Multiple critical and high risk issues in Oracle's database server

David Litchfield of NGSSoftware has discovered multiple critical and high risk vulnerabilities in Oracle's Database Server. Versions affected include Oracle Database 10g Release 2, versions 10.2.0.1, 10.2.0.2 Oracle Database 10g Release 1, versions 10.1.0.4, 10.1.0.5 Oracle9i Database Release 2,...

CVE-2006-0656

Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary files via unspecified vectors, a different vulnerability than CVE-2005-2006...

Directory traversal

Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary files via unspecified vectors, a different vulnerability than CVE-2005-2006...

CVE-2006-0656

CVE-2006-0656 corresponds to a directory traversal vulnerability in HP Systems Insight Manager (SIM) affecting HP SIM 4.2–5.0 SP3 on Windows. Public descriptions in the connected sources identify two related weaknesses: (1) Namazu-based traversal via the lang parameter in the web CGI, allowing un...

CVE-2006-0656

Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary files via unspecified vectors, a different vulnerability than CVE-2005-2006...

HP Systems Insight Manager directory traversal

Multiple vulnerabilities allow to obtain any file from server...

HP Systems Insight Manager Namazu lang Parameter Traversal Arbitrary File Access

The remote host appears to be running HP Systems Insight Manager SIM, a unified infrastructure management tool. The version of HP SIM on the remote host includes a version of the search engine Namazu that reportedly fails to validate user input to the 'lang' parameter of the 'namazucgi' script. A...

[security bulletin] SSRT061108 rev.2 - HP Systems Insight Manager Remote Unauthorized Access - Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00597967 Version: 2 HPSBMA02096 SSRT061108 rev.2 - HP Systems Insight Manager Remote Unauthorized Access - Directory Traversal NOTICE: The information in this Security Bulletin should be acted up...

CVE-2005-3983

Unknown vulnerability in the login page for HP Systems Insight Manager SIM 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service browser hang. NOTE: although the advisory is vague, this issue does not appear to involve an attacker at all. ...

CVE-2005-3983

Unknown vulnerability in the login page for HP Systems Insight Manager SIM 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service browser hang. NOTE: although the advisory is vague, this issue does not appear to involve an attacker at all. ...

CVE-2005-3983

CVE-2005-3983 describes an unknown vulnerability in the login page of HP Systems Insight Manager (SIM) 4.0 and 4.1 when accessed through Microsoft Internet Explorer with the MS04-025 patch , resulting in a denial of service (browser hang) . The advisory is vague and the connected documents do not...

Compaq HTTP server format string bug

Insight Management Agent format string bug during processing of HTTP request...

CVE-2002-2422

Cross-site scripting XSS vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message...

HP Compaq Insight Manager - Web Interface Cross-Site Scripting

HP Compaq Insight Manager - Web Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/5780/info It has been reported that the Compaq Insight Manager web interface is prone to cross-site scripting attacks. It is possible to construct a malicious link to a Compaq Insight Manager...

HP Compaq Insight Manager - Web Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/5780/info It has been reported that the Compaq Insight Manager web interface is prone to cross-site scripting attacks. It is possible to construct a malicious link to a Compaq Insight Manager web interface that includes arbitrary script code. When the lin...

CVE-1999-1356

Technical details about this CVE are not provided in the supplied documents; no affected product/version or remediation details are present. Monitor for updates.

CVE-2001-0840

Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via 1 SNMP and 2 DMI...

CVE-2001-0840

Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via 1 SNMP and 2 DMI...

CVE-2001-0840

The CVE applies to Compaq Insight Manager XE (version 2.1b and earlier). The vulnerability is a buffer overflow in the product that can be triggered remotely over SNMP or DMI, leading to arbitrary code execution. The root cause is an overflow condition in the handling of SNMP/DMI inputs. Exploita...

Compaq Insight Manager XE buffer overflow in SNMP and DMI functionality

Overview The Compaq web-enabled management software contains a buffer overflow in the SNMP and DMI functionality. Remote intruders may be able to execute arbitrary code with privileges on affected systems. All versions of Compaq Insight Manager XE are affected, but Compaq Insight Manager windows...