975 matches found
Php injection point construct-vulnerability warning-the black bar safety net
Php injection point configuration Put the following saved into a Test.php ? $mysqlservername = "localhost"; $mysqlusername = "root"; $mysqlpassword = "password"; $mysqldatabase = "phpzr"; //?? ݿ?? $conn=mysqlconnect $mysqlservername, $mysqlusername, $mysqlpassword ;...
StarTeam Server Detection
The remote host is running a Borland StarTeam Server. StarTeam is a commercial software configuration and change management tool. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid31355; scriptversion"1.9";...
HP OpenView Client Configuration Manager Default Credentials
The remote host is running HP OpenView Client Configuration Manager OVCCM, a PC software configuration management application. The remote installation of OVCCM is configured to use default credentials to control access. Knowing these, an attacker can gain control of the affected application...
CVE-2007-5413
httpd.tkd in Radia Integration Server in Hewlett-Packard HP OpenView Configuration Management CM Infrastructure 4.0 through 4.2i and Client Configuration Manager CCM 2.0 allows remote attackers to read arbitrary files via URLs containing tilde references to home directories, as demonstrated by ro...
CVE-2007-5413
HP OpenView Radia Integration Server, specifically httpd.tkd, is affected in CM Infrastructure v4.0–4.2i and CCM v2.0. The vulnerability arises from insufficient validation of URLs containing tilde references (e.g., ~root) in the HTTP server bound to TCP port 3465, enabling remote attackers to re...
CVE-2007-5413
httpd.tkd in Radia Integration Server in Hewlett-Packard HP OpenView Configuration Management CM Infrastructure 4.0 through 4.2i and Client Configuration Manager CCM 2.0 allows remote attackers to read arbitrary files via URLs containing tilde references to home directories, as demonstrated by ro...
HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management (CM) Infrastructure (Radia) and Client Configuration Manager (CCM) Running httpd.tkd, Remote Unauthorized Access to Data
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01205079 Version: 1 HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management CM Infrastructure Radia and Client Configuration Manager CCM Running httpd.tkd,...
HP OpenView unauthorized access
HP OpenView Configuration Management CM Infrastructure Radia and Client Configuration Manager CCM unauthorized access thorugh httpd.tkd...
kapda-450.txt
Product: cutenews 1.4.5 Vendor: http://cutephp.com The Results through security analysis of cutenews 1.4.5 provided by KAPDA.ir -------------------------------------------------- Test plan: Manual penetration testing: YES Using automated tools: NO Code Auditing: YES Statistical Results from...
JVN#55023557 Buffalo router configuration management interface vulnerable to remote access and password leakage
Impact Configurations could be changed by the remote attacker. As the save configuration stores user's account and password information of ISPs in plain-text format, a remote attacker could steal such information and impersonate a user to gain illegal access. Solution Products Affected BUFFALO...
CVE-2004-1163
Cisco CNS Network Registrar Central Configuration Management CCM server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service CPU consumption by ending a connection after sending a certain sequence of packets...
Recovering Passwords in Visible Systems' Razor
|-------------- RECOVERING PASSWORDS IN VISIBLE SYSTEMS' RAZOR ---------------| |--------------------------------------------------------------------------- --| |-------------------- Shawn Clifford [email protected] ---------------------| This advisory follows the RFP disclosure policy:...
razor.password.txt
--| |-------------------- Shawn Clifford ---------------------| This advisory follows the RFP disclosure policy: http://www.wiretrip.net/rfp/policy.html ----| ISSUE Razor is a configuration management tool see http://www.razor.visible.com. There is a serious flaw with the Razor password file,...
Visible Systems Razor 4.1 - Password File (1)
Visible Systems Razor 4.1 - Password File 1 // source: https://www.securityfocus.com/bid/1424/info The Razor Configuration Management program stores passwords in an insecure manner. A local attacker can obtain the Razor passwords, and either seize control of the software and relevant databases or...