DSA-2511-1 puppet - several

Bulletin has no description...

AdminStudio LaunchHelp.dll ActiveX Arbitrary Code Execution

This module exploits a vulnerability in AdminStudio LaunchHelp.dll ActiveX control. The LaunchProcess function found in LaunchHelp.HelpLauncher.1 allows remote attackers to run arbitrary commands on the victim machine. This module has been successfully tested with the ActiveX installed with...

Novell ZENworks Configuration Management Preboot Service Remote File Access

This module exploits a directory traversal in the ZENworks Configuration Management. The vulnerability exists in the Preboot service and can be triggered by sending a specially crafted PROXYCMDFTPFILE opcode 0x21 packet to the 998/TCP port. This module has been successfully tested on Novell...

AdminStudio LaunchHelp.dll ActiveX Arbitrary Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'AdminStudio LaunchHelp.dll ActiveX...

GAO Calls out the FDIC

It’s not always malicious hackers and purported state actors that expose weaknesses in government systems. Sometime it’s other government agencies as well. This was the case when federal watchdog, the Government Accountability Office, audited and subsequently called out the Federal Deposit...

Novell ZENworks Configuration Management PreBoot Service Buffer Overflow

A stack buffer overflow vulnerability has been reported in Novell ZENworks Configuration Management...

Novell ZENworks Configuration Management PreBoot Opcode Buffer Overflow (CVE-2011-3176)

A stack buffer overflow vulnerability has been reported in Novell ZENworks Configuration Management...

Novell ZENworks Configuration Management PreBoot Service Opcode Request Parsing Vulnerabilities

According to its version, the instance of ZENworks Configuration Management installed on the remote Windows host has several vulnerabilities in its PreBoot service : - An arbitrary file download vulnerability via opcode 0x21 may allow an attacker to download any file on the remote system. TID...

Debian Security Advisory DSA 2451-1 (puppet)

The remote host is missing an update to puppet announced via advisory DSA 2451-1. OpenVAS Vulnerability Test $Id: deb24511.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2451-1 puppet Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2451-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell ZENworks Configuration Management File Upload

File upload vulnerability in Novell ZENworks Configuration Management FileUploadServlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

CVE-2012-2223

The xplat agent in Novell ZENworks Configuration Management ZCM 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing XST attacks via unspecified vectors...

Cross site scripting

The xplat agent in Novell ZENworks Configuration Management ZCM 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing XST attacks via unspecified vectors...

CVE-2012-2223

The xplat agent in Novell ZENworks Configuration Management ZCM 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing XST attacks via unspecified vectors...

CVE-2012-2223

The CVE-2012-2223 issue affects Novell ZENworks Configuration Management (ZCM): the xplat agent in ZCM 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which could allow remote attackers to perform cross-site tracing (XST) via unspecified vectors. Impact is stated as poten...

CVE-2012-2215

Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management ZCM 11.1 and 11.1a allows remote attackers to read arbitrary files via an opcode 0x21 request...

Directory traversal

Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management ZCM 11.1 and 11.1a allows remote attackers to read arbitrary files via an opcode 0x21 request...

CVE-2012-2215

Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management ZCM 11.1 and 11.1a allows remote attackers to read arbitrary files via an opcode 0x21 request...

CVE-2011-3175

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management ZCM 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x6c request...

Stack overflow

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management ZCM 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x4c request...