6444 matches found
Sun Solaris管理控制台认证和日志机制远程权限提升漏洞
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris管理控制台（SMC）的日志机制和认证机制中存在安全漏洞，可能允许本地或远程非特权用户获得对Solaris系统的非授权root用户访问。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 10x86 Sun Solaris 10.0 临时解决方法： 以root用户权限执行以下命令停止SMC服务器。 Solaris 8和9： /etc/init.d/init.wbem stop Solaris 10...
CVE-2007-3093
Unspecified vulnerability in the logging mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server...
CVE-2007-3094
Unspecified vulnerability in the authentication mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to execute arbitrary code via unspecified vectors, related to the WBEM server...
CVE-2007-3094
CVE-2007-3094 affects Sun Solaris Solaris Management Console (SMC) on Solaris 8–10 prior to 20070605. The issue is an unspecified vulnerability in the authentication mechanism that allows remote authenticated users to execute arbitrary code via the WBEM server. Exploitation is described as networ...
CVE-2007-3093: Undefined Security Weakness
Unspecified vulnerability in the logging mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server...
eTrust AntiVirus Agent r8 - Local Privilege Escalation
/ ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions : I have tested with: - eTrust Antivirus Agent r8 -...
Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability
Hi, Here binagres aka ..., for all the "vinagreta" : ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions : - eTrust...
SunShop Shopping Cart 4.0 - 'index.php?l' Cross-Site Scripting
source: https://www.securityfocus.com/bid/23856/info TurnkeyWebTools SunShop Shopping Cart is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to steal cookie-based authentication...
SunShop Shopping Cart 4.0 - index.php Multiple SQL Injections
SunShop Shopping Cart 4.0 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/23856/info TurnkeyWebTools SunShop Shopping Cart is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may...
Security Advisory: CA CleverPath SQL Injection
Background ========== The CA Clever Path Portal is a customizable portal for aggregation and integration of data and applications. It is integrated into multiple CA products including various Unicenter components. The CA CleverPath utilizes a back end Database for storing data and allows usage of...
ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability
ZDI-07-019: BMC Patrol PerformAgent bgssdservice Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-019.html April 18, 2007 -- CVE ID: CVE-2007-2136 -- Affected Vendor: BMC -- Affected Products: Patrol -- TippingPointTM IPS Customer Protection: TippingPoint IPS...
Green crack Office software protection password-vulnerability warning-the black bar safety net
As is well known, we in the use of Office software packages, you can set open password or a modify with the write-protection password, to avoid being someone else to steal private information. But the days long, even if their own are forgotten once set what the password what do I do? Perhaps you'...
Steganos Encrypted Safe NOT so safe
Sometimes greed can be the downfall of the greatest people and nations but in this case it's software. Steganos Encrypted File safe for Windows is one of the most commonly used file security systems in the world. They boast how excellent their encryption and how uncrackable they are. This is...
Buffer overflow
Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server nimap.exe in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username...
CVE-2006-7167
Unspecified vulnerability in ProRat Server 1.9 Fix2 allows remote attackers to bypass the authentication mechanism for remote login via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-7167
Unspecified vulnerability in ProRat Server 1.9 Fix2 allows remote attackers to bypass the authentication mechanism for remote login via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Implement user lockout mechanism to stop bruteforce login attacks
Hacker can try as many time he wants to login JIRA. You can build client, which sends username+password combinations as many time as you like. .. and if you have username, it is much easier to get in. ---- Implementation ideas: 1 Lock user after sequential X incorrect logins - X can be set by...
Authentication flaw
Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors...
CVE-2007-0334
Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors...