Adobe Director DIRAPI.DLL Memory Corruption Vulnerability

Advisory ID Internal CORE-2010-0405 1. Advisory Information Title: Adobe Director DIRAPI.DLL Memory Corruption Vulnerability Advisory Id: CORE-2010-0405 Advisory URL:http://www.coresecurity.com/content/adobe-director-memory-corruption Date published: 2010-05-11 Date of last update: 2010-05-11...

Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the code...

IBM Director Agent Denial of Service

There is a vulnerability within IBM Director Agent, a tool released by IBM to monitor and control computer systems remotely. It is possible for a remote attacker to craft and send a packet that will cause the remote Agent to terminate leading to a denial of service condition. Upon receipt of a...

Code injection

Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the 1 diruninstall and 2 opt/ibm/director/bin/wcitinst scripts, which allows local users to gain privileges by executing these scripts...

CVE-2010-1347

Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the 1 diruninstall and 2 opt/ibm/director/bin/wcitinst scripts, which allows local users to gain privileges by executing these scripts...

CVE-2010-1347

IBM Systems Director, Director Agent 6.1 prior to 6.1.2.3 on AIX and Linux, is affected. The root cause is incorrect permissions on (1) diruninstall and (2) opt/ibm/director/bin/wcitinst, enabling local privilege escalation by executing these scripts. Exploitation details are not provided in the ...

CVE-2010-1347

Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the 1 diruninstall and 2 opt/ibm/director/bin/wcitinst scripts, which allows local users to gain privileges by executing these scripts...

CVE-2010-1347: Undefined Security Weakness

Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the 1 diruninstall and 2 opt/ibm/director/bin/wcitinst scripts, which allows local users to gain privileges by executing these scripts...

Top Guns of U.S. Security To Speak at RSA

The Obama administration gets a chance to demonstrate its cybersecurity leadership as three top guns from the executive branch – Homeland Security Secretary Janet Napolitano, White House Cybersecurity Coordinator Howard Schmidt and FBI Director Robert Mueller – address the RSA conference in San...

IBM Director CIM Server Consumer Name Handling Denial of Service (CVE-2009-0879)

IBM Director is an element management system, previously known as Netfinity Director that was designed by IBM based on Tivoli IT Director. It consists of three components: agent, administering console, and server. The agent software is installed on systems to be monitored and other components...

Directory traversal

Directory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows remote attackers to read arbitrary files via directory traversal sequences in the a parameter...

CVE-2009-2931

CVE-2009-2931 affects SlideShowPro Director versions 1.1 through 1.3.8, via a vulnerability in the script file p.php . The underlying issue is a directory traversal in the a parameter, allowing remote attackers to read arbitrary files on the server. The initial public sources in the connected doc...

CVE-2009-2931: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows remote attackers to read arbitrary files via directory traversal sequences in the a parameter...

Adobe Shockwave Player RCE Vulnerability

Adobe Shockwave Player is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Shockwave Player memory corruption

Memory corruption on Adobe Director 10 files parsing...

Adobe Shockwave Player Director文件解析远程代码执行漏洞

Bugraq ID: 35469 CVE ID：CVE-2009-1860 Adobe Shockwave Player是一款用于播放使用Director Shockwave Studio制作的网页的外挂软件。 Adobe Shockwave Player处理Director文件存在一个严重的安全问题，远程攻击者可以利用漏洞完全控制受此漏洞影响的系统。 当Shockwave player尝试装载特殊构建的Director文件时，在内存引用时恶意值可覆盖4字节内存，导致以登录用户进程权限执行任意指令。 Adobe Shockwave Player 11.5 596 升级到Adobe...

Adobe Shockwave Player Director File Parsing Pointer Overwrite Vulnerability

This vulnerability allows remote attackers to execute code on vulnerable installations of Adobe's Shockwave Player. User interaction is required in that a user must visit a malicious web site. The specific flaw exists when the Shockwave player attempts to load a specially crafted Adobe Director...

IBM Director CIM服务器本地权限提升漏洞

BUGTRAQ ID: 34065 CVECAN ID: CVE-2009-0880 IBM Director是行业领先的Intel架构系统远程工作组系统管理软件。 IBM Director组件中捆绑了一个CIM服务程序，用于监听传送给本地consumer的indication请求。这些consumer是在系统上的动态链接库或共享对象中实现的。由于没有对consumer名称守护程序检查Windows路径元字符（\），因此可以遍历文件系统指定系统上的任意库。CIM服务器会加载指定的DLL并调用其初始化函数PegasusCreateProviderconst char 。...

IBM Director CIM服务器Consumer名称拒绝服务漏洞

BUGTRAQ ID: 34061 CVECAN ID: CVE-2009-0879 IBM Director是行业领先的Intel架构系统远程工作组系统管理软件。 IBM Director组件中捆绑了一个CIM服务程序，用于监听传送给本地consumer的indication请求。如果远程攻击者向CIM服务器发送了带有超长consumer名称的恶意请求的话，就会导致服务器崩溃，在手动重启服务之前无法到达IBM Director代理。 IBM Director = 5.20.3 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-0880

Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. dot dot in a /CIMListener/ URI in an M-POST request...