2703 matches found
Command injection
The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...
CVE-2007-2923
The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...
CVE-2007-2923
The CVE-2007-2923 issue concerns the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services. The launch() method can be abused to execute arbitrary commands on the affected host. A remote attacker could exploit this by enticing a user to visit a crafted page, ...
CVE-2007-2923
The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...
CVE-2007-2923: Undefined Security Weakness
The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...
Novell exteNd Director LocalExec ActiveX (LocalExec.ocx) launch() Method Arbitrary Command Execution
The remote host contains the LocalExec ActiveX control from Novell exteND Director, a set of development tools for creating enterprise web applications. The version of this control on the remote host reportedly contains a method named 'launch' that can be used to execute arbitrary commands. If an...
Novell exteNd Director 4.1 LocalExec ActiveX control fails to restrict access to dangerous methods
Overview The Novell exteNd Director 4.1 LocalExec ActiveX control fails to restrict access to dangerous methods, which can allow a remote, unauthenticated attacker to execute arbitrary commands on a vulnerable system. Description Novell exteNd Director is a set of software development tools and...
IBM Director多个拒绝服务和信息泄露漏洞
IBM Director是行业领先的Intel架构系统远程工作组系统管理软件。 IBM Director在处理畸形用户请求时存在漏洞，远程攻击者可能利用此漏洞导致服务器拒绝服务或信息泄露。 远程攻击者可以通过向IBM Director服务器发送畸形请求或报文导致拒绝服务，或通过HTTP TRACE功能访问HTTP头中的Cookie和认证数据。 受影响系统： IBM Director 5.10 不受影响系统： IBM Director 5.10 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
IBM Director Redirect.bat目录遍历漏洞
IBM Director是行业领先的Intel架构系统远程工作组系统管理软件。 IBM Director自带的脚本在处理用户参数时存在输入验证漏洞，远程攻击者可能利用此漏洞非授权获取文件内容。 IBM Director的Redirect.bat文件中没有正确的过滤对file参数的输入，允许攻击者通过目录遍历攻击泄漏任意文件的内容。 IBM Director 5.10 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
IBM Director < 5.10 (Redirect.bat) Directory Transversal Vulnerability
No description provided by source. There is a vulnerability within the Redirect.bat file on a ibm director cgi which allows a directory transversal to take place which in turn exposes most files on the system to be read without authorization...
CVE-2006-4681
Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary files via a .. dot dot sequence in the file parameter...
CVE-2006-4683
IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE...
CVE-2006-4682
Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service crash via unspecified vectors involving 1 malformed WMI CIM server requests and 2 malformed packets...
CVE-2006-4683
IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE...
CVE-2006-4682
Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service crash via unspecified vectors involving 1 malformed WMI CIM server requests and 2 malformed packets...
CVE-2006-4681
Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary files via a .. dot dot sequence in the file parameter...
CVE-2006-4681
CVE-2006-4681 concerns IBM Director prior to 5.10, where Redirect.bat is vulnerable to a directory traversal via a .. sequence in the file parameter. The affected component is Redirect.bat within IBM Director; the root cause is improper validation of the file parameter leading to path traversal. ...
CVE-2006-4683
CVE-2006-4683 affects IBM Director prior to 5.10. Reported vulnerability allows remote attackers to obtain sensitive information from HTTP headers by exploiting HTTP TRACE. The NVD entry assigns a CVSS v2 base score of 5.0 (Medium) with network access and low complexity; confidentiality impact is...
CVE-2006-4682
IBM Director before 5.10 is vulnerable to remote denial of service. The issue involves malformed WMI CIM server requests and malformed packets leading to crashes. No concrete exploit details are provided in the supplied documents. The affected product is IBM Director; remediation information (e.g...