2172 matches found
Microsoft Releases Attack Surface Analyzer Tool
Microsoft has released a public version of its internal Attack Surface Analyzer tool, which helps organizations identify changes to a system’s attack surface as new applications are added. The tool has been in beta for a few months, but this is the first official release. The Attack Surface...
CVE-2012-2163
IBM Scale Out Network Attached Storage SONAS 1.1 through 1.3.1 allows remote authenticated administrators to execute arbitrary Linux commands via the 1 Command Line Interface or 2 Graphical User Interface, related to a "code injection" issue...
PT-2012-3847
Name of the Vulnerable Software and Affected Versions IBM Scale Out Network Attached Storage SONAS versions 1.1 through 1.3.1 Description The issue allows remote authenticated administrators to execute arbitrary Linux commands, related to a code injection problem. This can be achieved via the...
CVE-2012-2163: Undefined Security Weakness
IBM Scale Out Network Attached Storage SONAS 1.1 through 1.3.1 allows remote authenticated administrators to execute arbitrary Linux commands via the 1 Command Line Interface or 2 Graphical User Interface, related to a "code injection" issue...
PT-2012-6287
Name of the Vulnerable Software and Affected Versions PAN-OS versions 4.0.0 through 4.0.7 Description A vulnerability exists in the device-management command-line interface, allowing remote authenticated users to execute arbitrary commands. This can result in arbitrary command execution and total...
PT-2012-6283
Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.10 and earlier Palo Alto Networks PAN-OS versions 4.0.7 and earlier Palo Alto Networks PAN-OS versions 4.1.0 and earlier Description A vulnerability exists in the device-management command-line interface,...
PT-2012-6293
Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions prior to 3.1.11 Palo Alto Networks PAN-OS versions 4.0.x prior to 4.0.9 Description A vulnerability exists in the device-management command-line interface, allowing remote authenticated users to execute...
PT-2012-6286
Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.10 and earlier Palo Alto Networks PAN-OS versions 4.0.8 and earlier Description The issue allows remote authenticated users to cause a denial of service by sending a specially crafted command via the...
Mathematica8.0.4 on Linux /tmp/MathLink vulnerability
The problem reported for Mathematica became worse at version 8.0.4, present for the command-line interface "math" also. Cheers, Paul Szabo [email protected] http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia ---...
[SECURITY] Fedora 16 Update: sectool-0.9.5-7.fc16
sectool is a security tool that can be used both as a security audit and intrusion detection system. It consists of set of tests, library and command line interface tool. Tests are sorted into groups and security levels. Admins can run certain tests, groups or whole security levels. The library a...
Several Vulnerabilities in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Information Disclosure, Insecure Unserialize Component Type: TYPO3 Core Affected Versions: 4.4.0 up to 4.4.13, 4.5.0 up to 4.5.13, 4.6.0 up to 4.6.6 and development releases of the 4.7 and 6.0 branch. Vulnerability Type...
PHP Calendar Extension “SdnToJulian()”远程整数溢出漏洞
BUGTRAQ ID: 46967 CVE ID: CVE-2011-1466 PHP是一种在电脑上运行的脚本语言，主要用途是在于处理动态网页，包含了命令行运行接口或者产生图形用户界面程序。 PHP 5.3.6之前版本的Calendar扩展中的SdnToJulian函数在实现上存在整数溢出漏洞，可使攻击者通过calfromjd函数的首个参数造成拒绝服务 0 PHP 5.3.x 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.php.net...
The Mole - Another Automatic SQL Injection exploitation tool
The Mole - Another Automatic SQL Injection exploitation tool The Mole is an automatic SQL Injection exploitation tool. Only by providing a vulnerable URL and a valid string on the site it can detect the injection and exploit it, either by using the union technique or a boolean query based...
[SECURITY] Fedora 14 Update: roundup-1.4.15-1.fc14
Roundup is a simple and flexible issue-tracking system with command line, web and email interfaces. It is based on the winning design from Ka-Ping Yee in the Software Carpentry "Track" design competition...
DEBIAN-CVE-2009-2936
The Command Line Interface aka Server CLI or administration interface in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to 1 execute arbitrary code via a vcl.inline...
CVE-2009-2936
The Command Line Interface aka Server CLI or administration interface in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to 1 execute arbitrary code via a vcl.inline...
CVE-2009-2936
CVE-2009-2936 affects the Varnish reverse proxy CLI in the master process prior to 2.1.0, where the TCP-based commands do not require authentication. The vulnerability can allow remote attackers to: (1) execute arbitrary code via a vcl.inline directive containing inline C code; (2) change the mas...
Design/Logic Flaw
The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to...
Design/Logic Flaw
Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.2 and Cisco ACE 4710 Application Control Engine Appliance before A18a allows remote authenticated users to execute arbitrary operating-system commands through a command...
