Critical: Red Hat Enhancement Advisory: Release of Satellite 6.0

Red Hat Satellite 6.0 is now available. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without necessity to provide public Internet access to their servers or other client systems. It also performs provisioning and configuration...

[SECURITY] Fedora 20 Update: openstack-nova-2013.2.3-2.fc20

OpenStack Compute codename Nova is open source software designed to provision and manage large networks of virtual machines, creating a redundant and scalable cloud computing platform. It gives you the software, control panels, and APIs required to orchestrate a cloud, including running instances...

IBM TPM for OS Deployment 5.1.0.x rembo.exe Buffer Overflow

No description provided by source. $Id: ibmtpmfosdoverflow.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 ActiveX RunAndUploadFile() Method Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Comptel Provisioning and Activation 'error_msg_parameter' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38534/info Comptel Provisioning and Activation is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow

No description provided by source. $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow

No description provided by source. $Id: citrixstreamprocess.rb 13042 2011-06-27 18:00:12Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020002 Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020004 Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

CFME: root password is written to evm.log when entered during VM provisioning

Red Hat CloudForms 3.0 Management Engine CFME before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file...

SOL15341 - BIG-IP ASM Virtual Edition may run out of memory under certain DoS conditions

Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. To mitigate this vulnerability, you can perform one or more of the following procedures, depending on the traffic...

CVE-2014-0192

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."...

CVE-2014-0192

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."...

PT-2014-3527 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions 1.4.0 through 1.4.x Description: The issue allows remote attackers to obtain sensitive information via the hostname parameter. This is related to spoofing, where access to provisioning template previews is not properly...

Cobbler Local File Inclusion

Exploit Title: Local File Inclusion vulnerability in cobbler Exploit author: Dolev Farhi @f1nhack Date 07/05/2014 Vendor homepage: http://www.cobblerd.org Affected Software version: 2.4.x - 2.6.x Alerted vendor: 7.5.14 Software Description ===================== Cobbler is a Linux installation...

[SECURITY] Fedora 19 Update: openstack-nova-2013.1.4-6.fc19

OpenStack Compute codename Nova is open source software designed to provision and manage large networks of virtual machines, creating a redundant and scalable cloud computing platform. It gives you the software, control panels, and APIs required to orchestrate a cloud, including running instances...

Novell Identity Manager Roles Based Provisioning Module taskId XSS

According to its version, the Novell Identity Manager Roles Based Provisioning Module install hosted on the remote web server is affected by a reflected cross-site scripting vulnerability. This is due to improper handling of user input to the 'taskId' parameter in the 'taskDetail.do' script. By...

Cross site scripting

Cross-site scripting XSS vulnerability in the Roles Based Provisioning Module 4.0.2 before Field Patch D for Novell Identity Manager aka IDM allows remote attackers to inject arbitrary web script or HTML via a taskDetail taskId...

CVE-2013-1096: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Roles Based Provisioning Module 4.0.2 before Field Patch D for Novell Identity Manager aka IDM allows remote attackers to inject arbitrary web script or HTML via a taskDetail taskId...