CA BrightStor Backup 11.5.2.0 - Mediasvr.exe Denial of Service

CA BrightStor Backup 11.5.2.0 - Mediasvr.exe Denial of Service !/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe DoS catirpc.dll/rwxdr.dll Previously Unknown There is an issue with RPC operation 126 and the imported cactirpc.dll and rwxdr.dll. It looks as if Mediasvr.exe...

Printer Job Language (PJL) Detection

Nessus had detected that the service running on the remote host will answer an HP Printer Job Language PJL request, which indicates that it is a printer device running HP JetDirect. By using the PJL protocol, users can submit printing jobs, transfer files to or from the printer, and change...

McAfee VirusScan for Mac (Virex) 7.7 - Local Privilege Escalation

McAfee VirusScan for Mac Virex 7.7 - Local Privilege Escalation !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Following symlinks is bad mmmmmmmmmmkay! $dest = "/var/cron/tabs/root"; $tgts"0" = "Virex 7.7.dmg:"/Library/Application...

MDKA-2006:002 : mdkonline

A bug in the mdkupdate cron job when automatic update mode is enabled prevents $ENVUSER from being defined, which kills mdkupdate before performing the updates. The mdkapplet GUI is now refreshed and doesn't stall anymore when waiting for configuration or installation operations to finish prior t...

CVE-2006-7016: Undefined Security Weakness

phpjobboard allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin.php with adminop=job-edit...

Format string

Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attackers to execute arbitrary code via certain scan job settings...

CVE-2007-0391

Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attackers to execute arbitrary code via certain scan job settings...

CVE-2007-0391

Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attackers to execute arbitrary code via certain scan job settings...

Oracle Job Scheduler Named Pipe Command Execution

This module exploits the Oracle Job Scheduler to execute arbitrary commands. The Job Scheduler is implemented via the component extjob.exe which listens on a named pipe called "orcljsex" and execute arbitrary commands received over this channel via CreateProcess. In order to connect to the Named...

CVE-2006-6473

Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 have unknown impact and attack vectors, related to 1 an Immediate Image Overwrite IIO error message at the Local User Interface LUI if overwri...

Xcode OpenBase <= 10.0.0 (symlink) Local Root Exploit (OSX)

No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom = ftp://www.openbase.com/pub/OpenBase10.0 vulnerable ? Create a new file anywhere on the filesystem with rw-rw-rw privs. Sorry you can NOT overwrite existing files. Writin...

CVE-2006-5677

resmom/startexec.c in pbsmom in TORQUE Resource Manager 2.0.0p8 and earlier allows local users to create arbitrary files via a symlink attack on 1 a job output file in /usr/spool/PBS/spool and possibly 2 a job file in /usr/spool/PBS/mompriv/jobs...

CVE-2006-5677

resmom/startexec.c in pbsmom in TORQUE Resource Manager 2.0.0p8 and earlier allows local users to create arbitrary files via a symlink attack on 1 a job output file in /usr/spool/PBS/spool and possibly 2 a job file in /usr/spool/PBS/mompriv/jobs...

CVE-2006-5143

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via craft...

CVE-2006-5143

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via craft...

Windows Task Scheduler buffer overflow

Added: 09/05/2006 CVE: CVE-2004-0212 BID: 10708 OSVDB: 7798 Background The Windows Task Scheduler is used to schedule commands to run at specified times. Problem A buffer overflow vulnerability in the Task Scheduler could allow command execution when a specially crafted .job file is processed...

Windows Task Scheduler buffer overflow

Added: 09/05/2006 CVE: CVE-2004-0212 BID: 10708 OSVDB: 7798 Background The Windows Task Scheduler is used to schedule commands to run at specified times. Problem A buffer overflow vulnerability in the Task Scheduler could allow command execution when a specially crafted .job file is processed...

CVE-2006-4361

Multiple cross-site scripting XSS vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers to inject arbitrary web script or HTML via the 1 uname or 2 SEmail parameters...

diesel.txt

NightWarrior nightwarrior-athotmail.com Diesel Job Site forgot.php Cross-Site Scripting Vulnerability Contact : nightwarrior-athotmail.com hompage : www.dieselscripts.com http://www.example.com/Script Path/jobseekers/forgot.php?uname=XSS&fu=Submit http://www.example.com/Script...

CVE-2006-4361

Multiple cross-site scripting XSS vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers to inject arbitrary web script or HTML via the 1 uname or 2 SEmail parameters...