UBUNTU-CVE-2016-2118

The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data...

UBUNTU-CVE-2016-2115

Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacnnp, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream...

UBUNTU-CVE-2015-5370

Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service application crash or CPU consumption, or possibly execute arbitrary code on a...

BMC Software BladeLogic Server Automation Suite RSCD Agent Information Disclosure Vulnerability

BMC Software BladeLogic Server Automation Suite is a solution for managing the lifecycle of servers and applications from BMC Software, USA. An information disclosure vulnerability exists in the RSCD Agent of the BMC Software BladeLogic Server Automation Suite for Linux and Unix platforms. A remo...

BMC Software BladeLogic Server Automation Suite RSCD Agent Password Reset Vulnerability

BMC Software BladeLogic Server Automation Suite is a solution for managing the lifecycle of servers and applications from BMC Software, USA. A password reset vulnerability exists in the RSCD Agent of the BMC Software BladeLogic Server Automation Suite for Linux and Unix platforms. A remote attack...

Drupal Core Violence Amplification Attack Vulnerability

Drupal is a free and open source content management system developed in PHP. A brute force amplification attack vulnerability exists in Drupal Core.The XML-RPC system allows a large number of calls to the same method to be done once, which can be used as a factor in favor in a brute force attack...

The software of the Advantech WebAccess remote monitoring system is vulnerable, allowing a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the Kernel software for remote monitoring of Advantech WebAccess is caused by a numerical overflow condition. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure using a specially crafted RPC request...

The software of the Advantech WebAccess remote monitoring system is vulnerable, allowing a intruder to trigger a service failure.

The vulnerability of the BwpAlarm subsystem in the Advantech WebAccess remote monitoring software is caused by a buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure through a specially crafted RPC request...

The vulnerability of the Solaris operating system, which allows a perpetrator to cause partial service interruption

The vulnerability of the Solaris operating system’s RPC subsystem is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause partial service interruptions by invoking remote procedures...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s RPC implementation is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a local attacker to enhance their privileges by using a specially crafted application...

Unspecified vulnerability in Solaris RPC component

Solaris is a unix-based operating system. An unspecified vulnerability exists in the RPC component within Solaris, which allows remote attackers to exploit the vulnerability to launch denial-of-service attacks...

CVE-2016-0535

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availability via vectors related to RPC...

Advantech WebAccess Integer Overflow Vulnerability

WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. An integer overflow vulnerability exists in the Kernel service of Advantech WebAccess...

CVE-2016-0859

Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow via a crafted RPC request...

CVE-2016-0860

Buffer overflow in the BwpAlarm subsystem in Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service via a crafted RPC request...

EMC NetWorker RPC Authentication Message Handling Remote Denial of Service Vulnerability

EMC NetWorker is an application that supports disk backup, data replication, continuous data protection and deduplication. A security vulnerability in the EMC NetWorker RPC authentication messages allows remote attackers to exploit the vulnerability to submit a special request to cause the...

Adobe LiveCycle Data Services Information Disclosure Vulnerability

Adobe LiveCycle Data Services is the United States Odo than Adobe company's set of application servers deployed on and integrated with RIA applications and J2EE and other enterprise applications server software. The software provides remote procedure call RPC services, messaging services and data...

Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2015-04666)

Microsoft Windows Server is a series of servers based on the windows operating system launched by the U.S. Microsoft Microsoft. A security vulnerability exists in the authentication implementation in the RPC subsystem of Microsoft Windows due to the program not restricting link reflection. A loca...

Microsoft Windows Remote Procedure Call Privilege Elevation Vulnerability (3067505)

This host is missing an important security update according to Microsoft Bulletin MS15-076. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-076: Vulnerability in Windows Remote Procedure Call Could Allow Elevation of Privilege (3067505)

The remote Windows host is affected by a privilege escalation vulnerability in the Microsoft Remote Procedure Call RPC due to incorrectly allowing DCE/RPC connection reflection. A remote, authenticated attacker can exploit this vulnerability, with a specially crafted application, to elevate...