2343 matches found
CVE-2011-1103: Exposure of Sensitive Information to an Unauthorized Actor
The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to obtain sensitive information via a request to an invalid report, which reveals...
Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability Advisory ID: cisco-sa-20101027-cs Revision 1.0 For Public Release 2010 October 27 1600 UTC GMT...
McAfee Policy Manager 'naPolicyManager.dll'任意文件覆盖漏洞
Bugraq ID: 35404 McAfee ePolicy Orchestrator是一款业界领先的系统安全管理解决方案，能够帮助企业有效抵御各种恶意威胁和攻击。 McAfee Policy Manager 'naPolicyManager.dll'控件存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 问题存在于WriteTaskDataToIniFile方法中，提交恶意文件作为参数，可导致以应用程序权限覆盖系统文件。 0 McAfee Policy Manager 目前没有解决方案提供： a href="http://www.mcafee.com/"...
McAfee 3.6.0.608 naPolicyManager.dll ActiveX Arbitrary Data Write Vuln
No description provided by source. GOODFELLAS Security Research TEAM http://goodfellas.shellcode.com.ar Greetings to str0ke McAfee, Inc. 3.6.0.608 Policy Manager naPolicyManager.dll Arbitrary Data Write ============================================================================== Internal ID:...
McAfee 3.6.0.608 - naPolicyManager.dll ActiveX Arbitrary Data Write
McAfee 3.6.0.608 - naPolicyManager.dll ActiveX Arbitrary Data Write GOODFELLAS Security Research TEAM http://goodfellas.shellcode.com.ar Greetings to str0ke McAfee, Inc. 3.6.0.608 Policy Manager naPolicyManager.dll Arbitrary Data Write...
Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability Advisory ID: cisco-sa-20090520-cw http://www.cisco.com/warp/public/707/cisco-sa-20090520-cw.shtml Revision 1.0 For Public Release 2009 May 20 1600 UTC GMT Summary =======...
F-Secure Policy Manager Server fsmsh.dll module DoS
The remote host is an F-Secure Policy Manager Server. Description : The remote host is running a version a F-Secure Policy Manager Server which is vulnerable to a denial of service. A malicious user can forge a request to query a MS-DOS device name through the 'fsmsh.dll' CGI module, which will...
F-Secure Policy Manager Server < 7.0.1 'fsmsh.dll module' DoS Vulnerability
F-Secure Policy Manager Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
F-Secure Policy Manager Server fsmsh.dll module DoS
The remote host is running a version a F-Secure Policy Manager Server that is vulnerable to a denial of service. A malicious user can forge a request to query a MS-DOS device name through the 'fsmsh.dll' CGI module, which will prevent legitimate users from accessing the service using the Manager...
F-Secure Policy Manager fsmsh.dll程拒绝服务漏洞
F-Secure Policy Manager是基于WEB的策略管理器。 F-Secure Policy Manager服务器的fsmsh.dll主机模块存在安全漏洞，允许远程攻击者通过将NTFS保留的名称指定为URL文件名导致拒绝服务。 但由于该产品主要在企业内网使用，因此不太可能通过Internet发动攻击。 F-Secure Policy Manager = 7.00 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.f-secure.com/security/fsc-2007-4.shtml...
CVE-2007-2964
The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...
CVE-2007-2964
The CVE concerns F-Secure Policy Manager Server (7.00 and earlier) where the fsmsh.dll host module can be triggered to cause a denial of service (application crash) by sending URLs containing NTFS reserved words. The vulnerability is a DoS condition affecting the server via the fsmsh.dll CGI modu...
CVE-2007-2964
The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...
CVE-2007-2964: Undefined Security Weakness
The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...
F-Secure Policy Manager 7.00 - 'FSMSH.dll' Remote Denial of Service
source: https://www.securityfocus.com/bid/24233/info F-Secure Policy Manager is prone to a remote denial-of-service vulnerability because the application fails to propelry handle unexpected conditions. Exploiting this issue allows remote attackers to crash affected applications, denying further...
F-Secure Policy Manager 7.00 - FSMSH.dll Remote Denial of Service
F-Secure Policy Manager 7.00 - FSMSH.dll Remote Denial of Service source: https://www.securityfocus.com/bid/24233/info F-Secure Policy Manager is prone to a remote denial-of-service vulnerability because the application fails to propelry handle unexpected conditions. Exploiting this issue allows...
F-Secure Policy Manager fsmsh.dll Path Disclosure
Binary data 3962.prm...
CVE-2004-1223
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request to fsmsh.dll without any parameters...
CVE-2004-1223
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request to fsmsh.dll without any parameters...
CVE-2004-1223
The CVE-2004-1223 entry refers to a path-disclosure issue in F-Secure Policy Manager. The affected component is the Management Agent’s web interface (fsmsh.dll) used by Policy Manager 5.11.2810, where an HTTP request without parameters can reveal sensitive information such as the web server’s abs...