Lenovo Hotkey Driver 5.33 - Local Privilege Escalation

Author: Chilik Tamir - Amdocs Power Security Testing Group Website: http://invalid-packet.blogspot.com/2010/03/full-disclosure-security-vulnerability.html Subject: Security vulnerability in Lenovo Hotkey Driver and Access Connections version =v5.33 Impact: A privilege escalation attack can be use...

Lenovo Hotkey Driver <= v5.33 Privilege Escalation

No description provided by source. Author: Chilik Tamir - Amdocs Power Security Testing Group Website: http://invalid-packet.blogspot.com/2010/03/full-disclosure-security-vulnerability.html Subject: Security vulnerability Privilege escalation in Lenovo Hotkey Driver and Access Connections version...

openSUSE Security Update : sudo (sudo-2083)

This update fixes two security issues : - CVE-2010-0427:CVSS v2 Base Score: 6.6 Sudo failed to properly reset group permissions, when 'runasdefault' option was used. If a local, unprivileged user was authorized by sudoers file to perform their sudo commands under default user account, it could le...

Lenovo Privilege Escalation

Author: Chilik Tamir - Amdocs Power Security Testing Group Website: http://invalid-packet.blogspot.com/2010/03/full-disclosure-security-vulnerability.html Subject: Security vulnerability in Lenovo™ Hotkey™ Driver and Access Connections™ version =v5.33 Impact: A privilege escalation attack can be...

IBM Informix librpc.dll Multiple Remote Code Execution Vulnerabilities

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of both IBM Informix Dynamic Server. User interaction is not required to exploit this vulnerability. The specific flaws exist within the RPC protocol parsing library, librpc.dll, utilized by the ISM Portmapp...

Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of both IBM Informix Dynamic Server and EMC Legato Networker. User interaction is not required to exploit this vulnerability. The specific flaw exists within the RPC protocol parsing library, librpc.dll,...

HP OpenView Network Node Manager Multiple Buffer Overflows (CVE-2009-3846; CVE-2009-4176)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. Multiple heap buffer overflow vulnerabilities exist in HP OpenView Netwo...

Symantec Multiple Products VRTSweb.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of multiple Symantec products. Authentication is not required to exploit this vulnerability. The specific flaw exists within the VRTSweb.exe Web Server component which listens by default on TCP ports...

Hewlett-Packard Operations Manager Server Backdoor Account Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Operations Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists due to a hidden account present within the Tomcat users XML file. Using th...

Symantec Veritas Storage Foundation Scheduler Authentication Bypass (CVE-2008-3703)

Symantec Veritas Storage Foundation for Windows SFW is a storage management suite. With a set of networks services and client agents, the product provides solution for online heterogeneous storage management. One of the services installed by SFW is the Veritas Scheduler Service, implemented in...

CA iTechnology iGateway Service Content-Length Buffer (CVE-2005-3653)

Numerous Computer Associates CA products incorporate shared components that perform common tasks not specific to any one product. One such component is the CA iGateway service. The iGateway service is an XML-based interface that integrates with storage management applications and facilitates...

CA Unicenter Software Delivery dtscore.dll Stack Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates Unicenter Software Delivery. Authentication is not required to exploit this vulnerability. The specific flaw resides in the dtscore.dll library. The vulnerability is exposed through...

TorrentTrader Classic Multiple Vulnerabilities

TorrentTrader Classic is prone to multiple vulnerabilities. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Symantec Multiple Product Intel Alert Originator Service Invalid Length Check Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Symantec AntiVirus Corporate Edition, Symantec Client Security and Symantec Endpoint Protection. Authentication is not required to exploit this vulnerability. The specific flaws are exposed via the...

rPSA-2009-0061-1 cups

rPath Security Advisory: 2009-0061-1 Published: 2009-04-17 Products: rPath Linux 1 rPath Linux 2 Rating: Severe Exposure Level Classification: Remote System User Deterministic Privilege Escalation Updated Versions: cups=conary.rpath.com@rpl:1/1.1.23-14.10-1 cups=conary.rpath.com@rpl:2/1.3.9-1.1-1...

EMC RepliStor Server Service DoASOCommand Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC RepliStor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DoRcvRpcCall RPC function exposed via the repsrv.exe process which listens by defaul...

Ubuntu Update for dovecot vulnerability USN-487-1

Ubuntu Update for Linux kernel vulnerabilities USN-487-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4871.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for dovecot vulnerability USN-487-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

GLSA-200902-01 : sudo: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200902-01 sudo: Privilege escalation Harald Koenig discovered that sudo incorrectly handles group specifications in RunasAlias and related entries when a group is specified in the list using %group syntax, to allow a user to run...

sudo: Privilege escalation

Background sudo allows a system administrator to give users the ability to run commands as other users. Description Harald Koenig discovered that sudo incorrectly handles group specifications in RunasAlias and related entries when a group is specified in the list using %group syntax, to allow a...

EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC AutoStart. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Backbone service ftbackbone.exe which listens by default on TCP port...