(0Day) Avira Management Console Update Manager Service HTTP Header Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Avira Management Console. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP headers by the Update Manager service. By sending overly...

Netlux Antivirus 1.0.1.8 Session Manager Service Privilege Escalation

The Netlux Antivirus suffers from an unquoted search path issue impacting the Session Manager Service 'NXSessSvc' service for Windows deployed as part of Netlux Antivirus package. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated...

Netlux Antivirus 1.0.1.8 Session Manager Service Privilege Escalation

Netlux Antivirus 1.0.1.8 Session Manager Service Privilege Escalation Vendor: Netlux Systems Private Limited. Product web page: http://www.netluxantivirus.com Affected version: 1.0.1.8 and 1.0.1.4 Summary: Netlux Antivirus is an award-winning product that provides comprehensive protection against...

Google Android adb backup 'server/BackupManagerService.java' directory traversal vulnerability

Android is an operating system based on the Linux open kernel and is a mobile operating system announced by Google Inc. on November 5, 2007.ADB creates a backup of your Android device that exists on your computer. Google Android adb backup has a directory traversal vulnerability in its...

Important: Red Hat Security Advisory: openstack-packstack and openstack-puppet-modules update

Updated openstack-packstack and openstack-puppet-modules packages that fix one security issue and adds one enhancement are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security...

CVE-2012-0295

The Manager service in the management console in Symantec Endpoint Protection SEP 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294...

PT-2012-2471

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection SEP versions 12.1 through 12.1 before RU1-MP1 Description The issue allows remote attackers to conduct file-insertion attacks and execute arbitrary code. This is achieved by leveraging exploitation in the Manager...

PT-2012-2470

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 12.1 RU1-MP1 Description A directory traversal issue exists in the Manager service of the management console, allowing remote attackers to delete files. Recommendations For versions prior to 12.1...

CVE-2012-0295: Improper Control of Generation of Code

The Manager service in the management console in Symantec Endpoint Protection SEP 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294...

CVE-2012-0294: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection SEP 12.1 before 12.1 RU1-MP1 allows remote attackers to delete files via unspecified vectors...

Calendar Manager Service rpc.cmsd Service Detection

This script detects the running SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.802163";...

How to Adjust Collector Heartbeat Timeout

Purpose This article provides information regarding the configuration of the Collector Heartbeat setting, which determines how long the collector can go between heartbeats before being considered unreachable. Solution Configuration of the CollectorHeartbeatTimeout value is documented in the Veeam...

CVE-2011-0921

crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the...

Code injection

crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the...

CVE-2011-0921

crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the...

CVE-2011-0921: Improper Input Validation

crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the...

PT-2011-2764

Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue is related to the improper validation of credentials associated with the hostname, domain, and username in the Cell Manager Service of HP Data Protector. This allows remot...

(0Day) Hewlett-Packard Data Protector Cell Manager Service Authentication Bypass Vulnerability

This vulnerability allows an attacker to execute remote code on vulnerable installations of Hewlett-Packard Data Protector. User interaction is not required to exploit this vulnerability. The specific flaw exists within the Cell Manager Service which listens by default on a random TCP port. The...

CVE-2010-4435

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claim...

CVE-2010-4435

CVE-2010-4435 concerns a memory corruption/remote code execution vulnerability in the CMSD (Calendar Manager Service Daemon) RPC service used by calendar managers on multiple vendors. Connected documents confirm that the flaw exists in the CMSD handling of RPC requests (notably large XDR-encoded ...