PT-2013-2127

Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator ePO versions prior to 4.5.7 McAfee ePolicy Orchestrator ePO versions 4.6.x prior to 4.6.6 Description A directory traversal issue allows remote attackers to upload arbitrary files via a crafted request over the...

PT-2013-2126

Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator ePO versions prior to 4.5.7 McAfee ePolicy Orchestrator ePO versions 4.6.x prior to 4.6.6 Description A SQL injection issue exists in the Agent-Handler component, allowing remote attackers to execute arbitrary SQL...

Scientific Linux Security Update : ipa on SL6.x i386/x86_64 (20130123)

A weakness was found in the way IPA clients communicated with IPA servers when initially attempting to join IPA domains. As there was no secure way to provide the IPA server's Certificate Authority CA certificate to the client during a join, the IPA client enrollment process was susceptible to...

Low: Red Hat Security Advisory: Red Hat Network Proxy server jabberd security update

An updated jabberd package that fixes one security issue is now available for Red Hat Network Proxy 5.5 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...

Low: Red Hat Security Advisory: Red Hat Network Satellite server jabberd security update

An updated jabberd package that fixes one security issue is now available for Red Hat Network Satellite 5.5 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which...

Epson EventManager 2.50 - Denial of Service

Luigi Auriemma Application: Epson EventManager http://www.epson.com Versions: 53 PUSH EBX 01639680 |. 8B5C24 24 MOV EBX,DWORD PTR SS:ESP+24 01639684 |. 53 PUSH EBX 01639685 |. 50 PUSH EAX 01639686 |. E8 25F8FFFF CALL epnsm.01638EB0 ; parse "x-protocol-version" string 0163968B |. 83C4 08 ADD ESP,8...

MySQL and SQL field truncated vulnerability-vulnerability warning-the black bar safety net

The current Web developers certainly have a lot of people did not notice the author mentioned these two issues. The first problem is that, MySQL by default has a configuration parameters maxpacketsize, this parameter is used to limit the MySQL client and the MySQL server end of the data...

Symantec Altiris Deployment Solution Multiple Vulnerabilities

SUMMARY Symantecs Altiris Deployment Solution contains vulnerabilities that could potentially be leveraged for unauthorized file access or a denial of service on a client system, authentication bypass on the Server to local system-level access on a client system. AFFECTED PRODUCTS Product | Versi...

Update Protections against Recent Malware Threats (20-May-09)

The update includes new protections against 8 recent malware threats:Rogue-Software: ThreatNuker - ThreatNuker is a rogue security software that performs fake scans on the system and reports false and exaggerated infections. It attempts to trick the users into purchasing the license of the softwa...

Ajax allows a web page Trojan“quietly perform”-vulnerability warning-the black bar safety net

On the Ajax implementation, the developer is to think like the“Ajax to do that in user when browsing the web should not feel it to execute asynchronously, and does not need to wait for the page to refresh can be done automatically verify data”, such as whether the user name can be registered...

Spill procedures use the channel against the firewall-vulnerability warning-the black bar safety net

Now many web applications such as using a firewall, and we ourselves may also in the proxy, the transparent gateway, etc. behind it for the overflow of communication caused a little trouble. Many people may think of shellcode active connection, this if the firewall is done well, no access to the...

solaris/SPARC portbind port 6789 228 bytes

No description provided by source. / Solaris shellcode - connects /bin/sh to a port Claes M. Nyberg 20020624 [email protected], [email protected] / include string.h / void mainvoid asm" ! Server address xor %l1, %l1, %l1 ! l1 = 0 st %l1, %sp - 12 ! 0 = INADDRANY mov 0x2, %l1 ! AFINET sth...

CVE-2004-0657

Integer overflow in the NTP daemon NTPd before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time...

IBM Lotus Notes Detection

The remote service supports the Notes Remote Procedure Call protocol, which is used by Lotus Notes and Lotus Domino to communicate with other servers. C Tenable Network Security, Inc. This plugin positively identifies notes-to-notes communication on top of port 1352 include"compat.inc"; if...

[SecurityOffice] Netcharts XBRL Server v4.0.0 Information Leakage Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Netcharts XBRL Server v4.0.0 Information Leakage Vulnerability -- - -- Type Information Leakage - -- Release Date March 17, 2003 - -- Product / Vendor NetCharts XBRL Server 4.0 is a data visualization service that generates charts and graphs,...

ICQ contains a buffer overflow while processing Voice Video & Games feature requests

Overview There is a remotely exploitable buffer overflow in ICQ. Attackers that are able to exploit the vulnerability may be able to execute arbitrary code with the privileges of the victim user. Description ICQ is a program for communicating with other users over the Internet. ICQ is widely used...

STunnel 3.x - Client Negotiation Protocol Format String

// source: https://www.securityfocus.com/bid/3748/info Stunnel is a freely available, open source cryptography wrapper. It is designed to wrap arbitrary protocols that may or may not support cryptography. It is maintained by the Stunnel project. Stunnel does not properly handle unexpected input b...

AT&T WinVNC client authentication process vulnerable to man-in-the-middle attack

Overview WinVNC's challenge/response mechanism can allow an intruder to obtain legitimate credentials from a valid client in order to gain unauthorized access to the server. Description AT&T WinVNC is a free package available from AT&T Labs Cambridge that allows an existing desktop of a PC to be...

mmdump.pl

Meeting Maker is a networked calendaring/scheduling software package that's estimated to be installed on over 700,000 desktops e.g., see http://www.meetingmaker6.com/presslib/pressrel/mm061499mm6.htm. Meeting Maker is a registered trademark of ON Technology Corporation. Clients send passwords to ...

PT-2000-1202 · Zone · Zonealarm

Name of the Vulnerable Software and Affected Versions: ZoneAlarm affected versions not specified Description: The issue concerns ZoneAlarm sending sensitive system and network information in cleartext to the Zone Labs server when a user requests more information about an event. Recommendations: A...