Microsoft System Center Configuration Manager Management Point Detection

The remote service is a Management Point for a Microsoft System Center Configuration Manager server. It is used by client agents to communicate with the Configuration Manager. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51836; scriptversion"1.9";...

Nagios XI 2009R1.2B Multiple CSRF

Advisory Information Advisory ID: NGENUITY-2010-006 Date published: Aug. 7, 2010 Class: Cross-Site Request Forgery CSRF Software Description Nagios XI is the commercial / enterprise version of the open source Nagios project. Vulnerability Description Nagios XI 2009R1.2B is vulnerable to multiple...

HP OpenView Client Configuration Manager Radia Notify Code Execution (CVE-2006-5782)

An authentication weakness vulnerability exists in the Radia Notify Daemon component of HP OpenView Client Configuration Manager. The flaw is created by improper handling of user supplied data passed to the affected Radia Notify Daemon on TCP port 3465. By sending a crafted message, the attacker...

CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)

Title: CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities CA Advisory Reference: CA20090123-01 CA Advisory Date: 2009-01-23 Reported By: n/a Impact: Refer to the CVE identifiers for details. Summary: Multiple security risks exist in Apache Tomcat as included with CA Cohesion Application...

HP OpenView Client Configuration Manager Default Credentials

The remote host is running HP OpenView Client Configuration Manager OVCCM, a PC software configuration management application. The remote installation of OVCCM is configured to use default credentials to control access. Knowing these, an attacker can gain control of the affected application...

CVE-2007-5413

HP OpenView Radia Integration Server, specifically httpd.tkd, is affected in CM Infrastructure v4.0–4.2i and CCM v2.0. The vulnerability arises from insufficient validation of URLs containing tilde references (e.g., ~root) in the HTTP server bound to TCP port 3465, enabling remote attackers to re...

CVE-2007-5413: Exposure of Sensitive Information to an Unauthorized Actor

httpd.tkd in Radia Integration Server in Hewlett-Packard HP OpenView Configuration Management CM Infrastructure 4.0 through 4.2i and Client Configuration Manager CCM 2.0 allows remote attackers to read arbitrary files via URLs containing tilde references to home directories, as demonstrated by ro...

HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management (CM) Infrastructure (Radia) and Client Configuration Manager (CCM) Running httpd.tkd, Remote Unauthorized Access to Data

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01205079 Version: 1 HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management CM Infrastructure Radia and Client Configuration Manager CCM Running httpd.tkd,...

HP OpenView unauthorized access

HP OpenView Configuration Management CM Infrastructure Radia and Client Configuration Manager CCM unauthorized access thorugh httpd.tkd...

HP OpenView Client Configuration Manager code execution

It's possible to make data to be downloaded and executed thorugh TCP/3465...

CVE-2006-5782: Undefined Security Weakness

radexecd.exe in HP OpenView Client Configuraton Manager CCM does not require authentication before executing commands in the installation directory, which allows remote attackers to cause a denial of service reboot by calling radbootw.exe or create arbitrary files by calling radcrecv...

IBM多个产品未明信任书伪造漏洞

IBM包含多系列产品，如IBM Tivoli，IBM WebSphere等。 IBM多个产品存在信任书伪造问题，远程攻击者可以利用这个漏洞访问资源和数据或可能控制应用程序。 目前报告此问题可以使攻击者利用COOKIE或伪造其他信任用户未授权访问资源，目前没有详细漏洞细节提供。 IBM Tivoli Access Manager for e-business 5.1 IBM Tivoli Access Manager for e-business 4.1 IBM Tivoli Access Manager for e-business 3.9 IBM Tivoli Access Manag...

GLSA-200606-14 : GDM: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200606-14 GDM: Privilege escalation GDM allows a normal user to access the configuration manager. Impact : When the 'face browser' in GDM is enabled, a normal user can use the 'configure login manager' with his/her own password...

GDM: Privilege escalation

Background GDM is the GNOME display manager. Description GDM allows a normal user to access the configuration manager. Impact When the "face browser" in GDM is enabled, a normal user can use the "configure login manager" with his/her own password instead of the root password, and thus gain...

CVE-2004-2558

Technical details about CVE-2004-2558 are not provided in the connected documents. Available descriptions reference an unspecified session hijacking vulnerability in IBM Tivoli/WebSphere products. Monitor for updates and rely on official advisories for precise impact and fixes.

CVE-2004-2558: Undefined Security Weakness

Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provide...

CVE-2004-1977

CVE-2004-1977 affects 3Com NBX VoIP NetSet Configuration Manager. OpenVAS/Open source notes describe that remote attackers can trigger a denial-of-service (crash) by running a Nessus scan with safeChecks enabled against the web interface. The CVE records indicate an unauthenticated, network-based...

CVE-2004-1977

3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service crash via a Nessus scan in safeChecks mode...

CVE-2004-1977: Undefined Security Weakness

3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service crash via a Nessus scan in safeChecks mode...

[Full-Disclosure] 3com NBX VOIP NetSet Denial of Service Attack

Systems: 3com NBX IP VOIP NetSetr Configuration Manager Severity: Serious Category: Denial of Service Classification: Insufficient user input checking BugTraq-ID: TBD CERT VU: TBD CVE ID: TBD Vendor URL: www.3com.com Author: Michael S. Scheidell, SECNAP Network Security Corporation Original Relea...