966 matches found
SOL7147 - Execution of UNIX shell commands from the URL in the Admin UI
A URL that is accessible from the Device Management Maintenance Troubleshooting Tools page can be modified to inject UNIX shell commands, which are then executed with user-level privileges. Only FirePass Administrators with permission to access this URL can perform this action. Standard FirePass...
SYM06-16 Symantec NetBackup PureDisk Remote Office Edition Elevation of Privilege
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Symantec Security Advisory SYM06-015 16 August 2006 Symantec NetBackup PureDisk: Non-Privileged User Authentication Bypass Elevation of Privilege Revision History None Severity Medium highly dependent on network configuration Remote Access Yes Local...
RE: Cisco Secure ACS Cross Site Scripting Vulnerability.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is Cisco PSIRT response to the statements made by Thomas Liam Romanis of Fujitsu Services Limited in their posting to BugTraq on the 15th June 2006, regarding Cisco Secure ACS LoginProxy.CGI Cross-Site Scripting Vulnerability, located at...
CYBSEC - Security Pre-Advisory: Arbitrary File Read/Delete in SAP BC
The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityPre-AdvisoryArbitraryFileReadorDeleteinSAPBC.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: Arbitrary File Read/Delete in SAP BC Business Connector Vulnerability Class: Improper Inp...
PeopleSoft (Oracle) PSCipher Encryption Weakness
Vendor: PeopleSoft Product: People Tools Version: 8.4x Platform: Multi-platform Title: Weak Encryption Description: PeopleSoft uses PSCipher for encryption/hashing purposes. Based on observations from the output of PSCipher and on our familiarity with the cryptographic library objects and methods...
Symantec Sygate Management Server: SMS Authentication Servlet SQL Injection
SUMMARY A SQL injection vulnerability in Symantec's Sygate Management Server SMS version 4.1, build 1417 and earlier could potentially allow a remote or local attacker to gain administrative privileges to the SMS server. Risk Impact High Remote Access | Yes ---|--- Local Access | Yes Authenticati...
RHEL 2.1 : gdm (RHSA-2003:259)
Updated GDM packages are available which correct a local crash if XDMCP is enabled. GDM is the GNOME Display Manager for X. Two bugs have been found in the X Display Manager Control Protocol XDMCP which could allow a denial of service attack DoS by crashing the gdm daemon. The Common...
ciac-J-042.web.security.txt
Date: Tue, 18 May 1999 09:09:34 -0700 PDT From: CIAC Mail User To: [email protected] Subject: CIAC Bulletin J-042: Web Security For Public Release -----BEGIN PGP SIGNED MESSAGE----- The U.S. Department of Energy Computer Incident Advisory Capability / | /\ / \ | / \ \ INFORMATION...
Update 2 for Windows Server Solutions Best Practices Analyzer 1.0 (KB2652984)
Update 2 for Windows Server Solutions Best Practices Analyzer 1.0 KB2652984...
Update Rollup 4 for Windows Server Solutions Best Practices Analyzer 1.0 is available
None None...
Office 2010 1130
Office 2010 1130...
Update Rollup 3 for Windows Small Business Server 2011 Standard is available
None None...
Update Rollup 5 for Windows Server Solutions Best Practices Analyzer 1.0 is available
None None...
An update for Windows Server Solutions Best Practices Analyzer 1.0 is available
None None...
SC2022 - VMM Server
SC2022 - VMM Server...
Update Rollup 4 for Windows Server Solutions Best Practices Analyzer 1.0 (KB2796170)
This Update resolves issues that were found since Windows Server Solution Best Practices Analyzer 1.0 was released. This update is highly recommended for all Windows Server Solution Best Practices Analyzer 1.0 customers...
Windows Server Solutions Best Practices Analyzer 1.0
Windows Server Solutions Best Practices Analyzer scans and finds problems on Windows Small Busienss Server 2011, Windows Storage Server 2008 Essentials R2, and Windows Multipoint Server 2011...