CVE-2016-3462

CVE-2016-3462 affects Oracle Solaris 11.3, specifically the Network Configuration Service subcomponent. The vulnerability allows a local attacker to cause a denial of service, impacting data availability. The root cause and exact exploit vector are not detailed in the provided documents beyond th...

CVE-2016-3462: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service...

Oracle Solaris Critical Patch Update : apr2016_SRU11_3_7_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Network Configuration Service. The supported version that is affected is 11.3. Easily exploitable vulnerability allow...

CVE-2015-2593

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service...

CVE-2015-2593

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service...

CVE-2015-2593: Undefined Security Weakness

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service...

Oracle Access Manager Multiple Vulnerabilities (July 2015 CPU)

The version of Oracle Access Manager installed on the remote host is affected by multiple vulnerabilities : - An unspecified flaw exists in the Configuration Service subcomponent that allows a remote, authenticated attacker to impact confidentiality and integrity. CVE-2015-2593 - An unspecified...

Sysmon v2.0 - System Activity Monitor for Windows

System Monitor Sysmon is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log. It provides detailed information about process creations, network connections, and changes to...

PT-2014-6182 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 11.3.0.355 Description: The issue allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information without requiring authentication on TCP port 9010...

MGASA-2014-0404 Updated fish package fixes multiple security vulnerabilities

Updated fish packages fix security vulnerability: fish, from at least version 1.16.0 to version 2.1.0 inclusive, does not check the credentials of processes communicating over the fishd universal variable server UNIX domain socket. This allows a local attacker to elevate their privileges to those...

Updated fish package fixes multiple security vulnerabilities

Updated fish packages fix security vulnerability: fish, from at least version 1.16.0 to version 2.1.0 inclusive, does not check the credentials of processes communicating over the fishd universal variable server UNIX domain socket. This allows a local attacker to elevate their privileges to those...

CVE-2013-7357

Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential information via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential information via unknown vectors...

CVE-2013-7357

Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential information via unknown vectors...

CVE-2013-7357: Undefined Security Weakness

Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential information via unknown vectors...

CVE-2009-4463: Undefined Security Weakness

Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in...

Microsoft Windows XP - Wireless Zero Configuration Service Information Disclosure

source: https://www.securityfocus.com/bid/15008/info WZCSVC is affected by an information disclosure vulnerability. Reportedly, the Pairwise Master Key PMK of the Wi-Fi Protected Access WPA preshared key authentication and the WEP keys of the interface may be obtained by a local unauthorized...

NTMail Proxy Exploit

NTmail version 5.x possibly other versions, I haven't checked has two web functions. One is a web configuration server which lets you configure the mail server via a browser. The other is it can also work as a proxy server. These two functions are set by default to use two different ports 8000 fo...

CVE-1999-0571: Undefined Security Weakness

A router's configuration service or management interface such as a web server or telnet is configured to allow connections from arbitrary hosts...