CVE-2007-5665

The CVE-2007-5665 issue affects Novell ZENworks Endpoint Security Management (ESM) STEngine.exe (version around 3.5.0.20) where diagnostic report generation uses scripts in a world-writable directory. The service runs as SYSTEM and will execute a command shell found in that directory; if a local ...

Novell ZENworks ESM客户端STEngine.exe本地权限提升漏洞

BUGTRAQ ID: 27146 CVECAN ID: CVE-2007-5665 Novell ZENworks Endpoint Security Management（ESM）的安全客户端允许集中管理防火墙保护策略。 ESM在处理命令的执行时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 当在工作站上安装ZENworks ESM的安全客户端时，就会将STEngine服务设置为在本地SYSTEM帐号下运行。以下可执行程序中实现这个服务： 文件名：STEngine.exe（1,847,296字节） 版本：3.5.0.20...

3 3 8 9 get the broiler after the command complete works-vulnerability warning-the black bar safety net

net use $"\\ip\ipc$ "" /user:" " establishment of IPC air link net use $"\\ip\ipc$ "password" /user:"user name" to establish IPC non-empty link net use h: $"\\ip\c$ "password" /user:"username" directly after landing mapping each other C: to the local as H: net use h: $"\\ip\c$ after landing...

[Full-disclosure] McAfee EPO Buffer Overflow

McAfee Epolicy 3.5.0 / Protection Pilot 1.1.0 Buffer Overflow www.remote-exploit.org muts at remote-exploit org - Product Information McAfeeR ePolicy OrchestratorR is a security management solution that gives you a coordinated defense against malicious threats and attacks. As your central hub, yo...

ePolicy Orchestrator Detection

The remote host appears to be running McAfee ePolicy Orchestrator ePO, a security management solution. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22493; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22";...

eIQnetworks Enterprise Security Analyzer Topology Server Detection

The remote host is running a topology server from eIQnetworks Enterprise Security Analyzer ESA, a security information and event management application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid22133;...

EEYE: McAfee ePolicy Orchestrator Remote Compromise

McAfee ePolicy Orchestrator Remote Compromise Release Date: July 13, 2006 Severity: High Remote Code Execution Vendor: McAfee Systems Affected: McAfee Common Management EPO Agent versions below version 3.5.5.438 Overview: McAfee ePolicy Orchestrator is the remote security management software for...

From PHP Forum the vulnerability of the endoscope security management-vulnerability warning-the black bar safety net

From: ReJeCt‘s Blog Blue magic Forum is a PHP Forum in the country is widely used. Due to its user registration module in some code defect that can lead to a malicious attacker will be normal users to elevate to administrator. First let's look at an invasion of the examples. The invasion paradigm...

Replace the small bamboo of the NBSI2: the Opendatasource And Openrowset-vulnerability warning-the black bar safety net

Currently on the market of SQL Injection tools a lot, the most respected is the NBSI2. SQL Injection method on the Internet is everywhere, everyone serious to learn it will soon become the script of the invasion“master”it. But whether it is tools, or numerous methods, to guess the SQL data when t...

ePolicy Orchestrator Symlink Arbitrary Privileged File Access

The remote host is running ePolicy Orchestrator / ProtectionPilot, a system security management solution from McAfee. According to its banner, the Common Management Agent CMA associated with ePolicy Orchestrator / ProtectionPilot on the remote host can be used by local users to view files residin...

CVE-2005-2188

McAfee IntruShield Security Management System obtains the user ID from the URL, which allows remote attackers to guess the Manager account and possibly gain privileges via a brute force attack...

CVE-2005-2187

McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the 1 fullAccess or 2 fullAccessRight parameter in reports-column-center.jsp, or 3 fullAccess...

CVE-2005-2188

McAfee IntruShield Security Management System obtains the user ID from the URL, which allows remote attackers to guess the Manager account and possibly gain privileges via a brute force attack...

CVE-2005-2186

CVE-2005-2186 describes multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management System. Remote authenticated users can inject arbitrary web script or HTML through either the thirdMenuName or resourceName parameter to SystemEvent.jsp. The NVD record assigns a ...

CVE-2005-2187

CVE-2005-2187 affects McAfee IntruShield Security Management System. The issue allows remote authenticated users to access the Generate Reports feature and modify alerts by setting the Access option to true, demonstrated via (1) fullAccess or (2) fullAccessRight in reports-column-center.jsp, or (...

CVE-2005-2187

McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the 1 fullAccess or 2 fullAccessRight parameter in reports-column-center.jsp, or 3 fullAccess...

CVE-2005-2186

Multiple cross-site scripting XSS vulnerabilities in McAfee IntruShield Security Management System allow remote authenticated users to inject arbitrary web script or HTML via the 1 thirdMenuName or 2 resourceName parameter to SystemEvent.jsp...

CVE-2005-2188

CVE-2005-2188 affects McAfee IntruShield Security Management System. The flaw allows remote attackers to obtain the Manager account by guessing the user ID included in the URL, enabling a brute-force path to privilege escalation. The common description notes possible privilege gain via brute forc...

McAfeeIPS.txt

------=Part1341925560245.1120660746428 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline / = $ An open security advisory 8 - McAfee Intrushield IPS Management Console= =20 Abuse = 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2:...

HP-UX PHSS_27182 : HP-UX, HP Jetdirect, HP Procurve Switches, HP OpenView Network Node Manager (NNM), OpenView Distributed Management (DM), HP TopTools Remote Control Card Running SNMP, Remote Unauthorized Access, Denial of Service (DoS) (HPSBUX00184 SSRT071347 rev.17)

s700800 11.X OV EMANATE14.2 snmpdm - subagent handling : Vulnerabilities in SNMP request and trap handling. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS27182. The text itself is copyright C...