706 matches found
CVE-2007-2975
The admin console in Ignite Realtime Openfire 3.3.0 and earlier formerly Wildfire does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the...
CVE-2007-2975
CVE-2007-2975 affects Ignite Realtime Openfire 3.3.0 and earlier (Wildfire). The root cause is an improper filter mapping specification in web.xml for the admin console, allowing remote attackers to gain privileges and execute arbitrary code via functionality exposed through DWR (demonstrated usi...
HP-UX Ignite-UX远程非授权访问及权限提升漏洞
HP-UX是一款HP公司开发的UNIX操作系统。 HP-UX系统中的Ignite-UX服务器实现上存在漏洞，远程攻击者可能利用此漏洞获取root用户的访问权限。 HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.00 HP已经为此发布了一个安全公告（HPSBUX02157）以及相应补丁: HPSBUX02157：SSRT061220 rev.1 HP-UX Running Ignite-UX Server, Remote Unauthorized Access and Privilege Elevation...
CVE-2006-5151
Unspecified vulnerability in HP Ignite-UX server before C.6.9.150 for HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to "gain root access" via unspecified vectors...
HP Ignite-UX Server unauthorized access
No description provided...
[security bulletin] HPSBUX02157 SSRT061220 rev.1 HP-UX Running Ignite-UX Server, Remote Unauthorized Access and Privilege Elevation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00778900 Version: 1 HPSBUX02157 SSRT061220 rev.1 HP-UX Running Ignite-UX Server, Remote Unauthorized Access and Privilege Elevation NOTICE: The information in this Security Bulletin should be act...
CVE-2006-5151
Technical details about CVE-2006-5151 are not publicly provided in the supplied documents. No affected products, components, or remediation are specified here. Monitor for updates in official advisories.
CVE-2006-5151
Unspecified vulnerability in HP Ignite-UX server before C.6.9.150 for HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to "gain root access" via unspecified vectors...
TFTP Weak Directory Permissions (HP Ignite-UX) - Active Check
The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes a world-writeable directory to anonymous TFTP access. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
TFTP File Detection (HP Ignite-UX) - Active Check
The remote host has a TFTP server installed that is serving one or more sensitive HP Ignite-UX files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
TFTP File Detection (HP Ignite-UX passwd) - Active Check
The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes the /etc/passwd file to anonymous TFTP access. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
HP Ignite-UX TFTP File Access Information Disclosure
The remote host has a TFTP server installed that is serving one or more HP Ignite-UX files. These files may contain sensitive information. A remote attacker could use this information to mount further attacks. This NASL script was written by Martin O'Neal of Corsaire http://www.corsaire.com The...
HP Ignite-UX TFTP /etc/pass File Disclosure
The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes the /etc/passwd file to anonymous TFTP access. A remote attacker could use this information to mount further attacks. This NASL script was written by Martin O'Neal of Corsaire http://www.corsaire.com T...
HP-UX Ignite-UX TFTP Service Remote File Manipulation
The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes a world-writeable directory to anonymous TFTP access. A remote attacker could exploit this to upload arbitrary files. This NASL script was written by Martin O'Neal of Corsaire http://www.corsaire.com T...
CVE-2004-0952
Affected software : HP-UX B.11.00–B.11.23 running Ignite-UX. Vulnerability : the add_new_client operation in Ignite-UX causes the TFTP server to grant world-writable permissions to part of the directory tree. Impact : remote attackers could modify data or trigger disk consumption via unauthorized...
CVE-2004-0951
The makerecovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information...
CVE-2004-0952
HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the addnewclient command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption...
CVE-2004-0951
HP Ignite-UX: The TFTP service’s make_recovery command (pre-C.6.2.241) copies the password file within the TFTP directory tree, enabling remote disclosure of /etc/passwd. Affected: HP-UX Ignite-UX TFTP server. Impact: partial confidentiality. Remediation: upgrade to C.6.2.241 or later (HP Ignite-...
Corsaire Security Advisory: HP Ignite-UX filesystem permissions issue
-- Corsaire Security Advisory -- Title: HP Ignite-UX filesystem permissions issue Date: 23.11.04 Application: HP Ignite-UX prior to version C.6.2.241 Environment: HP-UX Author: Martin O'Neal [email protected] Audience: General distribution Reference: c041123-002 -- Scope -- The aim of thi...