CVE-2007-2137

Heap-based buffer overflow in kde.dll in IBM Tivoli Monitoring Express 6.1.0 before Fix Pack 2, as used in Tivoli Universal Agent, Windows OS Monitoring agent, and Enterprise Portal Server, allows remote attackers to execute arbitrary code by sending a long string to a certain TCP port...

CVE-2007-2137

IBM Tivoli Monitoring Express 6.1 (including Universal Agent, Windows OS Monitoring Agent, and Enterprise Portal Server) is affected by a heap-based buffer overflow in kde.dll caused by processing oversized input. The vulnerability exists in three services: Universal Agent Primary Service (TCP 10...

IBM Tivoli Monitoring Express buffer overflow

Heap buffer overflow on oversized request to Universal Agent Primary Service TCP/10110, Monitoring Agent for Windows TCP/6014, Tivoli Enterprise Portal Server TCP/14206...

ZDI-07-018: IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability

ZDI-07-018: IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability http://www.zerodayinitiative.com/advisories/ZDI-07-018.html April 18, 2007 -- CVE ID: CVE-2007-2137 -- Affected Vendor: IBM -- Affected Products: IBM Tivoli Monitoring Express 6.1 -- Vulnerability Details: This...

IBM Tivoli Monitoring Express通用代理多个堆溢出漏洞

IBM Tivoli Monitoring Express用于帮助用户监控和管理操作系统、数据库及应用。 Tivoli Monitoring Express的Tivoli Universal Agent Primary Service（TCP 10110）、Monitoring Agent for Windows OS - Primary（TCP 6014）和Tivoli Enterprise Portal Server（TCP 14206）服务中存在堆溢出漏洞，如果向这些服务发送了超长字符串的话，就会在调用kde.dll中有漏洞函数期间触发堆溢出，导致执行任意指令。 IBM Tivol...

IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Monitoring Express. Authentication is not required to exploit this vulnerability. The specific flaws exist in the Tivoli Universal Agent Primary Service TCP 10110, Monitoring Agent for...

Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless Control System

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless Control System Advisory ID: cisco-sa-20070412-wcs http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml Revision 1.0 For Public Release 2007 April 12 1600 UTC GMT -...

ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user

"ManageEngine Firewall Analyzer is a web based firewall monitoring and log analysis tool that collects, analyses, and reports information on enterprise-wide firewalls, proxy servers, and radius servers. " a authorized user to the "firewall analyzer" can access any common file on the system, it is...

Cross site scripting

Cross-site scripting XSS vulnerability in servlet/Spy in Dynamic Monitoring Services DMS in Oracle Application Server OAS 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563...

CVE-2007-1609

Cross-site scripting XSS vulnerability in servlet/Spy in Dynamic Monitoring Services DMS in Oracle Application Server OAS 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563...

Oracle Dynamic Monitoring Services crossite scripting

Crossite scripting with /servlet/Spy...

Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy

Hi, Access to http://somesite/servlet/Spy should be restricted. But generally database or system administrators ignore the hardening of Oracle apllications or database. I have noticed XSS bug in Dynamic Monitoring services on Oracle-Application-Server-10g/10.1.2.0.0...

DSA-1272-1 tcpdump - buffer overflow

Bulletin has no description...

F-Secure Anti-Virus Client Security本地格式串处理漏洞

F-Secure Anti-Virus Client Security是PC平台上的实时病毒监测和防护系统，支持所有WINDOWS系统。 F-Secure Anti-Virus Client Security在处理Management Server名称字段时存在格式串处理漏洞，如果攻击者在Communication设置的Management Server名称字段中提供了特制格式串的话，就可以读写任意内存，并可以导致拒绝服务。 F-Secure Anti-Virus Client Security 6.03 F-Secure Anti-Virus Client Security 6.02...

RHEL 2.1 / 3 / 4 / 5 : wireshark (RHSA-2007:0066)

New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Several denial of...

CentOS 3 / 4 : wireshark (CESA-2007:0066)

New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Several denial of...

[SECURITY] Fedora Core 5 Update: tcpdump-3.9.4-4.fc5

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a...

[SECURITY] Fedora Core 6 Update: tcpdump-3.9.4-10.fc6

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a...

A simple modification to turn off Kaspersky all monitoring and protection-vulnerability warning-the black bar safety net

In fact the method is very simple, this also is many foreign antivirus software the existence of a common problem, hope Kaspersky company of the relevant person attention about the associated vulnerabilities. The following is the code, users can also try their own system time is changed to 1 9 8 ...

Breakthrough Proactive Defense registry monitoring review(updated)-vulnerability warning-the black bar safety net

Currently active Defense concept has been firmly established, many antivirus, software, fire protection, and HIPS are having a registry monitoring function, to prevent from startup items and IE-related key value is modified, to guard against viruses Trojans and malware and other malicious program...