Novell ZENworks Asset Management MSG.DLL远程整数溢出漏洞

Novell Inc's ZENworks是一套用于自动IT管理和在各个电脑资源中进行商务处理的工具。 Novell Inc's ZENworks Asset Management存在一个整数溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当处理特殊的包发送给Task服务器或者Collection服务守护程序时存在堆溢出，当分配内存给远程提供的数据时可以应用程序进程权限执行任意指令。 Novell ZENworks Asset Management 7.0 SP1 补丁下载： Novell ZENworks Asset Management 7.0 SP1 Novell...

ZENworks Asset Management msg.dll远程堆溢出漏洞

ZENworks是一套用于在组织内跨资源自动化IT管理和业务流程的工具。 ZENworks处理畸形报文时存在整数溢出，远程攻击者可能利用此漏洞在服务器上执行任意指令。 由于在为远程提供数据分配内存时的整数溢出，如果向Task Server或Collection Server守护程序发送了特制报文的话，就可能会触发堆溢出，导致攻击者完全控制受影响的系统。Collection Client静态链接到了受影响的函数库上，因此也受同样漏洞的影响。 Novell ZENworks Asset Management 7.0 SP1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Novell ZENworks multiple security vulnerabilities

Heap buffer overflows in Novell ZENworks Asset Management and Novell ZENworks Asset Management Collection client...

iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability

Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability iDefense Security Advisory 12.01.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 01, 2006 I. BACKGROUND Novell Inc's ZENworks is a set of tools used to automate IT management and business processes across...

iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability

Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability iDefense Security Advisory 12.01.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 01, 2006 I. BACKGROUND Novell Inc's ZENworks is a set of tools used to automate IT management and business processes across the vario...

CVE-2005-0642

SQL injection vulnerability in the Query Designer for Computer Associates CA Unicenter Asset Management UAM 4.0 allows remote attackers to execute arbitrary SQL via an imported file...

CVE-2005-0641

Cross-site scripting XSS vulnerability in the Reporter for Computer Associates CA Unicenter Asset Management UAM 4.0 allows remote attackers to inject arbitrary HTML or web script via the 1 name or 2 description in a report template...

CVE-2005-0641

CVE-2005-0641 affects the CA Unicenter Asset Management Reporter (UAM) 4.0, where a flaw in report templates (fields: name and description) enables cross-site scripting (XSS). The root cause is a vulnerability in how the report template content is handled, allowing remote attackers to inject arbi...

CVE-2005-0640

CA Unicenter Asset Management (UAM) 4.0 contains a flaw where the "+Change Credentials for Database" window is not properly initialized, enabling local users to recover the SQL Admin password. The root cause is improper window initialization, per the CVE entry. The documented impact is partial co...

CVE-2005-0642

SQL injection vulnerability in the Query Designer for Computer Associates CA Unicenter Asset Management UAM 4.0 allows remote attackers to execute arbitrary SQL via an imported file...

CVE-2005-0642

The CVE-2005-0642 issue affects CA Unicenter Asset Management (UAM) 4.0, specifically the Query Designer component. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL through an imported file. The root cause is improper handling of input in the Query Design...

CVE-2005-0641

Cross-site scripting XSS vulnerability in the Reporter for Computer Associates CA Unicenter Asset Management UAM 4.0 allows remote attackers to inject arbitrary HTML or web script via the 1 name or 2 description in a report template...

CVE-2005-0640

Computer Associates CA Unicenter Asset Management UAM 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods...