EMC Control Center SAN Manager multiple security vulnerabilities

Buffer overflow, unauthroized files access via TCP/10444...

ZDI-08-076: EMC Control Center SAN Manager SST_SENDFILE Remote File Retrieval Vulnerability

ZDI-08-076: EMC Control Center SAN Manager SSTSENDFILE Remote File Retrieval Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-076 November 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC ControlCenter SAN Manager -- Vulnerability Details: This vulnerability allows remo...

EMC ControlCenter SAN Manager SST_CTGTRANS远程栈溢出漏洞

BUGTRAQ ID: 32389 EMC ControlCenter SAN Manager是EMC ControlCenter产品家族中用于管理SAN的组件。 SAN Manager默认监听于TCP 10444端口的Master Agent服务（msragent.exe）在处理SSTCTGTRANS请求时将报文数据拷贝到了固定大小的栈缓冲区，远程攻击者可以通过发送恶意报文触发溢出，导致以系统用户权限执行任意指令。 EMC ControlCenter 6.0 EMC ControlCenter 5.2 SP5 EMC ---...

[SECURITY] Fedora Core 6 Update: htdig-3.2.0b6-9.fc6

The ht://Dig system is a complete world wide web indexing and searching system for a small domain or intranet. This system is not meant to replace the need for powerful internet-wide search systems like Lycos, Infoseek, Webcrawler and AltaVista. Instead it is meant to cover the search needs for a...

[SECURITY] Fedora 8 Update: htdig-3.2.0b6-13.fc8

The ht://Dig system is a complete world wide web indexing and searching system for a small domain or intranet. This system is not meant to replace the need for powerful internet-wide search systems like Lycos, Infoseek, Webcrawler and AltaVista. Instead it is meant to cover the search needs for a...

Sun Brocade Switches远程拒绝服务漏洞

Sun Brocade Switches是Sun公司开发的交换机系列。 一个内核问题由非特权用户派生的内何进程可引起部分Brocade交换机停止响应或者重新启动。导致部分SAN设备的连接暂时丢失。 目前没有详细漏洞细节提供。 Sun SG-XSWBRO4900 SilkWorm 4900 switch 0 Sun SG-XSWBRO48ZP Silkworm 48000 Director 0 Sun SG-XSWBRO3900 SilkWorm 3900 switch 0 Sun SG-XSWBRO3850 SilkWorm 3850 switch 0 Sun SG-XSWBRO3250...

CVE-2006-5908

The CVE-2006-5908 entry describes multiple SQL injection vulnerabilities in the Yet Another News System (YANS) 0.2b, specifically in the login_user function within yans.func.php. The issue allows remote attackers to execute arbitrary SQL commands through the (1) username or (2) password parameter...

Solaris 8 (sparc) : 117367-02

Enterprise Storage Manager 2.1 SAN Manager management station patc. Date this patch was last updated by Sun : Oct/06/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is no longer available from Oracle. Disabled on 2015/04/20. C Tenable Network Security,...

xmame-sploits.txt

The following proof-of-concept demonstrates the existence of the local vulnerability found in xmame 0.102. It uses the brute-force technique. The RET address interval works on Intel Debian GNU/Linux. To test for the vulnerability, run "gcc exploit-c -o exploit" and then "perl fb.pl". exploit.c:...

CA Message Queuing Service Detection

The remote host is running the Computer Associate Message Queuing service CAM. This service is available with products like Unicenter TNG, Unicenter NSM, and BrightStor SAN Manager. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid20147; scriptversion "1.18";...

[NT] GXT Editor Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...