How the Google-Motorola Deal May Affect Android Security

By B.K. DeLong With this morning’s acquisition of Motorola Mobility, Google has made the move to bring in a solid hardware component for their Android mobility platform and fired another shot across the bow of Apple. But one big questions remains: What does this acquisition mean for those trying ...

[SECURITY] Fedora 14 Update: glpi-data-injection-2.0.2-1.fc14

Plugin for importing data into GLPI It'll can serve, for example, to : - import machines at the delivery electronic delivery order in CSV - import additional data - import equipment not managed by OCS - transmit from an other tool of asset management...

CVE-2011-2118

The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."...

Input validation

The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."...

CVE-2011-2118

Adobe Shockwave Player is affected by CVE-2011-2118 due to an input-validation vulnerability in the FLV Asset Xtra component, prior to version 11.6.0.626. This vulnerability enables arbitrary code execution. Multiple connected advisories confirm the issue and reference the targeted Shockwave comp...

PT-2011-3613

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.0.626 Description The issue is related to an integer overflow in the Shockwave 3D Asset x32 component. This can be exploited by remote attackers to execute arbitrary code via a crafted subrecord in...

CVE-2011-2118: Improper Input Validation

The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."...

CVE-2011-2123: Undefined Security Weakness

Integer overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code via a crafted subrecord in a DEMX chunk, which triggers a heap-based buffer overflow...

PT-2011-3604

Name of the Vulnerable Software and Affected Versions Adobe Shockwave affected versions not specified Description The issue concerns remote code execution in Adobe Shockwave, related to the processing of the Trusted Offset Chunk and the parsing of the 0xFFFFFF45 field in 3D asset files...

PT-2011-3608

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.0.626 Description The issue is related to an input validation vulnerability in the FLV ASSET Xtra component, allowing attackers to execute arbitrary code via unspecified vectors. Recommendations Fo...

Novell ZENworks Asset Management File Upload Traversal

Added: 05/27/2011 CVE: CVE-2010-4229 BID: 47295 OSVDB: 71872 Background Novell ZENworks is a resource management solution consisting of a management server and management agents. Problem The Asset Management module ZAM of ZENworks version 10.3 prior to 10.3.2 and version 11 fail to validate the...

Novell ZENworks Asset Management File Upload Traversal

Added: 05/27/2011 CVE: CVE-2010-4229 BID: 47295 OSVDB: 71872 Background Novell ZENworks is a resource management solution consisting of a management server and management agents. Problem The Asset Management module ZAM of ZENworks version 10.3 prior to 10.3.2 and version 11 fail to validate the...

Novell ZENworks Asset Management File Upload Traversal

Added: 05/27/2011 CVE: CVE-2010-4229 BID: 47295 OSVDB: 71872 Background Novell ZENworks is a resource management solution consisting of a management server and management agents. Problem The Asset Management module ZAM of ZENworks version 10.3 prior to 10.3.2 and version 11 fail to validate the...

Novell ZENworks Asset Management File Upload Traversal

Added: 05/27/2011 CVE: CVE-2010-4229 BID: 47295 OSVDB: 71872 Background Novell ZENworks is a resource management solution consisting of a management server and management agents. Problem The Asset Management module ZAM of ZENworks version 10.3 prior to 10.3.2 and version 11 fail to validate the...

Directory traversal

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management ZAM in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory...

CVE-2010-4229

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management ZAM in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory...

CVE-2010-4229

CVE-2010-4229 is a directory traversal vulnerability in the Inventory component (ZENworks Asset Management) of Novell ZENworks Configuration Management. Affects ZENworks 10.3 before 10.3.2 and version 11. The flaw arises from improper handling of uploaded file names, enabling an attacker to trave...

CVE-2010-4229

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management ZAM in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory...

CVE-2010-4229: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management ZAM in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory...

Novell ZENworks Asset Management Path Traversal File Overwrite Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENworks Asset Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within a servlet provided within the Novell Zenworks distribution for...