CVE-2007-3911

Multiple heap-based buffer overflows in 1 clsscheduler.exe aka scheduler client and 2 srvscheduler.exe aka scheduler server in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests...

CVE-2007-3911: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in 1 clsscheduler.exe aka scheduler client and 2 srvscheduler.exe aka scheduler server in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests...

ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability

ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-044.html July 25, 2007 -- CVE ID: CVE-2007-3911 -- Affected Vendor: BakBone -- Affected Products: BakBone NetVault Reporter 3.5 Update4 -- TippingPointTM IPS Customer...

BakBone NetVault Reporter scheduler service buffer overflow

Heap buffer overflows in client TCP/7978 and server TCP/7977 schedule services...

BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with affected installations of BakBone NetVault Reporter. User interaction is not required to exploit this vulnerability. The specific flaw exists both within the scheduler client clsscheduler.exe listening on TCP por...

Secure Computing Security Reporter multiple security vulnerabilities

Authentication bypass and directory traversal...

Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)

Binary data 3947.prm...

Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)

The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.9 or a version of Mac OS X 10.3 which does not have Security Update 2007-003 applied. This update contains several security fixes for the following programs : - ColorSync - CoreGraphics - Crash Reporter - CUPS ...

CVE-2006-6515: Undefined Security Weakness

Mantis before 1.1.0a2 sets the default value of $gbugreminderthreshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders...

Solaris 5.8 (sparc) : 113246-02

Topology Reporter 1.0: Support for Leadville 6.1.2, StorADE bug fi. Date this patch was last updated by Sun : Oct/16/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

reporterinclude.txt

!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Reporter Mambo Component Remote File Include Vulnerabilities -------------------------------------------------------------------------------- Author: CrackersChild...

CVE-2006-4241

PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component comreporter allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4241

CVE-2006-4241 affects the Mambo component com_reporter, specifically the processor/reporter.sql.php file. The vulnerability is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code by supplying a URL in the mosConfig_absolute_path parameter. The CVSS base score is 7.5 ...

CVE-2006-4241: Undefined Security Weakness

PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component comreporter allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Mambo Component Reporter 1.0 - 'Reporter.sql.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19553/info Reporter a Mambo component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute...

eIQnetworks Enterprise Security Analyzer License Manager Detection

The remote host is running a license manager for eIQnetworks Enterprise Security Analyzer ESA, a security information and event management application. Note that eIQnetworks Enterprise Security Analyzer is also included in third-party products such as Astaro Report Manager, Fortinet FortiReporter...

eIQnetworks Enterprise Security Analyzer Syslog Server Detection (deprecated)

Plugin has been deprecated as the software is EOL and no longer obtainable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid22126; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...

bluecoat7111.txt

Blue Coat Reporter 7.1.1.1 - multiple remote vulnerabilities ============================================================ Blue Coat Reporter ================== "Blue Coat Reporter 7 provides identity-based reporting on Web communications enabling enterprises to evaluate Web policies and manage...

CVE-2005-1708

templates.admin.users.userformprocessing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true...

CVE-2005-1710

Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...