerProtect的SpntSvc.exe守护程序处理请求数据时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 ServerProtect中默认绑定到TCP 5168端口上的SpntSvc.exe守护程序通过TmRpcSrv.dll库暴露以下DCE/RPC接口： / opcode: 0x00, address: 0x65741030 / errorstatust sub65741030 in handlet arg1, in long arg2, insizeisarg4 byte...

Trend Micro ServerProtect unauthorized access

TCP/5168 RPC-based service unauthorized access to system functions...

Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability

These vulnerabilities allow attackers to execute arbitrary code on vulnerable installations of Trend Micro ServerProtect. Authentication is not required to exploit these vulnerabilities. The specific flaw exists in the SpntSvc.exe daemon, bound by default on TCP port 5168 and exposing the followi...

CVE-2007-5168

CVE-2007-5168 describes multiple PHP remote file inclusion vulnerabilities in ClanLite 1.23.01.2005. An attacker can execute arbitrary PHP code by supplying a URL in the root_path parameter to either modules/serveur_jeux.php or conf/conf-php.php. The entry notes that vector 1 is disputed because ...

ZDI-07-050: Trend Micro ServerProtect RPCFN_SetComputerName() Stack Overflow Vulnerability

ZDI-07-050: Trend Micro ServerProtect RPCFNSetComputerName Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-050.html September 7, 2007 -- CVE ID: CVE-2007-4218 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer...

Trend Micro antiviral products multiple security vulnerabilities

Buffer overflow in SSAPI engine on oversized local path. Buffer overflow in ServerProtect on different TCP/5168 RPC requests...

Trend Micro ServerProtect RPC NTF_SetPagerNotifyConfig buffer overflow

Added: 08/23/2007 CVE: CVE-2007-4218 BID: 25395 OSVDB: 39754 Background ServerProtect is a virus scanner for servers. Problem A buffer overflow in the NTFSetPagerNotifyConfig function within the Notification.dll library allows remote attackers to execute arbitrary commands by sending a specially...

Integer overflow

Integer overflow in the RPCFNSYNCTASK function in StRpcSrv.dll, as used by the ServerProtect service SpntSvc.exe, in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allows remote attackers to execute arbitrary code via a certain integer field in a request packet to TCP port 516...