Trend Micro enterprise products directory traversal vulnerability

Overview Multiple enterprise products provided by Trend Micro Incorporated contain a directory traversal vulnerability. According to the developer, exploiting the vulnerability requires access to the LAN environment of the user. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to...

New Security Flaw Found in Lenovo Solution Center Software

A new vulnerability has been discovered in Lenovo’s much-maligned Lenovo Solution Center LSC software. The vulnerability allows attackers with local network access to a PC to execute arbitrary code, said researchers at Trustwave SpiderLabs. The flaw allows an attacker to elevate privileges and is...

D-Link / TRENDnet ncc2 CSRF / Unauthenticated Access

D-Link and TRENDnet 'ncc2' service - multiple vulnerabilities Discovered by: ---- Peter Adkins Access: ---- Local network; unauthenticated access. Remote network; unauthenticated access. Remote network; 'drive-by' via CSRF. Tracking and identifiers: ---- CVE - Mitre contacted; not yet allocated...

Java-API calls in untrusted Javascript allow network privilege escalation

Unspecified vulnerability in Sun JDK and Java Runtime Environment JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.216 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java AP...

Intel® Enterprise Southbridge 2 Baseboard Management Controller Denial of Service

Summary: A denial of service vulnerability exists in the Intel® Enterprise Southbridge 2 Baseboard Management Controller which may allow malicious users to connect to a server system within a local area network and issue any Intelligent Platform Management Interface command. If proper external...

[SA13618] Citrix Metaframe XP Unspecified Buffer Overflow Vulnerability

TITLE: Citrix Metaframe XP Unspecified Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13618 VERIFY ADVISORY: http://secunia.com/advisories/13618/ CRITICAL: Moderately critical IMPACT: System access WHERE: From local network SOFTWARE: Citrix MetaFrame XP for Windows...

[SA13401] Sun Solaris in.rwhod Unspecified Vulnerability

TITLE: Sun Solaris in.rwhod Unspecified Vulnerability SECUNIA ADVISORY ID: SA13401 VERIFY ADVISORY: http://secunia.com/advisories/13401/ CRITICAL: Moderately critical IMPACT: System access WHERE: From local network OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95/ Sun Solaris 8...

[SA12460] eZ / eZphotoshare Multiple Connection Denial of Service Vulnerability

TITLE: eZ / eZphotoshare Multiple Connection Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12460 VERIFY ADVISORY: http://secunia.com/advisories/12460/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: eZphotoshare 1.x http://secunia.com/product/2592/ eZ 3.x...

Asus AAM6000EV ADSL Router Wide Open

Asus have been notified but haven't even acknowledged yet alone mentioned a fix. If the inbuilt webserver is activated, anyone on the local network can get the full user/pass list from the router without any identification whatsoever by going to the ip address of the router and appending /userdat...

AVM KEN! ISDN Proxy Server Malformed Request Remote DoS

It was possible to crash the remote service - very likely Ken! ISDN Proxy Software - by sending it a non-HTTP request. Note that in the case of the Ken!, exploitation requires that the attacker be on the local network. C Tenable Network Security, Inc. include"compat.inc"; if description...