IBM Endpoint Manager For Mobile Devices Code Execution

Advisory: Unauthenticated Remote Code Execution in IBM Endpoint Manager Mobile Device Management Components During a penetration test, RedTeam Pentesting discovered that several IBM Endpoint Manager Components are based on Ruby on Rails and use static secrettoken values. With these values,...

IBM Endpoint Manager For Mobile Devices Code Execution Vulnerability

During a penetration test, RedTeam Pentesting discovered that several IBM Endpoint Manager Components are based on Ruby on Rails and use static secrettoken values. With these values, attackers can create valid session cookies containing marshalled objects of their choosing. This can be leveraged ...

CVE-2012-6140

pamgoogleauthenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem operations, a different vulnerability than...

CVE-2012-6140

CVE-2012-6140 involves the pam_google_authenticator.c PAM module in Google Authenticator, vulnerable before 1.0. The root cause is that the secret file must have user-readable permissions, allowing local users to bypass access constraints and read the shared secret via standard filesystem operati...

CVE-2012-6140

pamgoogleauthenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem operations, a different vulnerability than...

SuSE 10 Security Update : Kerberos (ZYPP Patch Number 6140)

Clients sending negotiation requests with invalid flags could crash the kerberos server. CVE-2009-0845 GSS-API clients could crash when reading from an invalid address space. CVE-2009-0844 Invalid length checks could crash applications using the kerberos ASN.1 parser. CVE-2009-0847 Under certain...

Fedora Update for bluez-utils FEDORA-2008-6140

Check for the Version of bluez-utils OpenVAS Vulnerability Test Fedora Update for bluez-utils FEDORA-2008-6140 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2008-6140

The vulnerability CVE-2008-6140 affects Avaya one-X Desktop Edition 2.1.0.78, specifically its SIP implementation. The NVD entry documents an unspecified vulnerability that could be exploited remotely to cause a denial of service (crash). Impact is described as partial availability loss with a CV...

CVE-2006-6140

The CVE-2006-6140 entry describes a PHP remote file inclusion in Sisfo Kampus 2006 (Semarang 3). An attacker can cause arbitrary PHP code execution by supplying a URL in the slnt parameter to index.php or print.php. The vulnerability arises from insufficient validation of user-supplied input used...