4919 matches found
Visual Tools DVR3.0.6.16_ vx series 4.2.19.2 - Multiple Vulnerabilities
Exploit Title: Visual Tools DVR multiple vulnerabilities Date: 2012-10-15 Exploit Author: Andrea Fabrizi Vendor Homepage: http://www.visual-tools.com/ Version: VS Series = 3.0.6.16, VX Series = 4.2.19.2 Tested on: VS Series 3.0.6.16/VX Series 4.2.19.2 Visual Tools develops, manufactures and...
Privilege Escalation Vulnerability in Microsoft Windows
High-Tech Bridge Security Research Lab has discovered a vulnerability in Microsoft Windows which could be exploited to escalate privileges under certain conditions. The vulnerability exists due to the “IKE and AuthIP IPsec Keying Modules” system service, which tries to load the “wlbsctrl.dll” DLL...
Scientific Linux Security Update : rhn-client-tools on SL5.x i386/x86_64
It was discovered that rhn-client-tools set insecure permissions on the loginAuth.pkl file, used to store session credentials for authenticating connections to servers. A local, unprivileged user could use these credentials to download packages they wouldn't normally have permission to download...
Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : icedtea-web, openjdk-6 vulnerabilities (USN-1505-1)
It was discovered that multiple flaws existed in the CORBA Common Object Request Broker Architecture implementation in OpenJDK. An attacker could create a Java application or applet that used these flaws to bypass Java sandbox restrictions or modify immutable object data. CVE-2012-1711,...
Fedora 17 : mumble-1.2.3-7.fc17.1 (2012-8903)
This update fixes a number of startup problems of the mumble server murmur. Additionally it contains a fix for CVE-2012-0863 insecure world-readable permissions on database file of the mumble client. Note that Tenable Network Security has extracted the preceding description block directly from th...
Symantec LiveUpdate Administrator Insecure Permissions Local Privilege Escalation (credentialed check)
The version of Symantec LiveUpdate Administrator LUA installed on the remote host has a privilege escalation vulnerability. The installation directory allows write access to the Everyone group. This directory contains batch files that are periodically executed as SYSTEM. A local, unprivileged...
Parallels PLESK 9.x Insecure Permissions
Exploit for linux platform in category local exploits Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup...
Parallels PLESK 9.x Insecure Permissions
Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK panel is keeping a detailed log of the proce...
Parallels PLESK 9.x - Insecure Permissions
Parallels PLESK 9.x - Insecure Permissions Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK...
Parallels PLESK 9.x - Insecure Permissions
Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK panel is keeping a detailed log of the proce...
Zend Optimizer 3.3.3 Insecure Permissions
Zend Optimizer 3.3.3 Windows Insecure Permissions Vendor: Zend Technologies Ltd. Product web page: http://www.zend.com Affected version: 3.3.3 and 3.3.0 Note: The patch did not change the version number of the affected product, so the updated version is still 3.3.3, but with proper permissions...
Zend Optimizer 3.3.3 (Windows) Insecure Permissions
Exploit for windows platform in category local exploits Zend Optimizer 3.3.3 Windows Insecure Permissions Vendor: Zend Technologies Ltd. Product web page: http://www.zend.com Affected version: 3.3.3 and 3.3.0 Note: The patch did not change the version number of the affected product, so the update...
Zend Optimizer 3.3.3 (Windows) Insecure Permissions
Summary Zend Optimizer is a free application that runs the files encoded using Zend Guard and enhances the overall performance of your PHP applications. Description The Zend Optimizer package for Windows is vulnerable to an elevation of privileges vulnerability which can be used by a simple user...
Interspire Shopping Cart Insecure Permissions
========= Product: Interspire Shopping Cart ========= Problem: config/config.php MUST be httpd-readable inter-domain read access permitted, which is a problem on shared hosting ========= About product: What is Interspire Shopping Cart? Interspire Shopping Cart is the most feature rich, all-in-one...
MySQL < 4.1.12 / 5.0.4 Insecure Permissions
The remote MySQL server is earlier than 4.1.12 / 5.0.4 and thus reportedly creates a temporary file with insecure permissions and a predictable name, which could allow a local user to run arbitrary SQL commands. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17805;...
CVE-2011-4339
ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...
CVE-2011-4339
ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...
Multiple vulnerabilities in webERP
Vulnerability ID: HTB23055 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinweberp.html Product: webERP Vendor: www.weberp.org http://www.weberp.org Vulnerable Version: 4.05 and probably prior Tested Version: 4.05 Vendor Notification: 26 October 2011 Vulnerability Type: XSS, S...
Opera Mobile 11.1 Cross Application Scripting
1 Background ============= Android applications are executed in a sandbox environment, to ensure that no application can access sensitive information held by another, without adequate privileges. For example, Opera Mobile holds sensitive information such as cookies, cache and history, and this...
CVE-2011-1784
CVE-2011-1784 concerns keepalived 1.2.2 and earlier, where pidfile_write creates /var/run/*.pid files (keepalived.pid, checkers.pid, vrrp.pid) with 0666 permissions. This allows local users to write to these PID files and potentially kill arbitrary processes. Connected advisories show that update...