Oracle Application Server Forms Arbitrary System Command Execution (CVE-2005-2372)

Oracle Application Server is a multi-platform solution for developing and deploying enterprise applications and web sites. The server ships with several additional components that extend its functionality. One of such component is the Oracle Forms Services. The Forms Services component allows for...

HP Enterprise Discovery未明远程特权提升漏洞

BUGTRAQ ID: 30865 CVE ID: CVE-2008-3538 CNCVE ID：CNCVE-20083538 HP Enterprise Discovery是一款识别并了解数据中心或计算网络中正在运行的应用程序和进程的解决方案。 HP Enterprise Discovery存在一个未明安全问题，远程攻击者可以利用漏洞获得SYSTEM高特权，控制应用程序所在系统。 目前没有详细漏洞细节提供。 HP Enterprise Discovery 2.1.3 HP Enterprise Discovery 2.1.2 HP Enterprise Discovery 2.1.1 ...

DSA-1402-1 gforge - insecure temporary files

Bulletin has no description...

SAP Internet Graphics Server远程缓冲区溢出漏洞

SAP Internet Graphics Server是SAP R/3企业环境的一个组件，可提供图形服务。 SAP Internet Graphics Server不正确处理用户提交的HTTP请求，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 目前没有详细漏洞细节提供，成功利用漏洞可导致在UNIX系统下获得SAP系统管理员特权，而在windows下可导致获得SYSTEM权限。 SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 6.40 SAP Internet...

Novell firewall client privilege escalation

"Save Configuration As..." dialog allows execute application with Local System privilege...

Unchecked Buffer in ntdll.dll (Q815021)

The remote host is vulnerable to a flaw in ntdll.dll which may allow an attacker to gain system privileges, by exploiting it through, for instance, WebDAV in IIS5.0 other services could be exploited, locally and/or remotely SPDX-FileCopyrightText: 2003 Trevor Hemsley Some text descriptions might ...

Default Password (synnet) for 'debug' Account

The account 'debug' on the remote host uses the password 'synnet'. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "debug"; password = "synnet"; include'deprecatednasllevel.inc'; include'compat.inc'; if description...

VentaFax Privilege escalation

VentaEngine available via systray runs with Local System privilege. On double click file selsction meny is open. It allows "Execute" command to be choosen for executable files...

Microsoft Windows Server 2000 - Utility Manager All-in-One (MS04-019)

Microsoft Windows Server 2000 - Utility Manager All-in-One MS04-019 / COROMPUTER2004 Crpt Utility Manager exploit v2.666 modified by kralor Crpt It gets system language and sets windows names to work on any win2k :P Feel free to add other languages : v2.666: added autonomous allinone remote...

Open the WS_FTP Server backdoor to SYSTEM

Advisory Name: Open the WSFTP Server backdoor to SYSTEM Impact : Privilege escalation Discovered by: Hugh Mann [email protected] Tested progs : Ipswitch WSFTP Server 4.0.2.EVAL Description Any local user or any remote user who can execute programs on the FTP server as any user can start progra...

wsftp402eval3.txt

Advisory Name: Open the WSFTP Server backdoor to SYSTEM Impact : Privilege escalation Discovered by: Hugh Mann [email protected] Tested progs : Ipswitch WSFTP Server 4.0.2.EVAL Description Any local user or any remote user who can execute programs on the FTP server as any user can start progra...

[Full-Disclosure] [vulnwatch] Serv-U MDTM Command Buffer Overflow Vulnerability

vulnwatch Serv-U MDTM Command Buffer Overflow Vulnerability www.cnhonker.com Security Advisory Advisory Name: Serv-U MDTM Command Buffer Overflow Vulnerability Release Date: 02/26/2004 Affected version: Serv-U 5.0.0.4 Author: bkbll [email protected] URL:...

NSFOCUS SA2003-06 : Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-06 Topic: Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability Release Date: 2003-09-11 CVE CAN ID: CAN-2003-0528 http://www.nsfocus.com/english/homepage/research/0306.htm Affected system: ==================...

Default Password (D13hh[) for 'root' Account

The account 'root' has the password 'D13hh'. An attacker may use it to gain further privileges on this system. The presence of this account suggests the system may have the D13HH rootkit typically found on Solaris systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root";...

[SNS Advisory No.41] iPlanet Messaging Server 5.1(evaluation copy) Buffer Overflow Vulnerability

---------------------------------------------------------------------- SNS Advisory No.41 iPlanet Messaging Server 5.1evaluation copy Buffer Overflow Vulnerability Problem first discovered: 6 Aug 2001 Published: Mon, 3 Sep 2001 ---------------------------------------------------------------------...

sa2001_06.txt

NSFOCUS Security AdvisorySA2001-06 Topic: Microsoft IIS ssinc.dll Buffer Overflow Vulnerability Release Date£º 2001-08-17 CVE CAN ID : CAN-2001-0506 BUGTRAQ ID : 3190 Affected system: ================ - Microsoft IIS 4.0 - Microsoft IIS 5.0 Impact: ========= NSFOCUS Security Team has found a buff...

NSFOCUS SA2001-06 : Microsoft IIS ssinc.dll Buffer Overflow Vulnerability

NSFOCUS Security AdvisorySA2001-06 Topic: Microsoft IIS ssinc.dll Buffer Overflow Vulnerability Release DateЈє 2001-08-17 CVE CAN ID : CAN-2001-0506 BUGTRAQ ID : 3190 Affected system: ================ - Microsoft IIS 4.0 - Microsoft IIS 5.0 Impact: ========= NSFOCUS Security Team has found a buff...

Ipswitch WS_FTP Server 2.0 - Anonymous Multiple FTP Command Buffer Overflows

Ipswitch WSFTP Server 2.0 - Anonymous Multiple FTP Command Buffer Overflows source: https://www.securityfocus.com/bid/3102/info WS-FTP Server is vulnerable to malicious remote user input argumenting multiple FTP commands received from anonymously connecting clients. An attacker may supply a long...

Ipswitch WS_FTP Server 2.0 - Anonymous Multiple FTP Command Buffer Overflows

source: https://www.securityfocus.com/bid/3102/info WS-FTP Server is vulnerable to malicious remote user input argumenting multiple FTP commands received from anonymously connecting clients. An attacker may supply a long sequence of characters as an argument to any of the affected commands. If th...

TrendMicro InterScan WebManager Version 1.2 RegGo.dll Buffer Overflow Vulnerability

----------------------------------------------------------------------- SNS Advisory No.33 TrendMicro InterScan WebManager Version 1.2 RegGo.dll Buffer Overflow Vulnerability Problem first discovered: Wed, 06 Jun 2001 Published: Thr, 21 Jun 2001 Published: Thr, 21 Jun 2001...