1067 matches found
Novell ZENworks Configuration Management UploadServlet Remote Code Execution
Added: 05/10/2010 BID: 39114 OSVDB: 63412 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a client/server...
Novell ZENworks Configuration Management UploadServlet Remote Code Execution
Added: 05/10/2010 BID: 39114 OSVDB: 63412 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a client/server...
Novell ZENworks Configuration Management UploadServlet Remote Code Execution
Added: 05/10/2010 BID: 39114 OSVDB: 63412 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a client/server...
NovellZENworks Configuration Management Code Execution
Exploit Title: ZDI-10-078: NovellZENworks Configuration Management UploadServlet Remote Code Execution Vulnerability Date: 2009-04-26 Author: tucanalamigo http://tucanalamigo.blogspot.com Software Link: http://www.novell.com/products/zenworks/configurationmanagement/ Version: 10.2 Tested on:...
Novell ZENworks Configuration Management UploadServlet Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENworks. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ZENworks Server zenserver.exe. This Tomcat server listens by default on TCP ports ...
Novell ZENworks Configuration Management < 10 SP3 Multiple Flaws
ZENworks Configuration Management, a configuration management software from Novell, is installed on the remote Windows host. According to its version, it is affected by several vulnerabilities : - An unspecified vulnerability in ZCM Preboot Service may allow an attacker to execute arbitrary code ...
Novell ZENworks Configuration Management Preboot Service 0x06 Buffer Overflow
This module exploits a remote buffer overflow in the ZENworks Configuration Management 10 SP2. The vulnerability exists in the Preboot service and can be triggered by sending a specially crafted packet with the opcode 0x06 PROXYCMDCLEARWS to the 998/TCP port. The module has been successfully test...
Novell ZENworks Configuration Management Remote Execution
This module exploits a code execution flaw in Novell ZENworks Configuration Management 10.2.0. By exploiting the UploadServlet, an attacker can upload a malicious file outside of the TEMP directory and then make a secondary request that allows for arbitrary code execution. Module Options msf use...
Novell ZENworks Configuration Management Preboot Service 0x21 Buffer Overflow
This module exploits a remote buffer overflow in the ZENworks Configuration Management 10 SP2. The vulnerability exists in the Preboot service and can be triggered by sending a specially crafted packet with the opcode 0x21 PROXYCMDFTPFILE to port 998/TCP. The module has been successfully tested o...
Php injection point construct-vulnerability warning-the black bar safety net
Php injection point configuration Put the following saved into a Test.php ? $mysqlservername = "localhost"; $mysqlusername = "root"; $mysqlpassword = "password"; $mysqldatabase = "phpzr"; //?? ݿ?? $conn=mysqlconnect $mysqlservername, $mysqlusername, $mysqlpassword ;...
StarTeam Server Detection
The remote host is running a Borland StarTeam Server. StarTeam is a commercial software configuration and change management tool. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid31355; scriptversion"1.9";...
HP OpenView Client Configuration Manager Default Credentials
The remote host is running HP OpenView Client Configuration Manager OVCCM, a PC software configuration management application. The remote installation of OVCCM is configured to use default credentials to control access. Knowing these, an attacker can gain control of the affected application...
CVE-2007-5413
httpd.tkd in Radia Integration Server in Hewlett-Packard HP OpenView Configuration Management CM Infrastructure 4.0 through 4.2i and Client Configuration Manager CCM 2.0 allows remote attackers to read arbitrary files via URLs containing tilde references to home directories, as demonstrated by ro...
CVE-2007-5413
HP OpenView Radia Integration Server, specifically httpd.tkd, is affected in CM Infrastructure v4.0–4.2i and CCM v2.0. The vulnerability arises from insufficient validation of URLs containing tilde references (e.g., ~root) in the HTTP server bound to TCP port 3465, enabling remote attackers to re...
CVE-2007-5413
httpd.tkd in Radia Integration Server in Hewlett-Packard HP OpenView Configuration Management CM Infrastructure 4.0 through 4.2i and Client Configuration Manager CCM 2.0 allows remote attackers to read arbitrary files via URLs containing tilde references to home directories, as demonstrated by ro...
CVE-2007-5413: Exposure of Sensitive Information to an Unauthorized Actor
httpd.tkd in Radia Integration Server in Hewlett-Packard HP OpenView Configuration Management CM Infrastructure 4.0 through 4.2i and Client Configuration Manager CCM 2.0 allows remote attackers to read arbitrary files via URLs containing tilde references to home directories, as demonstrated by ro...
HP OpenView unauthorized access
HP OpenView Configuration Management CM Infrastructure Radia and Client Configuration Manager CCM unauthorized access thorugh httpd.tkd...
HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management (CM) Infrastructure (Radia) and Client Configuration Manager (CCM) Running httpd.tkd, Remote Unauthorized Access to Data
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01205079 Version: 1 HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management CM Infrastructure Radia and Client Configuration Manager CCM Running httpd.tkd,...
kapda-450.txt
Product: cutenews 1.4.5 Vendor: http://cutephp.com The Results through security analysis of cutenews 1.4.5 provided by KAPDA.ir -------------------------------------------------- Test plan: Manual penetration testing: YES Using automated tools: NO Code Auditing: YES Statistical Results from...
JVN#55023557 Buffalo router configuration management interface vulnerable to remote access and password leakage
Impact Configurations could be changed by the remote attacker. As the save configuration stores user's account and password information of ISPs in plain-text format, a remote attacker could steal such information and impersonate a user to gain illegal access. Solution Products Affected BUFFALO...