6297 matches found
Numara FootPrints MRchat.pl及MRABLoad2.pl多个远程命令执行漏洞
BUGTRAQ ID: 27373 Numara FootPrints是一款资产管理系统。 Numara FootPrints的多个脚本实现上存在输入验证漏洞，远程攻击者可能利用此漏洞控制服务器。 Numara FootPrints的/MRcgi/MRchat.pl文件中没有正确地验证对transcriptFile参数的输入，/MRcgi/MRABLoad2.pl文件中没有正确地验证对LOADFILE参数的输入，便将这些参数用到了open调用中，这可能允许攻击者通过“|”字符注入并执行任意命令。 Numara FootPrints 8.0 Numara FootPrints 7.5a1...
LANDesk Management Agent Detection
The remote service is a LANDesk Management Agent, one of the components of LANDesk Management Suite installed on managed clients for communicating with the administrative console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29994; scriptversion"1.11";...
LANDesk Ping Discovery Service Detection
The remote service is a Ping Discovery Service, one of the components of LANDesk Management Suite installed on managed clients for communicating with the administrative console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29993; scriptversion"1.11";...
netOctopus Agent nantsys.sys MSR Write Local Privilege Escalation
netOctopus Agent, an asset management agent, is installed on the remote host. The installed version of netOctopus Agent includes a driver, named 'nantsys.sys', that exposes a device interface writable by all local users, allowing them to read and write arbitrary CPU Model Specific Registers MSRs....
netOctopus Agent Detection (TCP)
The remote service is a netOctopus Agent, the agent piece of the netOctopus asset management software suite installed on individual computers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid29929;...
netOctopus Agent Detection (UDP)
The remote service is a netOctopus Agent, the agent piece of the netOctopus asset management software suite installed on individual computers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29930; scriptversion"1.9"; scriptcvsdate"Date: 2019/11/22";...
iMesh P2P Client Detection
iMesh is installed on the remote Windows host. iMesh is a peer-to- peer file sharing application. Make sure the use of this program fits with your corporate security policy. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29729; scriptversion"1.15";...
CVE-2007-2950
Centennial Discovery 2006 Feature Pack 1, which is used by 1 Numara Asset Manager 8.0 and 2 Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges...
CVE-2007-2950
CVE-2007-2950 involves Centennial Discovery 2006 Feature Pack 1 (used by Numara Asset Manager 8.0 and Symantec Discovery 6.5) where insecure default directory/file permissions enable local non-privileged users to gain privileges. The Symantec advisory notes the vulnerability arises from improper ...
CVE-2007-2950
Centennial Discovery 2006 Feature Pack 1, which is used by 1 Numara Asset Manager 8.0 and 2 Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges...
Fujitsu ServerView DBASCIIAccess脚本远程代码执行漏洞
BUGTRAQ ID: 24762 CVECAN ID: CVE-2007-3011 ServerView是用于进行自动分析和版本维护的资产管理工具。 ServerView的Web接口处理用户数据时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程的权限执行任意命令。 DBAsciiAccess CGI脚本提供了ping功能，该脚本Parameterlist参数的Servername子参数给出了所要ping的IP地址，但没有对这个IP地址执行任何检查。如果在IP后添加了拖尾分号，攻击者就可以注入任意shell命令并以Web服务器进程的权限执行。 Fujitsu...
CVE-2007-2514
Stack-based buffer overflow in XferWan.exe as used in multiple products including 1 Symantec Discovery 6.5, 2 Numara Asset Manager 8.0, and 3 Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation...
Stack overflow
Stack-based buffer overflow in XferWan.exe as used in multiple products including 1 Symantec Discovery 6.5, 2 Numara Asset Manager 8.0, and 3 Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation...
CVE-2007-2514
CVE-2007-2514 is a stack-based buffer overflow in the CentennialXferWan service (XferWan.exe) used by Centennial Discovery 2006 Feature Pack, Symantec Discovery 6.5, and Numara Asset Manager 8.0. The overflow occurs when processing overly long strings in TCP requests, due to insufficient boundary...
CVE-2007-2514
Stack-based buffer overflow in XferWan.exe as used in multiple products including 1 Symantec Discovery 6.5, 2 Numara Asset Manager 8.0, and 3 Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation...
Buffer overflow
Multiple buffer overflows in the CentennialIPTransferServer service XFERWAN.EXE, as used by 1 Centennial Discovery 2006 Feature Pack 1, 2 Numara Asset Manager 8.0, and 3 Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet...
CVE-2007-1173
CVE-2007-1173 describes a buffer overflow flaw in the CentennialIPTransferServer (XFERWAN.EXE) used by Centennial Discovery 2006 Feature Pack 1, Numara Asset Manager 8.0, and Symantec Discovery 6.5. The vulnerability arises from processing long strings in crafted TCP packets, enabling remote arbi...
Trend Micro ServerProtect Detection
The remote host is running Trend Micro ServerProtect for Windows / NetWare, an antivirus / antispyware for Windows and NetWare servers. C Tenable Network Security include"compat.inc"; if description scriptid24679; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2007-0629
CVE-2007-0629 affects Plain Black WebGUI prior to version 7.3.8, where the www_purgeList method fails to properly enforce user permissions, enabling an attacker to delete assets they should not be able to access. The vulnerability is documented in multiple sources (NVD/NVD-derived entries) and is...