F5 BIG-IP Management Interface Perl Injection

F5 BIG-IP Management Interface Perl Injection Product: F5 BIG-IP http://www.f5.com/products/big-ip/ The F5 BIG-IP reconfiguration facility, used by both the web management interface and the CLI, suffers from insufficient input validation and/or sanitization of certain reconfiguration requests. It...

f5big-xsrf.txt

F5 BIG-IP Web Management Console CSRF Product: F5 BIG-IP http://www.f5.com/products/big-ip/ By design the F5 BIG-IP web management interface allows a logged-in user with Resource Manager or Administrator privileges to execute an arbitrary bigpipe shell command through the web "Console" feature. I...

Debian: Security Advisory (DSA-1047-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : heartbeat (ZYPP Patch Number 1978)

This update fixes both a local and a remote denial of service attack within heartbeat, as well as numerous other bugs in the messaging and membership layer, GUI, Cluster Resource Manager, Local Resource Manager and Resource Agents. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

openSUSE 10 Security Update : heartbeat (heartbeat-2139)

This update fixes both a local and a remote denial of service attack within heartbeat, as well as numerous other bugs in the messaging and membership layer, GUI, Cluster Resource Manager, Local Resource Manager and Resource Agents. CVE-2006-3815,CVE-2006-3121 %NASLMINLEVEL 70300 C Tenable Network...

Microsoft Windows GDI+ ICO文件远程拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的GDI+（Gdiplus.dll）在处理畸形的ICO文件时存在拒绝服务漏洞，可能导致资源管理器在处理时发生崩溃。 如果用户通过资源管理器或Windows图片和传真查看器之类的组件所打开的ICO文件中InfoHeader部分设置的Height值为0，就可能导致将0用作除数，资源管理器进程会崩溃。有漏洞函数反汇编如下： .text:4ED9E209 ; private: int thiscall GpIcoCodec::IsValidDIBunsigned int .text:4ED9E2...

X-Kryptor Secure Client本地权限提升漏洞

X-Kryptor Secure Client是基于软件的VPN客户端，允许将家庭或移动的工作机连接到安全的局域网。 X-Kryptor Secure Client在处理认证操作时存在漏洞，本地攻击者可能利用此漏洞获取非授权访问。 如果在Microsoft Windows上使用X-Kryptor Secure...

Microsoft Windows资源管理器及媒体播放器拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的资源管理器和媒体播放器在处理畸形MID及WMV文件时存在漏洞，远程攻击者可能利用此漏洞导致进程崩溃。 如果用户受骗使用Windows所捆绑的资源管理器或媒体播放器打开了恶意的WMV或MID文件的话，就会导致explorer.exe或mplayer2.exe进程崩溃。 Microsoft Windows XP SP2 Microsoft Windows 2000SP4 Microsoft Media Player 6.4 Microsoft Media Player 10.0...

CVE-2006-5677

resmom/startexec.c in pbsmom in TORQUE Resource Manager 2.0.0p8 and earlier allows local users to create arbitrary files via a symlink attack on 1 a job output file in /usr/spool/PBS/spool and possibly 2 a job file in /usr/spool/PBS/mompriv/jobs...

CVE-2006-5677

The CVE-2006-5677 issue affects TORQUE Resource Manager, specifically resmom/start_exec.c in pbs_mom (versions up to 2.0.0p8). A local user can exploit a symlink attack to create arbitrary files in /usr/spool/PBS/spool (and possibly /usr/spool/PBS/mom_priv/jobs), enabling potential arbitrary file...

DSA-1047-1 resmgr - programming error

Bulletin has no description...

resmgr resource manager unauthorized USB resources access

User granted acces to 1 USB device can access any USB device...

CVE-2005-0505

Unknown vulnerability in Information Resource Manager IRM before 1.5.2.1 allows remote attackers to have "potentially serious" impact, related to LDAP logins...

CVE-2004-1713

Unknown vulnerability in HP Process Resource Manager PRM C.02.01.01 and earlier, as used by HP-UX Workload Manager WLM, allows local users to corrupt data files...

CVE-2004-1713

Technical details about CVE-2004-1713 are not provided in the connected documents; the materials only reiterate the basic description that local users could corrupt data files in HP PRM on HP-UX WLM. Monitor for updates.

CVE-2005-0505

CVE-2005-0505 concerns an unknown vulnerability in Information Resource Manager (IRM) prior to version 1.5.2.1 that could allow remote attackers to cause potentially serious impact, related to LDAP logins. The available sources (NVD/NVD mirror) list a high impact (base score 7.5) with network att...

CVE-2005-0505

Unknown vulnerability in Information Resource Manager IRM before 1.5.2.1 allows remote attackers to have "potentially serious" impact, related to LDAP logins...

HP-UX PHSS_24864 : HP-UX running PRM or WLM, Local Increased Privilege (HPSBUX00165 SSRT071392 rev.2)

s700800 11.X PRM C.01.08.2 Cumulative Patch : Security vulnerability in HP Process Resource Manager PRM product revision C.01.08.2 and earlier, on all releases of HP-UX. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from H...

[security bulletin] SSRT4785 rev. 0 HP-UX Process Resource Manager (PRM) potential data corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01065 REVISION: 0 SSRT4785 rev. 0 HP-UX Process Resource Manager PRM potential data corruption ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this...

CVE-2004-1713

Unknown vulnerability in HP Process Resource Manager PRM C.02.01.01 and earlier, as used by HP-UX Workload Manager WLM, allows local users to corrupt data files...