IBM Tivoli Provisioning Manager Express Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 OperatingSystems::WINDOWS, :uaname =...

IBM Cognos tm1admsd.exe Overflow

This module exploits a stack buffer overflow in IBM Cognos Analytic Server Admin service. The vulnerability exists in the tm1admsd.exe component, due to a dangerous copy of user controlled data to the stack, via memcpy, without validating the supplied length and data. The module has been tested...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS Software Traffic Optimization Features

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS Software Traffic Optimization Features Advisory ID: cisco-sa-20120328-mace Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT...

Cisco IOS Software Traffic Optimization Features Multiple DoS

The version of Cisco IOS installed on the remote device is affected by multiple denial of service vulnerabilities due to message parsing flaws related to the Wide Area Application Services WAAS Express feature and the Measurement, Aggregation, and Correlation Engine MACE feature. A remote,...

CVE-2012-1314

The WAAS Express feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit traffic, aka Bug ID CSCtt45381...

Code injection

The WAAS Express feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit traffic, aka Bug ID CSCtt45381...

CVE-2012-1314

The WAAS Express feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit traffic, aka Bug ID CSCtt45381...

CVE-2012-1314

CVE-2012-1314 is a Cisco IOS Software vulnerability affecting the WAAS Express and MACE features. When WAAS Express or MACE is enabled, an unauthenticated, remote attacker can send crafted transit traffic to cause memory leakage or a device reload, resulting in DoS. The issue is documented under ...

CVE-2012-1314: Undefined Security Weakness

The WAAS Express feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit traffic, aka Bug ID CSCtt45381...

Tivoli Provisioning Manager Express for Software Distribution Detection

Tivoli Provisioning Manager Express for Software Distribution, an application for managing software distribution, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58528; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...

PT-2012-3187

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption or device reload, via crafted transit traffic. An unauthenticated, remote attacker could exploit...

Tivoli Provisioning Manager Express for Software Distribution Multiple SQL Injection Vulnerabilities

Binary data 6398.prm...

HP Data Protector Express Installed

HP Data Protector Express, a backup application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58398; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"HP Data...

[security bulletin] HPSBMU02746 SSRT100781 rev.1 - HP Data Protector Express, Remote Denial of Service (DoS), Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03229235 Version: 1 HPSBMU02746 SSRT100781 rev.1 - HP Data Protector Express, Remote Denial of Service DoS, Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be...

CVE-2012-0122

Unspecified vulnerability in HP Data Protector Express aka DPX 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1393...

CVE-2012-0124

CVE-2012-0124 refers to a stack/heap issue in HP Data Protector Express (DPX) 5.x and 6.x prior to build 59287/11974, exploitable via the DPX server’s dpwindtb.dll when creating a new folder. The connected data confirms a concrete flaw in the AddObject path used by the New Folder operation (SVC 0...

CVE-2012-0123

HP Data Protector Express (DPX) versions 5.x before 5.0.0 build 59287 and 6.x before 6.0.0 build 11974 are affected by multiple remote vulnerabilities (CVE-2012-0121/0122/0123/0124) leading to arbitrary code execution or DoS. The root cause is a vulnerability in the Windows service components (dp...

CVE-2012-0121

HP Data Protector Express (DPX) versions 5.0.00 prior to build 59287 and 6.0.00 prior to build 11974 contain a stack-based buffer overflow in the dpwindtb.dll handling Opcode 0x320, allowing remote, unauthenticated attackers to execute arbitrary code or cause a DoS. ZDI-12-097/disclosures detail ...

CVE-2012-0123

Unspecified vulnerability in HP Data Protector Express aka DPX 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1498...

PT-2012-2326

Name of the Vulnerable Software and Affected Versions HP Data Protector Express versions 5.0.00 before build 59287 HP Data Protector Express versions 6.0.00 before build 11974 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service. The exact vectors o...