Directory traversal

Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remote attackers to read arbitrary files via a PREVIEW value for the fileType field...

CVE-2016-1605

Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remote attackers to read arbitrary files via a PREVIEW value for the fileType field...

CVE-2016-1605

NetIQ Sentinel Server (7.4.x before 7.4.2) is affected by a directory traversal in the ReportViewServlet that allows reading arbitrary files via the PREVIEW value of the fileType field. The vulnerability arises from insufficient validation of the fileName parameter and can lead to arbitrary file ...

Novell NetIQ Sentinel Server ReportViewServlet fileName Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose arbitrary file contents on vulnerable installations of Novell NetIQ Sentinel Server. Authentication is required to exploit this vulnerability but it can be bypassed using a separate flaw within the LogonFormController. The specific flaw exist...

NetIQ Sentinel < 7.4.1 Multiple Vulnerabilities

The version of Novell NetIQ Sentinel server installed on the remote host is prior to 7.4.1. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in Apache ActiveMQ in the processControlCommand function within the file broker/TransportConnection.java. An unauthenticated, remote...

NetIQ Sentinel Detection

Detection of NetIQ Sentinel The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Multiple Security issues with NetIQ Sentinel

Sentinel 7.4.1 resolves multiple security vulnerabilities SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:netiq:sentinel"; if...

NetIQ Sentinel Detection

Binary data netiqsentineldetect.nbin...

NetIQ Sentinel Java Object Deserialization RCE

The remote Novell NetIQ Sentinel server is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can exploit this, by sending a specially crafted serializ...

NetIQ Self Service Password Reset Cross-Site Scripting Vulnerability

NetIQ Self Service Password Reset SSPR is a set of self-service password reset software from the American company NetIQ. A cross-site scripting vulnerability exists in NetIQ SSPR version 2.x and version 3.x prior to 3.3.1 HF2. A remote attacker can exploit this vulnerability to inject arbitrary w...

CVE-2016-1599

Cross-site scripting XSS vulnerability in NetIQ Self Service Password Reset SSPR 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-1599

Cross-site scripting XSS vulnerability in NetIQ Self Service Password Reset SSPR 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in NetIQ Self Service Password Reset SSPR 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-1599

Cross-site scripting XSS vulnerability in NetIQ Self Service Password Reset SSPR 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-1599

The CVE-2016-1599 entry concerns NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2. The vulnerability is a cross-site scripting (XSS) flaw triggered by a crafted URL, allowing remote attackers to inject arbitrary web script or HTML in the user’s browser. The available connecte...

NetIQ Security Solutions for ISeries SafeShellExecute Stack Buffer Overflow (CVE-2015-0795)

A vulnerability has been reported in NetIQ Security Solutions for ISeries. The vulnerability is due to a stack buffer overflow in the NetIQExecObject.NetIQExec ActiveX Control when processing parameters to the SafeShellExecute function. A remote attacker can exploit this vulnerability by enticing...

Micro Focus NetIQ Security Solutions for iSeries Stack Buffer Overflow Vulnerability

NetIQ Security Solutions for NetIQ, Inc. Micro Focus NetIQ Security Solutions for iSeries version 8.1 The NetIQExec.dll file in the NetIQExecObject.NetIQExec.1 ActiveX control's ' SafeShellExecute' method in the NetIQExecObject.NetIQExec.1 ActiveX control in the NetIQExec.dll file contains a...

Stack overflow

Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699...

CVE-2015-0795

Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699...

CVE-2015-0795

CVE-2015-0795 affects NetIQ Security Solutions for ISeries. The NetIQExecObject.NetIQExec.1 ActiveX Control’s SafeShellExecute method in NetIQExec.dll contains a stack-based buffer overflow when processing long parameters, enabling remote code execution in affected installations of version 8.1. T...