LANDesk Management Gateway 4.x Multiple Security Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/38119/info LANDesk Management Gateway is prone to a cross-site request-forgery vulnerability and a cross-site scripting vulnerability. An attacker can exploit the cross-site request forgery issue to alter the settings on...

LANDesk Management Gateway 'gsb/drivers.php'代码注入漏洞

No description provided by source. 1. Advisory Information Title: Landesk OS command injection Advisory Id: CORE-2010-1018 Advisory URL: http://www.coresecurity.com/content/landesk-os-command-injection-vulnerability Date published: 2010-11-10 Date of last update: 2010-11-10 Vendors contacted:...

LanDesk Management Suite 8.7 Alert Service AOLSRVR.EXE Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23483/info LANDesk Management Suite is prone to a remote stack-based buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An...

LANDesk Management Suite 8.80.1.1 - PXE TFTP Service Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28577/info LANDesk Management Suite is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary files...

LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server Remote Code Execution Vulnerability

No description provided by source. LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server AMTConfig.Business.dll RunAMTCommand Remote Code Execution Vulnerability Tested against: Microsoft Windows Server 2003 r2 sp2 Software home page: http://www.landesk.com/lenovo/thinkmanagement-console.aspx...

LANDesk ThinkManagement Suite SetTaskLogByFile Arbitrary File Deletion (CVE-2012-1196)

A directory traversal vulnerability has been reported in LANDesk ThinkManagement Suite...

LANDesk ThinkManagement Suite ServerSetup.asmx Directory Traversal (CVE-2012-1195)

A directory traversal vulnerability has been reported in LANDesk Lenovo ThinkManagement Suite...

LANDesk ThinkManagement Suite ServerSetup.asmx Directory Traversal

Added: 04/27/2012 CVE: CVE-2012-1195 BID: 52023 OSVDB: 79276 Background LANDesk Lenovo ThinkManagement Console provides hardware discovery, comprehensive inventory, and reporting for Lenovo systems. Problem LANDesk Lenovo ThinkManagement Console runs a web application under the Microsoft IIS web...

LANDesk ThinkManagement Suite ServerSetup.asmx Directory Traversal

Added: 04/27/2012 CVE: CVE-2012-1195 BID: 52023 OSVDB: 79276 Background LANDesk Lenovo ThinkManagement Console provides hardware discovery, comprehensive inventory, and reporting for Lenovo systems. Problem LANDesk Lenovo ThinkManagement Console runs a web application under the Microsoft IIS web...

LANDesk ThinkManagement Suite ServerSetup.asmx Directory Traversal

Added: 04/27/2012 CVE: CVE-2012-1195 BID: 52023 OSVDB: 79276 Background LANDesk Lenovo ThinkManagement Console provides hardware discovery, comprehensive inventory, and reporting for Lenovo systems. Problem LANDesk Lenovo ThinkManagement Console runs a web application under the Microsoft IIS web...

LANDesk ThinkManagement Suite ServerSetup.asmx Directory Traversal

Added: 04/27/2012 CVE: CVE-2012-1195 BID: 52023 OSVDB: 79276 Background LANDesk Lenovo ThinkManagement Console provides hardware discovery, comprehensive inventory, and reporting for Lenovo systems. Problem LANDesk Lenovo ThinkManagement Console runs a web application under the Microsoft IIS web...

LANDesk Lenovo ThinkManagement Console Remote Command Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

LANDesk Lenovo ThinkManagement Suite 9.0.3 File Deletion

LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server WSVulnerabilityCore.dll SetTaskLogByFile Remote Arbitrary File Deletion Vulnerability Tested against: Microsoft Windows Server 2003 r2 sp2 Software home page: http://www.landesk.com/lenovo/thinkmanagement-console.aspx Download url:...

LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server - Arbitrary File Deletion

LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server WSVulnerabilityCore.dll SetTaskLogByFile Remote Arbitrary File Deletion Vulnerability Tested against: Microsoft Windows Server 2003 r2 sp2 Software home page: http://www.landesk.com/lenovo/thinkmanagement-console.aspx Download url:...

LANDesk Lenovo ThinkManagement Suite 9.0.3 Code Execution

LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server AMTConfig.Business.dll RunAMTCommand Remote Code Execution Vulnerability Tested against: Microsoft Windows Server 2003 r2 sp2 Software home page: http://www.landesk.com/lenovo/thinkmanagement-console.aspx Download url:...

LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Arbitrary File Deletion

Exploit for windows platform in category remote exploits LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server WSVulnerabilityCore.dll SetTaskLogByFile Remote Arbitrary File Deletion Vulnerability Tested against: Microsoft Windows Server 2003 r2 sp2 Software home page:...

LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server Code Execution

Exploit for windows platform in category remote exploits LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server AMTConfig.Business.dll RunAMTCommand Remote Code Execution Vulnerability Tested against: Microsoft Windows Server 2003 r2 sp2 Software home page:...

LANDesk Lenovo ThinkManagement Suite 9.0.3 - Core Server Remote Code Execution

LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server AMTConfig.Business.dll RunAMTCommand Remote Code Execution Vulnerability Tested against: Microsoft Windows Server 2003 r2 sp2 Software home page: http://www.landesk.com/lenovo/thinkmanagement-console.aspx Download url:...

DSquare Exploit Pack: D2SEC_THINKMNGT

Name| d2secthinkmngt ---|--- CVE| CVE-2012-1195 Exploit Pack| D2ExploitPack Description| LANDesk Lenovo ThinkManagement 9.0.3 File Upload Vulnerability Notes|...

Lenovo管理控制台多个安全绕过漏洞

Lenovo ThinkManagement Console是一款用于Lenovo客户的管理工具。 Lenovo ThinkManagement Console存在安全漏洞，允许恶意用户操作部分数据或控制应用。 -ServerSetup web服务/landesk/managementsuite/core/core.anonymous/ServerSetup.asmx允许未授权访问某些基于SOAP的操作，通过"RunAMTCommand"操作中的"-PutUpdateFileCore"命令可上传任意文件到WEB ROOT。 -当处理某些基于SOAP的操作时VulCore...