McAfee Firewall Reporter unauthenticated access

Bug in application logic allows authentication bypass...

McAfee Firewall Reporter 'GernalUtilities.pm'验证绕过漏洞

Bugtraq ID: 47306 McAfee Firewall Reporter用于集中处理企业范围内McAfee网关安全设备的日志和审计数据。 负责验证用户的代码存在缺陷。GernalUtilities.pm包含的代码通过解析Cookie值来验证会话是否合法。在检查特定文件只判断是否存在而没有检查其内容。使用目录遍历技术攻击者可以把cgisess cookie值指向任意服务器上存在的文件，绕过验证。 0 McAfee Firewall Reporter 5.1.0.6 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability

Novell File Reporter is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability

This host is installed with Novell File Reporter and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellfilereporterbofvulnwin.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability Authors: Antu Sana...

McAfee Firewall Reporter GeneralUtilities.pm isValidClient Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of McAfee Firewall Reporter. Authentication is not required to exploit this vulnerability. The specific flaw exists within the code responsible for authenticating users. The GernalUtilities.pm file...

CVE-2011-0994

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...

Stack overflow

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...

DSquare Exploit Pack: D2SEC_NFRAGENT

Name| d2secnfragent ---|--- CVE| CVE-2011-0994 Exploit Pack| D2ExploitPack Description| Novell File Reporter Agent Stack Overflow Vulnerability Notes|...

CVE-2011-0994

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...

CVE-2011-0994

The CVE-2011-0994 issue affects the Novell File Reporter Agent (NFRAgent.exe). It is a stack/buffer overflow caused by improper boundary handling while parsing XML data, enabling a remote attacker to potentially execute arbitrary code on vulnerable Windows hosts. Public sources consistently refer...

CVE-2011-0994: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...

Novell File Reporter Agent XML解析缓冲区溢出漏洞

CVE ID: CVE-2011-0994 Novell File Reporter可提供现有文件信息、最后访问数据时间，文件的副本信息及文件位置等网络服务器上存储的无数文件信息并可规划存储空间。 Novell File Reporter在实现上存在安全漏洞，攻击者可利用此漏洞以系统级别的权限执行任意代码，控制受影响系统。 此漏洞源于在处理某些XML标签的内容时File Reporter Agent NFRAgent.exe中的边界错误，可通过发送到TCP端口3037的特制数据造成栈缓冲区溢出。 Novell File Reporter 1.x 厂商补丁： Novell ------...

ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability

ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-116 April 4, 2011 -- CVE ID: CVE-2011-0994 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell File Reporter --...

Novell File Reporter Agent buffer overflow

NFRAgent.exe TCP/3037 buffer overflow...

Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Agent. Authentication is not required to exploit this vulnerability. The flaw exists within the NFRAgent.exe component which listens by default on TCP port 3037. When handling...

ASPSiteware Project Reporter SQL Injection Vulnerability

Exploit for asp platform in category web applications ======================================================== ASPSiteware Project Reporter SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1...

ASPSiteWare Project Reporter - SQL Injection

Author: R4dc0re Exploit Title: ASPSiteware Project Reporter SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Version:1.0 Price:50$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects...

ASPSiteware Project Reporter 1.0 SQL Injection

Author: R4dc0re Exploit Title: ASPSiteware Project Reporter SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Demo Link:http://www.aspsiteware.com/Project/ Version:1.0 Price:50$ Contact: [email protected] Website: www.1337db.com Greetings to:...

ASPSiteWare Project Reporter - SQL Injection

ASPSiteWare Project Reporter - SQL Injection Author: R4dc0re Exploit Title: ASPSiteware Project Reporter SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Version:1.0 Price:50$ Contact: [email protected] Website: www.1337db.com Greetings to:...

A Closer Look At ATM Skimmers

Security reporter Brian Krebs goes visual with ATM skimmers, asking readers to look at images and see if they would be able to tell the difference between a real ATM card reader and actual skimming devices. Read the full article. KrebsonSecurity.com...