Remedy Action Request System 5.01.02 - User Enumeration

======================================================= Remedy Action Request System User Enumeration ======================================================= Davide Del Vecchio Adv11 Discovered in: 08/01/2007 Version affected: Remedy Action Request System 5.01.02 Patch 1267. The same vulnerable...

BMC Remedy Action Request System user enumeration vulnerability

Messages for invalid password and invalid user name are different...

CVE-2006-3830: Undefined Security Weakness

The Languages selection in the admin interface in Kailash Nadh boastMachine formerly bMachine 3.1 and earlier allows remote authenticated administrators to upload files with arbitrary extensions to the bmc/Inc/Lang directory. NOTE: because the uploaded files cannot be accessed through HTTP, this...

CVE-2006-3829: Undefined Security Weakness

Cross-site request forgery CSRF vulnerability in bmc/admin.php in Kailash Nadh boastMachine formerly bMachine 3.1 and earlier allows remote attackers to perform unauthorized actions as an administrator and delete arbitrary user accounts via a deleteuser action...

CVE-2006-3827

The CVE-2006-3827 entry affects Kailash Nadh’s boastMachine (formerly bMachine) up to v3.1. The issue is an SQL injection in bmc/Inc/core/admin/search.inc.php, exploitable by remote authenticated administrators via the blog parameter. This is caused by unsanitized input being used in SQL queries,...

CVE-2006-2491: Undefined Security Weakness

Cross-site scripting XSS vulnerability in 1 index.php and 2 bmc/admin.php in BoastMachine bMachine 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly filtered when it is accessed using the $SERVER"PHPSELF" variable...

CVE-2005-3311

BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-3311

BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-3311

BMC Software Control-M 6.1.03 for Solaris (and possibly other platforms) is affected by a local symlink race that allows a local user to overwrite arbitrary files via temporary files. This vulnerability can impact integrity (partial) with no confidentiality/availability impact per the CVSS vector...

Insecure Temporary Files in BMC/Control-M Agent

BMC's Control M is an enterprise scheduling facility. Unfortunately, the agent software suffers from a problem with insecure temporary file creation. We noticed the problem on Solaris systems running the version 6.1.03 with current patches; it is reasonable to assume that other OS platforms and...

BMC Control M enterprise scheduling system agent symbolic links problem

Insecure creation of temporary directory...

CVE-2005-3311: Undefined Security Weakness

BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-1999-0921

BMC Patrol is affected by CVE-1999-0921, where a remote attacker can flood the UDP port, resulting in a denial of service. The CVSS data shows network access, low complexity, no authentication, and partial availability impact. No exploit details or remediation are provided in the supplied documen...

CVE-1999-0801

CVE-1999-0801 affects BMC Patrol. The issue allows remote attackers to gain access to a Patrol agent by spoofing frames, as described in multiple contributor records. The connected documents confirm the vulnerability’s existence and describe the impact as unauthorized agent access via frame spoof...

CVE-1999-0801

BMC Patrol allows remote attackers to gain access to an agent by spoofing frames...

CVE-1999-0921: Undefined Security Weakness

BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service...

CVE-1999-0801: Undefined Security Weakness

BMC Patrol allows remote attackers to gain access to an agent by spoofing frames...

CVE-1999-1459

CVE-1999-1459 affects BMC PATROL Agent prior to 3.2.07. A local symlink attack on a temporary file can enable local users to gain root privileges. The underlying cause is improper handling of a temporary file name via a symlink. The connected documents do not provide a formal remediation or explo...

CVE-1999-1355

The CVE-1999-1355 entry describes a vulnerability in the BMC Patrol component when installed with Compaq Insight Management Agent 4.23 or earlier, or Management Agents for Servers 4.40 or earlier. The underlying issue is that these configurations create a PFCUser account with a default password a...

CVE-1999-1460

CVE-1999-1460 affects the BMC PATROL SNMP Agent prior to version 3.2.07 . The vulnerability lets local users escalate to root by passing the target file as the second argument to the snmpmagt program, resulting in creation of arbitrary world-writeable files. The underlying issue is improper handl...