192 matches found
CVE-2009-0311
The Backbone service ftbackbone.exe in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer...
CVE-2009-0311
The CVE-2009-0311 issue affects EMC AutoStart’s Backbone Engine (ftbackbone.exe) prior to 5.3 SP2. According to the provided documents, remote attackers can cause code execution by sending a crafted value that is dereferenced as a function pointer, with exploitation described for the Backbone ser...
CVE-2009-0311
The Backbone service ftbackbone.exe in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer...
EMC AutoStart code execution
Integer user controlled argument is used to calculate function pointer in ftbackbone.exe listens TCP/8042...
ZDI-09-009: EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability
ZDI-09-009: EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-009 January 23, 2009 -- Affected Vendors: EMC -- Affected Products: EMC AutoStart -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have be...
EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC AutoStart. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Backbone service ftbackbone.exe which listens by default on TCP port...
[TZO-2009-2] Avira Antivir - Priviledge escalation
From the 'cover-your-basics' and from the 'they-still-exist-department' Antivir insecure CreateProcess usage - Privilege Esclation and autostart as free bonus Reference : TZO-2009-2-Avira Antivir Priviledge escalation WWW : http://blog.zoller.lu/2009/01/tzo-2009-2-avira-antivir-priviledge.html...
[TZO-062006] Safe'nVulnerable
Safe'nSec - Insecure File execution and Auto-startup Ref : TZO-062006-SafenSec Author : Thierry Zoller WWW : http://secdev.zoller.lu Article : http://secdev.zoller.lu/research/safensec.htm I. Background "Safe'n'Sec is complex data and user applications protection against threats and vulnerabiliti...
CVE-2006-0229
Unquoted Windows search path vulnerability in Wehntrust might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when Wehntrust creates the autostart key...
Design/Logic Flaw
Unquoted Windows search path vulnerability in Wehntrust might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when Wehntrust creates the autostart key...
CVE-2006-0229
CVE-2006-0229 concerns the Wehntrust Windows utility, vulnerable due to an unquoted Windows search path. A local attacker could create a malicious C:\program.exe that is executed when Wehntrust creates its autostart entry, potentially allowing privilege escalation. The CVSS data indicates local, ...