2303 matches found
Buffer overflow
Buffer overflow in ldcconn in Hewlett-Packard HP Controller for Cisco Local Director on HP-UX 11.11i allows remote attackers to execute arbitrary code via a long string to TCP port 17781...
CVE-2007-4241
Buffer overflow in ldcconn in Hewlett-Packard HP Controller for Cisco Local Director on HP-UX 11.11i allows remote attackers to execute arbitrary code via a long string to TCP port 17781...
CVE-2007-4241
CVE-2007-4241 is a buffer overflow in ldcconn of Hewlett-Packard (HP) Controller for Cisco Local Director on HP-UX 11.11i, allowing remote code execution via long strings sent to TCP port 17781. The vulnerability is rooted in the ldcconn component. Affected product is HP’s Cisco Local Director in...
HP-UX HP Controller for Cisco Local Director daemon buffer overflow
Buffer overflow in ldconn on parsing TCP/17781 traffic...
PHP Director Videos.PHP SQL注入漏洞
PHP Director是一款基于PHP的WEB应用程序。 PHP Director不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Videos.PHP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 PHPDirector 0.21 目前没有解决方案提供： http://www.phpdirector.co.uk/site/...
CVE-2007-3562
SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-3562
SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-3562
CVE-2007-3562 affects PHP Director 0.21 and earlier, where the videos.php id parameter is vulnerable to SQL injection via a remote attacker. The NVD entry indicates a base score of 7.5 (HIGH) with network attack vector and partial impacts to confidentiality, integrity, and availability. Remediati...
Command injection
The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...
CVE-2007-2923
The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...
CVE-2007-2923
The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...
CVE-2007-2923
The CVE-2007-2923 issue concerns the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services. The launch() method can be abused to execute arbitrary commands on the affected host. A remote attacker could exploit this by enticing a user to visit a crafted page, ...
Novell exteNd Director LocalExec ActiveX (LocalExec.ocx) launch() Method Arbitrary Command Execution
The remote host contains the LocalExec ActiveX control from Novell exteND Director, a set of development tools for creating enterprise web applications. The version of this control on the remote host reportedly contains a method named 'launch' that can be used to execute arbitrary commands. If an...
Novell exteNd Director 4.1 LocalExec ActiveX control fails to restrict access to dangerous methods
Overview The Novell exteNd Director 4.1 LocalExec ActiveX control fails to restrict access to dangerous methods, which can allow a remote, unauthenticated attacker to execute arbitrary commands on a vulnerable system. Description Novell exteNd Director is a set of software development tools and...
IBM Director Redirect.bat目录遍历漏洞
IBM Director是行业领先的Intel架构系统远程工作组系统管理软件。 IBM Director自带的脚本在处理用户参数时存在输入验证漏洞，远程攻击者可能利用此漏洞非授权获取文件内容。 IBM Director的Redirect.bat文件中没有正确的过滤对file参数的输入，允许攻击者通过目录遍历攻击泄漏任意文件的内容。 IBM Director 5.10 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
IBM Director多个拒绝服务和信息泄露漏洞
IBM Director是行业领先的Intel架构系统远程工作组系统管理软件。 IBM Director在处理畸形用户请求时存在漏洞，远程攻击者可能利用此漏洞导致服务器拒绝服务或信息泄露。 远程攻击者可以通过向IBM Director服务器发送畸形请求或报文导致拒绝服务，或通过HTTP TRACE功能访问HTTP头中的Cookie和认证数据。 受影响系统： IBM Director 5.10 不受影响系统： IBM Director 5.10 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
IBM Director < 5.10 (Redirect.bat) Directory Transversal Vulnerability
No description provided by source. There is a vulnerability within the Redirect.bat file on a ibm director cgi which allows a directory transversal to take place which in turn exposes most files on the system to be read without authorization...
CVE-2006-4682
Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service crash via unspecified vectors involving 1 malformed WMI CIM server requests and 2 malformed packets...