IBM Endpoint Manager For Mobile Devices Code Execution

Advisory: Unauthenticated Remote Code Execution in IBM Endpoint Manager Mobile Device Management Components During a penetration test, RedTeam Pentesting discovered that several IBM Endpoint Manager Components are based on Ruby on Rails and use static secrettoken values. With these values,...

[RT-SA-2014-012] Unauthenticated Remote Code Execution in IBM Endpoint Manager Mobile Device Management Components

Advisory: Unauthenticated Remote Code Execution in IBM Endpoint Manager Mobile Device Management Components During a penetration test, RedTeam Pentesting discovered that several IBM Endpoint Manager Components are based on Ruby on Rails and use static secrettoken values. With these values,...

CVE-2012-6140

pamgoogleauthenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem operations, a different vulnerability than...

CVE-2012-6140

pamgoogleauthenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem operations, a different vulnerability than...

CVE-2012-6140

CVE-2012-6140 involves the pam_google_authenticator.c PAM module in Google Authenticator, vulnerable before 1.0. The root cause is that the secret file must have user-readable permissions, allowing local users to bypass access constraints and read the shared secret via standard filesystem operati...

SuSE 10 Security Update : Kerberos (ZYPP Patch Number 6140)

Clients sending negotiation requests with invalid flags could crash the kerberos server. CVE-2009-0845 GSS-API clients could crash when reading from an invalid address space. CVE-2009-0844 Invalid length checks could crash applications using the kerberos ASN.1 parser. CVE-2009-0847 Under certain...

Fedora Update for bluez-utils FEDORA-2008-6140

Check for the Version of bluez-utils OpenVAS Vulnerability Test Fedora Update for bluez-utils FEDORA-2008-6140 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2008-6140

The vulnerability CVE-2008-6140 affects Avaya one-X Desktop Edition 2.1.0.78, specifically its SIP implementation. The NVD entry documents an unspecified vulnerability that could be exploited remotely to cause a denial of service (crash). Impact is described as partial availability loss with a CV...

CVE-2006-6140

The CVE-2006-6140 entry describes a PHP remote file inclusion in Sisfo Kampus 2006 (Semarang 3). An attacker can cause arbitrary PHP code execution by supplying a URL in the slnt parameter to index.php or print.php. The vulnerability arises from insufficient validation of user-supplied input used...