558 matches found
[SECURITY] Fedora 9 Update: glpi-0.71.5-1.fc9
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
CVE-2008-2603
Unspecified vulnerability in the Resource Manager component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6, and Database Control in Enterprise Manager, has unknown impact and remote authenticated attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracl...
Cross site scripting
Unspecified vulnerability in the Resource Manager component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6, and Database Control in Enterprise Manager, has unknown impact and remote authenticated attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracl...
CVE-2008-2603
Unspecified vulnerability in the Resource Manager component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6, and Database Control in Enterprise Manager, has unknown impact and remote authenticated attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracl...
CVE-2008-2603
CVE-2008-2603 is an Oracle Enterprise Manager (Database Control) cross-site scripting vulnerability affecting 10gR1/10gR2/11.1.0.6 where the REFRESHCHOICE parameter can inject arbitrary script/HTML. The issue originates from the July 2008 CPU advisory; vendors released a patch as part of the CPU....
f5bigip-inject.txt
F5 BIG-IP Management Interface Perl Injection Product: F5 BIG-IP http://www.f5.com/products/big-ip/ The F5 BIG-IP reconfiguration facility, used by both the web management interface and the CLI, suffers from insufficient input validation and/or sanitization of certain reconfiguration requests. It...
F5 BIG-IP privilege escalation
Resource Manager group member can execute shell commands thorugh perl injection vulnerability...
F5 BIG-IP Management Interface Perl Injection
F5 BIG-IP Management Interface Perl Injection Product: F5 BIG-IP http://www.f5.com/products/big-ip/ The F5 BIG-IP reconfiguration facility, used by both the web management interface and the CLI, suffers from insufficient input validation and/or sanitization of certain reconfiguration requests. It...
f5big-xsrf.txt
F5 BIG-IP Web Management Console CSRF Product: F5 BIG-IP http://www.f5.com/products/big-ip/ By design the F5 BIG-IP web management interface allows a logged-in user with Resource Manager or Administrator privileges to execute an arbitrary bigpipe shell command through the web "Console" feature. I...
Debian: Security Advisory (DSA-1047-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 10 Security Update : heartbeat (ZYPP Patch Number 1978)
This update fixes both a local and a remote denial of service attack within heartbeat, as well as numerous other bugs in the messaging and membership layer, GUI, Cluster Resource Manager, Local Resource Manager and Resource Agents. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...
openSUSE 10 Security Update : heartbeat (heartbeat-2139)
This update fixes both a local and a remote denial of service attack within heartbeat, as well as numerous other bugs in the messaging and membership layer, GUI, Cluster Resource Manager, Local Resource Manager and Resource Agents. CVE-2006-3815,CVE-2006-3121 %NASLMINLEVEL 70300 C Tenable Network...
Microsoft Windows GDI+ ICO文件远程拒绝服务漏洞
Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的GDI+（Gdiplus.dll）在处理畸形的ICO文件时存在拒绝服务漏洞，可能导致资源管理器在处理时发生崩溃。 如果用户通过资源管理器或Windows图片和传真查看器之类的组件所打开的ICO文件中InfoHeader部分设置的Height值为0，就可能导致将0用作除数，资源管理器进程会崩溃。有漏洞函数反汇编如下： .text:4ED9E209 ; private: int thiscall GpIcoCodec::IsValidDIBunsigned int .text:4ED9E2...
X-Kryptor Secure Client本地权限提升漏洞
X-Kryptor Secure Client是基于软件的VPN客户端，允许将家庭或移动的工作机连接到安全的局域网。 X-Kryptor Secure Client在处理认证操作时存在漏洞，本地攻击者可能利用此漏洞获取非授权访问。 如果在Microsoft Windows上使用X-Kryptor Secure...
Microsoft Windows资源管理器及媒体播放器拒绝服务漏洞
Microsoft Windows是微软发布的非常流行的操作系统。 Windows的资源管理器和媒体播放器在处理畸形MID及WMV文件时存在漏洞，远程攻击者可能利用此漏洞导致进程崩溃。 如果用户受骗使用Windows所捆绑的资源管理器或媒体播放器打开了恶意的WMV或MID文件的话，就会导致explorer.exe或mplayer2.exe进程崩溃。 Microsoft Windows XP SP2 Microsoft Windows 2000SP4 Microsoft Media Player 6.4 Microsoft Media Player 10.0...
CVE-2006-5677
resmom/startexec.c in pbsmom in TORQUE Resource Manager 2.0.0p8 and earlier allows local users to create arbitrary files via a symlink attack on 1 a job output file in /usr/spool/PBS/spool and possibly 2 a job file in /usr/spool/PBS/mompriv/jobs...
CVE-2006-5677
The CVE-2006-5677 issue affects TORQUE Resource Manager, specifically resmom/start_exec.c in pbs_mom (versions up to 2.0.0p8). A local user can exploit a symlink attack to create arbitrary files in /usr/spool/PBS/spool (and possibly /usr/spool/PBS/mom_priv/jobs), enabling potential arbitrary file...
resmgr resource manager unauthorized USB resources access
User granted acces to 1 USB device can access any USB device...
