MS12-062: Vulnerability in System Center Configuration Manager could allow elevation of privilege: September 11, 2012

Resolves a vulnerability in Microsoft System Center Configuration Manager that could allow elevation of privilege if a user visits an affected website by way of a specially crafted URL.INTRODUCTIONMicrosoft has released security bulletin MS12-062. To view the complete security bulletin, go to one...

CVE-2012-2536: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."...

MS12-062: Vulnerability in System Center Configuration Manager Could Allow Elevation of Privilege (2741528)

The version of Microsoft System Center Configuration Manager, formerly known as Systems Management Server, installed on the remote host is potentially affected by a reflected cross-site scripting vulnerability. By tricking a user into clicking a specially crafted link, an attacker could gain...

Microsoft SMS / SCCM Installed (Windows)

Microsoft System Center Configuration Manager SCCM, formerly known as Systems Management Server SMS, a systems management application is installed on the remote Windows host. C Tenable, Inc. include"compat.inc"; if description scriptid62028; scriptversion"1.11";...

GS8100 Configuration Manager GUI CSRF Vulnerability

Exploit for hardware platform in category web applications db 88 d88b "" d8'8b d8' 8b ,adPPYba, ,adPPYba, ,adPPYba, 88 8b,dPPYba, ,adPPYba, d8YaaaaY8b I8 "" a8P88 I8 "" 88 88P' "8a a8" "8a d8""""""""8b "Y8ba, 8PP""""""" "Y8ba, 88 88 88 8b d8 d8' 8b aa 8I "8b, ,aa aa 8I 88 88 88 "8a, ,a8" d8' 8b...

Race condition

Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play PnP Configuration Manager...

CVE-2012-0178

CVE-2012-0178 affects Windows Partition Manager (partmgr.sys) and stems from a race condition in handling device-relations requests. A crafted application that issues multiple simultaneous Plug and Play (PnP) Configuration Manager calls could allow local users to gain kernel-mode privileges on Wi...

Microsoft Windows Prtition Manager Privilege Elevation Vulnerability (2690533)

This host is missing an important security update according to Microsoft Bulletin MS12-033. OpenVAS Vulnerability Test $Id: secpodms12-033.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Prtition Manager Privilege Elevation Vulnerability 2690533 Authors: Rachana Shetty Copyright: Copyright...

CVE-2012-0178: Undefined Security Weakness

Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play PnP Configuration Manager...

PT-2012-2376 · Microsoft · Windows Partition Manager +4

Name of the Vulnerable Software and Affected Versions: Windows Partition Manager versions in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 Description: The issue is related to an elevation of privilege vulnerability in the way Windows Partition...

CVE-2012-2230: Undefined Security Weakness

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than...

CVE-2009-5086

Cross-site scripting XSS vulnerability in Appliance Configuration Manager ACM in Juniper IDP 4.1 before 4.1r3 and 4.2 before 4.2r1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-5086

CVE-2009-5086 concerns an XSS vulnerability in Juniper IDP ACM (Appliance Configuration Manager). Affected are IDP versions prior to 4.1r3 and prior to 4.2r1, where an attacker can inject arbitrary web script or HTML via unspecified vectors in the ACM web interface. The practical impact is that a...

CVE-2009-5086: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Appliance Configuration Manager ACM in Juniper IDP 4.1 before 4.1r3 and 4.2 before 4.2r1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Microsoft System Center Configuration Manager Client Installed

The Microsoft System Center Configuration Manager client, a management system client, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid55532; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate",...

ZDI-11-089: Novell ZenWorks TFTPD Remote Code Execution Vulnerability

ZDI-11-089: Novell ZenWorks TFTPD Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-089 February 17, 2011 -- CVE ID: CVE-2010-4323 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell Zenworks -- TippingPointTM IPS...

CVE-2010-4323

This CVE concerns the Novell Zenworks Configuration Manager TFTPD daemon (novell-tftp.exe). A heap-based buffer overflow in TFTPD’s request parsing allows remote code execution via crafted UDP requests sent to port 69. The vulnerability affects ZCM versions including 10.3.1, 10.3.2, 11.0 and earl...

CVE-2010-4323

Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager ZCM 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arbitrary code via a long TFTP request...

CVE-2010-4323: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager ZCM 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arbitrary code via a long TFTP request...

Novell ZenWorks TFTPD Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Zenworks Configuration Manager. Authentication is not required to exploit this vulnerability. The flaw exists within the novell-tftp.exe component which listens by default on UDP port 69. Wh...