CoAST 0.95 - sections_file Remote File Inclusion

CoAST 0.95 - sectionsfile Remote File Inclusion Author : By DaRkLiFe Greetz : str0ke & S.VV.A.T. Script : The Concord Asset, Software, and Ticket systemCoAST 0.95 Remote File Inclusion Vulnerability Download :http://downloads.sourceforge.net/coastal/coast-0.95.tgz?modtime=1222363198&bigmirror=0...

LANDesk QIP Server Detection

The remote service is a LANDesk QIP Server, one of the components of LANDesk Management Suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34235; scriptversion"1.9"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"LANDesk QIP Server Detection";...

CVE-2008-3717

Harmoni before 1.6.0 does not require administrative privileges to list 1 user names or 2 asset ids, which allows remote attackers to obtain sensitive information...

CVE-2008-3717

CVE-2008-3717 : The Harmoni application (before version 1.6.0) allows remote attackers to obtain sensitive information by listing (1) user names and (2) asset IDs without requiring administrative privileges. The NVD entry documents a confidentiality impact (partial) with network access and no aut...

CVE-2008-3717

Harmoni before 1.6.0 does not require administrative privileges to list 1 user names or 2 asset ids, which allows remote attackers to obtain sensitive information...

CVE-2008-3717: Undefined Security Weakness

Harmoni before 1.6.0 does not require administrative privileges to list 1 user names or 2 asset ids, which allows remote attackers to obtain sensitive information...

CA Products That Embed Ingres Multiple Vulnerabilities

Title: CA Products That Embed Ingres Multiple Vulnerabilities CA Advisory Date: 2008-08-01 Reported By: iDefense Labs Impact: A remote attacker can execute arbitrary code, gain privileges, or cause a denial of service condition. Summary: CA products that embed Ingres contain multiple...

CVE-2008-2863

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...

EUVD-2008-2856

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...

CA Unicenter DSM ITRM Legends ActiveX integer overflow

Overview The CA Unicenter DSM ITRM Legends ActiveX control contains an integer overflow vulnerability, which can allow a remote attacker to execute arbitrary code on a vulnerable system. Description CA Unicenter DSM ITRM Legends is an ActiveX control that is included with multiple CA products. Th...

Symantec pcAnywhere Access Server Detection

Symantec pcAnywhere Access Server supports managing multiple pcAnywhere servers thorugh a centralized access point. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid32133; scriptversion"1.13";...

CA DSM gui_cm_ctrls.ocx ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 28809 CVECAN ID: CVE-2008-1786 CA桌面和服务器管理（DSM）产品中包含多种应用，分别用来执行软件分发、远程控制和资产管理任务。 DSM产品所提供的guicmctrls ActiveX控件没有充分的验证函数输入，如果用户受骗访问了恶意网页的话就可能导致拒绝服务或在WEB浏览器会话中执行任意代码。 Computer Associates guicmctrls.ocx 11.2.3.1896 Computer Associates guicmctrls.ocx 11.2.2000.4 Computer Associates...

CA DSM gui_cm_ctrls ActiveX Control Vulnerability

Title: CA DSM guicmctrls ActiveX Control Vulnerability CA Advisory Date: 2008-04-15 Reported By: Greg Linares of eEye Digital Security Impact: A remote attacker can execute arbitrary code or cause a denial of service condition. Summary: CA products that implement the DSM guicmctrls ActiveX contro...

CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability

Title: CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability CVE: CVE-2008-1472 CA Advisory Date: 2008-03-28 Reported By: Exploit code posted at milw0rm.com Impact: A remote attacker can cause a denial of service or execute arbitrary code. Summary: CA products that...

Numara FootPrints MRchat.pl及MRABLoad2.pl多个远程命令执行漏洞

BUGTRAQ ID: 27373 Numara FootPrints是一款资产管理系统。 Numara FootPrints的多个脚本实现上存在输入验证漏洞，远程攻击者可能利用此漏洞控制服务器。 Numara FootPrints的/MRcgi/MRchat.pl文件中没有正确地验证对transcriptFile参数的输入，/MRcgi/MRABLoad2.pl文件中没有正确地验证对LOADFILE参数的输入，便将这些参数用到了open调用中，这可能允许攻击者通过“|”字符注入并执行任意命令。 Numara FootPrints 8.0 Numara FootPrints 7.5a1...

LANDesk Ping Discovery Service Detection

The remote service is a Ping Discovery Service, one of the components of LANDesk Management Suite installed on managed clients for communicating with the administrative console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29993; scriptversion"1.11";...

LANDesk Management Agent Detection

The remote service is a LANDesk Management Agent, one of the components of LANDesk Management Suite installed on managed clients for communicating with the administrative console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29994; scriptversion"1.11";...

netOctopus Agent Detection (UDP)

The remote service is a netOctopus Agent, the agent piece of the netOctopus asset management software suite installed on individual computers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29930; scriptversion"1.9"; scriptcvsdate"Date: 2019/11/22";...

netOctopus Agent nantsys.sys MSR Write Local Privilege Escalation

netOctopus Agent, an asset management agent, is installed on the remote host. The installed version of netOctopus Agent includes a driver, named 'nantsys.sys', that exposes a device interface writable by all local users, allowing them to read and write arbitrary CPU Model Specific Registers MSRs....

netOctopus Agent Detection (TCP)

The remote service is a netOctopus Agent, the agent piece of the netOctopus asset management software suite installed on individual computers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid29929;...