8119 matches found
CVE-2009-3109
Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a deployment server and a client, allows remote attackers to bypass authentication and execute arbitrary commands as SYSTEM by...
CVE-2009-3110
CVE-2009-3110 affects Symantec Altiris Deployment Solution 6.9.x prior to 6.9 SP3 Build 430. A race condition in the file transfer functionality allows a remote attacker to intercept file transfers by connecting to the transfer port before the legitimate client, potentially reading sensitive file...
CVE-2009-3110
Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does...
CVE-2009-3109
Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a deployment server and a client, allows remote attackers to bypass authentication and execute arbitrary commands as SYSTEM by...
CVE-2009-3107
Symantec Altiris Deployment Solution 6.9.x prior to 6.9 SP3 Build 430 is affected by CVE-2009-3107 due to improper access restriction on the DBManager service port. This allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to the DBManager. Mu...
CVE-2009-3109
CVE-2009-3109 affects Symantec Altiris Deployment Solution 6.9.x prior to 6.9 SP3 Build 430. The AClient agent, when key-based authentication is used, can be bypassed by spoofing the deployment server and issuing alternate commands before the handshake, allowing arbitrary commands to be executed ...
CVE-2009-3108
CVE-2009-3108 affects Symantec Altiris Deployment Solution 6.9.x prior to 6.9 SP3 Build 430. The Aclient GUI is installed with insecure permissions (Everyone: Full Control), enabling local users to escalate privileges by replacing the client executable with a Trojan horse. Impact is local privile...
VMware Studio虚拟应用设备WEB接口文件上传目录遍历漏洞
Bugraq ID: 36199 CVE ID：CVE-2009-2968 VMware Studio是一款用于开发，配置，定制虚拟应用程序和应用设备的解决方案。 VMware Studio支持的web接口组件不正确过滤用户输入，远程攻击者可以利用漏洞上传文件到VMware Studio虚拟应用设备上的任意目录中。 不过此漏洞不影响由 Studio 2.0 beta建立的虚拟机。 VMWare Studio 2.0 beta 用户可联系供应商获得相应产品的补丁或升级程序： VMware Studio 2.0 build 1017-185256...
Altiris Deployment Solution Server DB Manager Unauthenticated Command Execution
The remote host is running a vulnerable version of Altiris Deployment Solution Server. Authentication is not required prior to sending commands to the DB Manager service. A remote attacker could exploit this to modify or read data from the Altiris database. C Tenable Network Security, Inc...
Symantec Altiris Deployment Solution文件传输竞争条件漏洞
BUGTRAQ ID: 36113 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Altiris Deployment Solution允许从服务器向部署的客户端传输文件。获得了网络访问且知道了为文件传输所分配端口的恶意用户可以通过连续多次连接到这个端口创造竞争条件，在合法客户端访问文件之前拦截这些文件的内容。成功攻击可能导致非授权的文件访问和/或部分的拒绝服务。 Symantec Altiris Deployment Solution 6.9.x 厂商补丁： Symantec...
Symantec Altiris Deployment Solution Aclient本地权限提升漏洞
BUGTRAQ ID: 36111 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Altiris Deployment Solution是的Aclient GUI没有充分的防范非授权访问。尽管安装目录是受保护的，Everyone用户组默认对客户端可执行程序都拥有完全控制，非特权用户可以利用Everyone用户组访问恶意修改客户端。 GUI二进制程序默认以登录用户权限运行，如果其他特权用户登录到了客户端，就可能导致权限提升或入侵客户端系统。 Symantec Altiris...
IBM WebSphere Application Server 7.0 < Fix Pack 5 Multiple Vulnerabilities
Binary data 5142.prm...
Altiris Deployment Solution 6.9.x < 6.9.430 Multiple Vulnerabilities
Binary data 5143.prm...
Symantec Altiris Deployment Solution Multiple Vulnerabilities
SUMMARY Symantecs Altiris Deployment Solution contains vulnerabilities that could potentially be leveraged for unauthorized file access or a denial of service on a client system, authentication bypass on the Server to local system-level access on a client system. AFFECTED PRODUCTS Product | Versi...
[SECURITY] Fedora 11 Update: ocsinventory-1.02.1-3.fc11
Open Computer and Software Inventory Next Generation is an application designed to help a network or system administrator keep track of the computers configuration and software that are installed on the network. OCS Inventory is also able to detect all active devices on your network, such as...
Microsoft Security Bulletin MS09-044 - Critical Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution (970927)
Microsoft Security Bulletin MS09-044 - Critical Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution 970927 Published: August 11, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft...
How to Plan for Smartphone Security in the Enterprise
From eWEEK Chris De Herrera One of the major challenges CIOs face is the deployment and security of smartphones in the enterprise. It’s important for CIOs to assess how their organization should secure the smartphones employees use to access corporate resources. Here, Knowledge Center contributor...
Microsoft Security Bulletin MS09-028 - Critical Vulnerabilities in Microsoft DirectShow Could Allow Remote Code Execution (971633)
Microsoft Security Bulletin MS09-028 - Critical Vulnerabilities in Microsoft DirectShow Could Allow Remote Code Execution 971633 Published: July 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed vulnerability and two privately reporte...
Siteframe CMS 3.2.x SQL Injection/phpinfo() Multiple Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== Siteframe CMS 3.2.x SQL Injection/phpinfo Multiple Vulnerabilities ====================================================================...
Command injection
The ListView control in the Client GUI AClient.exe in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a "Shatter" style attack on the "command prompt" hidden GUI button to 1 overwrite the CommandLine...