CVE-2007-2514

CVE-2007-2514 is a stack-based buffer overflow in the CentennialXferWan service (XferWan.exe) used by Centennial Discovery 2006 Feature Pack, Symantec Discovery 6.5, and Numara Asset Manager 8.0. The overflow occurs when processing overly long strings in TCP requests, due to insufficient boundary...

CVE-2007-2514: Undefined Security Weakness

Stack-based buffer overflow in XferWan.exe as used in multiple products including 1 Symantec Discovery 6.5, 2 Numara Asset Manager 8.0, and 3 Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation...

CVE-2007-2746: Undefined Security Weakness

The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not properly use data structures containing privilege information, which allows remote authenticated users to obtain sensitive information or possibly have other unspecified impact...

Buffer overflow

Multiple buffer overflows in the CentennialIPTransferServer service XFERWAN.EXE, as used by 1 Centennial Discovery 2006 Feature Pack 1, 2 Numara Asset Manager 8.0, and 3 Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet...

CVE-2007-1173

CVE-2007-1173 describes a buffer overflow flaw in the CentennialIPTransferServer (XFERWAN.EXE) used by Centennial Discovery 2006 Feature Pack 1, Numara Asset Manager 8.0, and Symantec Discovery 6.5. The vulnerability arises from processing long strings in crafted TCP packets, enabling remote arbi...

CVE-2007-1173: Undefined Security Weakness

Multiple buffer overflows in the CentennialIPTransferServer service XFERWAN.EXE, as used by 1 Centennial Discovery 2006 Feature Pack 1, 2 Numara Asset Manager 8.0, and 3 Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet...

Trend Micro ServerProtect Detection

The remote host is running Trend Micro ServerProtect for Windows / NetWare, an antivirus / antispyware for Windows and NetWare servers. C Tenable Network Security include"compat.inc"; if description scriptid24679; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2007-0629

CVE-2007-0629 affects Plain Black WebGUI prior to version 7.3.8, where the www_purgeList method fails to properly enforce user permissions, enabling an attacker to delete assets they should not be able to access. The vulnerability is documented in multiple sources (NVD/NVD-derived entries) and is...

WebGUI < 7.3.8 www_purgeList Method Asset Deletion

Binary data 3897.prm...

Novell ZENworks Asset Management Collection Client Remote Overflow

The remote host is running Novell ZENworks Asset or Inventory Management, a remote desktop and network management software. The remote version of this software has multiple heap overflow vulnerabilities that may be exploited by an attacker to execute arbitrary code on the remote host with SYSTEM...

Novell ZenWorks Asset Management Server Detection

The remote host is running a collection client service from Novell ZenWorks Asset Management Server, a software and network management solution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid23786;...

CVE-2006-6299

Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management ZAM before SP1 IR11 and the Collection client allows remote attackers to execute arbitrary code via crafted packets, which trigger a heap-based buffer overflow...

CVE-2006-6299

Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management ZAM before SP1 IR11 and the Collection client allows remote attackers to execute arbitrary code via crafted packets, which trigger a heap-based buffer overflow...

CVE-2006-6299

Summary (CVE-2006-6299): A heap-based buffer overflow in Msg.dll affects Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the ZENworks Collection client. The vulnerability allows remote attackers to trigger arbitrary code execution via crafted network packets, with the Collection clie...

Novell ZENworks Asset Management MSG.DLL远程整数溢出漏洞

Novell Inc's ZENworks是一套用于自动IT管理和在各个电脑资源中进行商务处理的工具。 Novell Inc's ZENworks Asset Management存在一个整数溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当处理特殊的包发送给Task服务器或者Collection服务守护程序时存在堆溢出，当分配内存给远程提供的数据时可以应用程序进程权限执行任意指令。 Novell ZENworks Asset Management 7.0 SP1 补丁下载： Novell ZENworks Asset Management 7.0 SP1 Novell...

ZENworks Asset Management msg.dll远程堆溢出漏洞

ZENworks是一套用于在组织内跨资源自动化IT管理和业务流程的工具。 ZENworks处理畸形报文时存在整数溢出，远程攻击者可能利用此漏洞在服务器上执行任意指令。 由于在为远程提供数据分配内存时的整数溢出，如果向Task Server或Collection Server守护程序发送了特制报文的话，就可能会触发堆溢出，导致攻击者完全控制受影响的系统。Collection Client静态链接到了受影响的函数库上，因此也受同样漏洞的影响。 Novell ZENworks Asset Management 7.0 SP1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-6299: Undefined Security Weakness

Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management ZAM before SP1 IR11 and the Collection client allows remote attackers to execute arbitrary code via crafted packets, which trigger a heap-based buffer overflow...

iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability

Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability iDefense Security Advisory 12.01.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 01, 2006 I. BACKGROUND Novell Inc's ZENworks is a set of tools used to automate IT management and business processes across the vario...

Novell ZENworks multiple security vulnerabilities

Heap buffer overflows in Novell ZENworks Asset Management and Novell ZENworks Asset Management Collection client...

iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability

Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability iDefense Security Advisory 12.01.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 01, 2006 I. BACKGROUND Novell Inc's ZENworks is a set of tools used to automate IT management and business processes across...