CVE-2008-6240

OpenEdit Digital Asset Management (DAM) contains a Cross-site Scripting (XSS) vulnerability in data/views/index.html, exploitable via the catalogid parameter. Affected software is OpenEdit DAM prior to version 5.2014. The vulnerability allows remote attackers to inject arbitrary web script or HTM...

LANDesk QIP Server Detection

The remote service is a LANDesk QIP Server, one of the components of LANDesk Management Suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34235; scriptversion"1.9"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"LANDesk QIP Server Detection";...

CA Products That Embed Ingres Multiple Vulnerabilities

Title: CA Products That Embed Ingres Multiple Vulnerabilities CA Advisory Date: 2008-08-01 Reported By: iDefense Labs Impact: A remote attacker can execute arbitrary code, gain privileges, or cause a denial of service condition. Summary: CA products that embed Ingres contain multiple...

CA Unicenter DSM ITRM Legends ActiveX integer overflow

Overview The CA Unicenter DSM ITRM Legends ActiveX control contains an integer overflow vulnerability, which can allow a remote attacker to execute arbitrary code on a vulnerable system. Description CA Unicenter DSM ITRM Legends is an ActiveX control that is included with multiple CA products. Th...

CA DSM gui_cm_ctrls.ocx ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 28809 CVECAN ID: CVE-2008-1786 CA桌面和服务器管理（DSM）产品中包含多种应用，分别用来执行软件分发、远程控制和资产管理任务。 DSM产品所提供的guicmctrls ActiveX控件没有充分的验证函数输入，如果用户受骗访问了恶意网页的话就可能导致拒绝服务或在WEB浏览器会话中执行任意代码。 Computer Associates guicmctrls.ocx 11.2.3.1896 Computer Associates guicmctrls.ocx 11.2.2000.4 Computer Associates...

CA DSM gui_cm_ctrls ActiveX Control Vulnerability

Title: CA DSM guicmctrls ActiveX Control Vulnerability CA Advisory Date: 2008-04-15 Reported By: Greg Linares of eEye Digital Security Impact: A remote attacker can execute arbitrary code or cause a denial of service condition. Summary: CA products that implement the DSM guicmctrls ActiveX contro...

CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability

Title: CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability CVE: CVE-2008-1472 CA Advisory Date: 2008-03-28 Reported By: Exploit code posted at milw0rm.com Impact: A remote attacker can cause a denial of service or execute arbitrary code. Summary: CA products that...

Numara FootPrints MRchat.pl及MRABLoad2.pl多个远程命令执行漏洞

BUGTRAQ ID: 27373 Numara FootPrints是一款资产管理系统。 Numara FootPrints的多个脚本实现上存在输入验证漏洞，远程攻击者可能利用此漏洞控制服务器。 Numara FootPrints的/MRcgi/MRchat.pl文件中没有正确地验证对transcriptFile参数的输入，/MRcgi/MRABLoad2.pl文件中没有正确地验证对LOADFILE参数的输入，便将这些参数用到了open调用中，这可能允许攻击者通过“|”字符注入并执行任意命令。 Numara FootPrints 8.0 Numara FootPrints 7.5a1...

LANDesk Ping Discovery Service Detection

The remote service is a Ping Discovery Service, one of the components of LANDesk Management Suite installed on managed clients for communicating with the administrative console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29993; scriptversion"1.11";...

LANDesk Management Agent Detection

The remote service is a LANDesk Management Agent, one of the components of LANDesk Management Suite installed on managed clients for communicating with the administrative console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29994; scriptversion"1.11";...

netOctopus Agent Detection (UDP)

The remote service is a netOctopus Agent, the agent piece of the netOctopus asset management software suite installed on individual computers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29930; scriptversion"1.9"; scriptcvsdate"Date: 2019/11/22";...

netOctopus Agent nantsys.sys MSR Write Local Privilege Escalation

netOctopus Agent, an asset management agent, is installed on the remote host. The installed version of netOctopus Agent includes a driver, named 'nantsys.sys', that exposes a device interface writable by all local users, allowing them to read and write arbitrary CPU Model Specific Registers MSRs....

netOctopus Agent Detection (TCP)

The remote service is a netOctopus Agent, the agent piece of the netOctopus asset management software suite installed on individual computers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid29929;...

Fujitsu ServerView DBASCIIAccess脚本远程代码执行漏洞

BUGTRAQ ID: 24762 CVECAN ID: CVE-2007-3011 ServerView是用于进行自动分析和版本维护的资产管理工具。 ServerView的Web接口处理用户数据时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程的权限执行任意命令。 DBAsciiAccess CGI脚本提供了ping功能，该脚本Parameterlist参数的Servername子参数给出了所要ping的IP地址，但没有对这个IP地址执行任何检查。如果在IP后添加了拖尾分号，攻击者就可以注入任意shell命令并以Web服务器进程的权限执行。 Fujitsu...

Novell ZENworks Asset Management Collection Client Remote Overflow

The remote host is running Novell ZENworks Asset or Inventory Management, a remote desktop and network management software. The remote version of this software has multiple heap overflow vulnerabilities that may be exploited by an attacker to execute arbitrary code on the remote host with SYSTEM...

Novell ZenWorks Asset Management Server Detection

The remote host is running a collection client service from Novell ZenWorks Asset Management Server, a software and network management solution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid23786;...

CVE-2006-6299

Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management ZAM before SP1 IR11 and the Collection client allows remote attackers to execute arbitrary code via crafted packets, which trigger a heap-based buffer overflow...

CVE-2006-6299

Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management ZAM before SP1 IR11 and the Collection client allows remote attackers to execute arbitrary code via crafted packets, which trigger a heap-based buffer overflow...

CVE-2006-6299

Summary (CVE-2006-6299): A heap-based buffer overflow in Msg.dll affects Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the ZENworks Collection client. The vulnerability allows remote attackers to trigger arbitrary code execution via crafted network packets, with the Collection clie...

Novell ZENworks Asset Management MSG.DLL远程整数溢出漏洞

Novell Inc's ZENworks是一套用于自动IT管理和在各个电脑资源中进行商务处理的工具。 Novell Inc's ZENworks Asset Management存在一个整数溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当处理特殊的包发送给Task服务器或者Collection服务守护程序时存在堆溢出，当分配内存给远程提供的数据时可以应用程序进程权限执行任意指令。 Novell ZENworks Asset Management 7.0 SP1 补丁下载： Novell ZENworks Asset Management 7.0 SP1 Novell...