CVE-2008-4699

The CVE-2008-4699 entry concerns Peachtree Accounting 2004, specifically the ActiveX control PAWWeb11.ocx. The vulnerability arises in the ExecutePreferredApplication method, enabling remote attackers to execute arbitrary programs. The available connected documents affirm this insecure method vul...

CVE-2008-4699: Undefined Security Weakness

Insecure method vulnerability in the ActiveX control PAWWeb11.ocx in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method...

Peachtree Accounting 'PAWWeb11.ocx' ActiveX控件不安全方法漏洞

BUGTRAQ ID: 31096 CNCAN ID：CNCAN-2008091105 Peachtree Accounting是一款商务会计软件。 Peachtree Accounting包含的'PAWWeb11.ocx' ActiveX控件存在不安全方法调用问题，远程攻击者可以利用漏洞以应用程序权限执行任意应用程序。 "ExecutePreferredApplication"方法对用户提交的参数缺少正确检查，直接提交系统应用程序可导致以控件权限执行。 Sage Peachtree Accounting 2004...

Peachtree Accounting 2004 (PAWWeb11.ocx) ActiveX Insecure Method

Exploit for unknown platform in category remote exploits ================================================================ Peachtree Accounting 2004 PAWWeb11.ocx ActiveX Insecure Method ================================================================ arg1="C:/WINDOWS/system32/calc.exe"...

Peachtree Accounting 2004 - PAWWeb11.ocx ActiveX Insecure Method

Peachtree Accounting 2004 - PAWWeb11.ocx ActiveX Insecure Method arg1="C:/WINDOWS/system32/calc.exe" target.ExecutePreferredApplication arg1 milw0rm.com 2008-09-10...

Peachtree Accounting 2004 (PAWWeb11.ocx) ActiveX Insecure Method

No description provided by source. !-- Jeremy Brown [email protected]/jbrownsec.blogspot.com Peachtree Accounting Remote SfS/SfI Exploit Tested on Peachtree Accounting 2004 / Windows XP / IE6 All Peachtree software that includes PAWWeb11.ocx are assumed vulnerable -- htmlbody object id=target...

Peachtree Accounting 2004 - 'PAWWeb11.ocx' ActiveX Insecure Method

arg1="C:/WINDOWS/system32/calc.exe" target.ExecutePreferredApplication arg1 milw0rm.com 2008-09-10...

ptreexxec.txt

arg1="C:/WINDOWS/system32/calc.exe" target.ExecutePreferredApplication arg1...

FreeBSD Security Advisory (FreeBSD-SA-05:13.ipfw.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:13.ipfw.asc ADV FreeBSD-SA-05:13.ipfw.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

Microsoft Dynamics GP Distributed Process Manager Detection

The remote host is running Microsoft Dynamics GP Distributed Process Manager. Dynamics GP is a business accounting and management software solution from Microsoft. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

IPS-1 Protection Updates for yardradius and Cisco IOS Vulnerabilities and IPS-1 Protocol and Protocol Subsystems Updates

A vulnerability in yardradius could allow a remote attacker to execute arbitrary code via a buffer overflow. A vulnerability in Cisco IOS 12.2T through 12.4 could allows remote attackers to bypass Authentication, Authorization, and Accounting AAA RADIUS authentication via a long username...

Internet cafe management software reproduction of vulnerability-vulnerability warning-the black bar safety net

Internet cafe management software is again exposed with the accounting loopholes, and this vulnerability than six months ago that the more concealed, by the operation, can achieve one hour of money for unlimited Internet access. Reported material said, in the stone floor of the bridge all the...

[SECURITY] Fedora Core 6 Update: gnucash-2.0.5-1.fc6

GnuCash is a personal finance manager. A check-book like register GUI allows you to enter and track bank accounts, stocks, income and even currency trades. The interface is designed to be simple and easy to use, but is backed with double-entry accounting principles to ensure balanced books...

CVE-2006-4098

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server ACS for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet...

CVE-2006-4098: Undefined Security Weakness

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server ACS for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet...

CVE-2006-4098

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server ACS for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet...

GLSA-200612-17 : GNU Radius: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200612-17 GNU Radius: Format string vulnerability A format string vulnerability was found in the sqllog function from the SQL accounting code for radiusd. That function is only used if one or more of the 'postgresql', 'mysql' or...

GNU Radius: Format string vulnerability

Background GNU Radius is a GNU version of Radius, a server for remote user authentication and accounting. Description A format string vulnerability was found in the sqllog function from the SQL accounting code for radiusd. That function is only used if one or more of the "postgresql", "mysql" or...

CVE-2006-4181

Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2006-4181

CVE-2006-4181 refers to a format-string vulnerability in GNU Radius’ SQL accounting code (sqllog) used by radiusd when SQL back-ends (postgresql/mysql/odbc) are enabled. The issue exists in Radius 1.2 and 1.3 and can allow an unauthenticated remote attacker to execute arbitrary code with the radi...