[SECURITY] Fedora 17 Update: openstack-nova-2012.1-0.10.rc1.fc17

OpenStack Compute codename Nova is open source software designed to provision and manage large networks of virtual machines, creating a redundant and scalable cloud computing platform. It gives you the software, control panels, and APIs required to orchestrate a cloud, including running instances...

[SECURITY] Fedora 16 Update: openstack-nova-2011.3.1-7.fc16

OpenStack Compute codename Nova is open source software designed to provision and manage large networks of virtual machines, creating a redundant and scalable cloud computing platform. It gives you the software, control panels, and APIs required to orchestrate a cloud, including running instances...

Wi-Fi network scanner: inSSIDer

inSSIDer is the best free Wi-Fi network scanner for Windows 7, Vista and XP The free inSSIDer software utility for Windows, iOS, and Android is one of the most useful and easy-to-interpret wireless networking tools I’ve encountered. InSSIDer displays information about the wireless networks in...

JBoss Operations Network多个安全限制绕过漏洞

BUGTRAQ ID: 51827 CVE ID: CVE-2011-4573,CVE-2012-0052,CVE-2012-0062 JBoss Operations Network是基于Java EE的开源网络管理软件。 JBoss Operations Network在实现上存在多个安全限制绕过漏洞，成功利用后可允许攻击者绕过某些安全限制、获取敏感信息或执行非法操作。 0 RedHat JBoss Operations Network 2.4.1 厂商补丁： RedHat ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

HP Intelligent Management Center img Buffer Overflow (CVE-2011-1848)

HP Intelligent Management Center IMC is a stand-alone, comprehensive management platform developed by HP that delivers integrated and modular network management capabilities. IMC Enterprise Edition is designed on a service-oriented architecture SOA using a business application flow model as the...

USN-1217-1: Puppet vulnerability

Kristian Erik Hermansen discovered a directory traversal vulnerability in the SSLFile indirection base class. A remote attacker could exploit this to overwrite files with the privileges of the Puppet Master...

CentOS Update for net-snmp CESA-2009:0295 centos3 i386

Check for the Version of net-snmp OpenVAS Vulnerability Test CentOS Update for net-snmp CESA-2009:0295 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

HP Intelligent Management Center Application Detection

HP Intelligent Management Center IMC, a network management application, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid54627; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

wireshark: stack overflow in BER dissector

Stack consumption vulnerability in the dissectberunknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a long string in an unknown...

Alcatel-Lucent OmniVista 4760 Network Management System "lang"目录遍历漏洞

BUGTRAQ ID: 46624 CVE ID: CVE-2011-0345 Alcatel-Lucent OmniVista 4760 Network Management System可提供网络安全和优化的管理应用程序集。 Alcatel-Lucent OmniVista 4760 Network Management System在实现上存在目录遍历漏洞，攻击者可利用此漏洞使用目录遍历字符串从受影响系统中检索任意文件。 Alcatel Alcatel-Lucent OmniVista 4760 Network Management S 5.1.06.03 Alcatel...

DEBIAN-CVE-2010-4267

Stack-based buffer overflow in the hpmudgetpml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing HPLIP 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SNMP respons...

DEBIAN-CVE-2010-3445

Stack consumption vulnerability in the dissectberunknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a long string in an unknown...

LANDesk管理套件HTML表单请求命令注入漏洞

BUGTRAQ ID: 44781 CVE ID: CVE-2010-2892 Landesk管理套件是一款网络管理系统，可控制桌面，服务器和移动设备等。 Landesk没有正确地验证提交特制请求的用户来源。如果管理员使用攻击者的浏览器登录到了设备，攻击者就可以以gsbadmin用户权限执行任意代码。 LANDesk Software LANDesk Management Gateway 4.2 GSBWEB v1.61 LANDesk Software LANDesk Management Gateway 4.0 GSBWEB v1.61s 临时解决方法： 1...

ECCOM network management system injection exploit-vulnerability warning-the black bar safety net

ECCOM network management system existsSQL injection, you can get the administrator user password information. Keywords: inurl:chkcase. asp Vulnerability testing: http://www.site.com/chkcase.asp?ID=673%20union%20select%201,2,3,4,5,6,7,8,9,1 0,1 1,1 2,1 3,1 4,admin,1 6,1 7,1 8,1 9,2 0,userpassword,...

Cisco uBR10012 Series Devices SNMP Vulnerability - Cisco Systems

Cisco uBR10012 series devices automatically enable Simple Network Management Protocol SNMP read/write access to the device if configured for linecard redundancy. This can be exploited by an attacker to gain complete control of the device. Only Cisco uBR10012 series devices that are configured for...

HP OpenView NNM ovwebsnmpsrv.exe Command Line Argument Buffer Overflow (CVE-2010-1961; CVE-2010-1964)

The HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A buffer overflow vulnerabili...

Sun Solaris DHCP Client Arbitrary Code Execution (CVE-2005-2870)

The DHCP protocol is used by network administrators to centrally manage and automate the assignment of IP addresses on a network. In addition to IP address assignment, DHCP clients receive from a DHCP server information that is required to manage their network configuration including the sub-net...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities on the Network Management Card NMC on American Power Conversion APC Switched Rack PDU aka Rack Mount Power Distribution devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the...

CVE-2009-1798

Multiple cross-site scripting XSS vulnerabilities on the Network Management Card NMC on American Power Conversion APC Switched Rack PDU aka Rack Mount Power Distribution devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the...

CVE-2009-1798

CVE-2009-1798 refers to multiple cross-site scripting (XSS) vulnerabilities in the APC Network Management Card (NMC) used in APC Switched Rack PDU devices. The issue is that the NMC web interface does not adequately validate user-supplied data, allowing remote attackers to inject arbitrary web sc...