CVE-2012-1012

server/serverstubs.c in the kadmin protocol implementation in MIT Kerberos 5 aka krb5 1.10 before 1.10.1 does not properly restrict access to 1 SETSTRING and 2 GETSTRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global...

CVE-2012-1012

CVE-2012-1012 affects MIT Kerberos 5 (krb5) 1.10 and earlier with kadmind RPC ACLs that don’t properly restrict access to SET_STRING and GET_STRINGS. This could allow remote authenticated administrators to modify or read string attributes via the global list privilege. The publicly documented fix...

RedHat Update for subversion RHSA-2011:0258-01

Check for the Version of subversion OpenVAS Vulnerability Test RedHat Update for subversion RHSA-2011:0258-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2012-0862

builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1...

CVE-2011-5093

CVE-2011-5093 affects Best Practical Solutions RT, 4.x prior to 4.0.6. The DisallowExecuteCode option is not properly implemented, allowing remote authenticated users to bypass access restrictions and execute arbitrary code via a privileged account. This is part of the RT multi-vulnerability set ...

CVE-2011-4459: Undefined Security Weakness

Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership...

PT-2012-2916

Name of the Vulnerable Software and Affected Versions Xinetd versions prior to 2.3.15 Description The issue allows remote attackers to bypass intended access restrictions. This occurs because builtins.c in Xinetd does not check the service type when the tcpmux-server service is enabled, exposing...

PT-2012-1888

Name of the Vulnerable Software and Affected Versions Best Practical Solutions RT versions 3.x through 3.8.11 Best Practical Solutions RT versions 4.x through 4.0.5 Description The issue allows remote authenticated users to bypass intended access restrictions by leveraging a group membership, due...

Seagate BlackArmor device static administrator password reset vulnerability

Overview The Seagate BlackArmor network attached storage device contains a static administrator password reset vulnerability. Description The Seagate BlackArmor network attached storage device contain a static php file used to reset the administrator password. A remote unauthenticated attacker wi...

CVE-2012-2320

ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message...

PT-2012-1146

Name of the Vulnerable Software and Affected Versions ConnMan versions prior to 1.0 ConnMan versions prior to 0.85 Description The issue allows remote attackers to bypass intended access restrictions. Exploitation of the vulnerabilities may lead to a violation of confidentiality, integrity, and...

CVE-2012-0362

The extended ACL functionality in Cisco IOS 12.258SE2 and 15.01SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106...

CVE-2012-0362: Undefined Security Weakness

The extended ACL functionality in Cisco IOS 12.258SE2 and 15.01SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106...

CVE-2012-2402

wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors...

CVE-2012-2402: Undefined Security Weakness

wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors...

CVE-2012-0776: Undefined Security Weakness

The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors...

Pluck SiteLife software multiple XSS vulnerabilities

Overview Pluck SiteLife software contains multiple XSS vulnerabilities. Description According to DemandMedia's website Pluck SiteLife software is an integrated community platform architected for brands. Pluck SiteLife software contains multiple cross site scripting XSS vulnerabilities. CWE-79:...

PT-2012-2862

Name of the Vulnerable Software and Affected Versions Adobe Reader versions 9.x before 9.5.1 Adobe Reader versions 10.x before 10.1.3 Description The issue allows attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors. Recommendations For Adobe Reader...

CVE-2012-0129: Undefined Security Weakness

HP Onboard Administrator OA before 3.50 allows remote attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors...

PT-2012-2333

Name of the Vulnerable Software and Affected Versions HP Onboard Administrator OA versions prior to 3.50 Description The issue allows remote attackers to bypass intended access restrictions and execute arbitrary code. Recommendations For HP Onboard Administrator OA versions prior to 3.50, update ...