136 matches found
CVE-2010-2811: Undefined Security Weakness
Virtual Desktop Server Manager VDSM in Red Hat Enterprise Virtualization RHEV 2.2 does not properly accept TCP connections for SSL sessions, which allows remote attackers to cause a denial of service daemon outage via crafted SSL traffic...
CVE-2010-2223
Virtual Desktop Server Manager VDSM in Red Hat Enterprise Virtualization Hypervisor aka RHEV-H or rhev-hypervisor before 5.5-2.2 does not properly perform VM post-zeroing after the removal of a virtual machine's data, which allows guest OS users to obtain sensitive information by examining the di...
CVE-2010-2223
Virtual Desktop Server Manager VDSM in Red Hat Enterprise Virtualization Hypervisor aka RHEV-H or rhev-hypervisor before 5.5-2.2 does not properly perform VM post-zeroing after the removal of a virtual machine's data, which allows guest OS users to obtain sensitive information by examining the di...
CVE-2010-2223
CVE-2010-2223 affects Red Hat Enterprise Virtualization Hypervisor (RHEV-H) with Virtual Desktop Server Manager (VDSM). The issue: when removing a VM’s data, VDSM did not securely zero/delete the back-end data, allowing a guest OS user to examine disk blocks from deleted VMs and potentially discl...
CVE-2010-2223: Undefined Security Weakness
Virtual Desktop Server Manager VDSM in Red Hat Enterprise Virtualization Hypervisor aka RHEV-H or rhev-hypervisor before 5.5-2.2 does not properly perform VM post-zeroing after the removal of a virtual machine's data, which allows guest OS users to obtain sensitive information by examining the di...
CVE-2009-0138
servermgrd Server Manager in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration...
Authentication flaw
servermgrd Server Manager in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration...
Design/Logic Flaw
Ipswitch WSFTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character...
CVE-2008-5692
Ipswitch WS_FTP Server Manager before 6.1.1 (and possibly other Ipswitch products) contains an authentication-bypass vulnerability that lets remote attackers read logs by abusing the sequence: call FTPLogServer/login.asp (logLogout action) and then request FTPLogServer/LogViewer.asp using the loc...
CVE-2008-5693
Ipswitch WSFTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character...
CVE-2008-5693
CVE-2008-5693 affects Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier (and possibly other Ipswitch products). The vulnerability permits remote attackers to read contents of custom ASP files in WSFTPSVR/ by issuing a request with an appended dot. Documents show an impact to confidentiality (par...
CVE-2008-5693: Improper Input Validation
Ipswitch WSFTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character...
CVE-2008-5692: Improper Authentication
Ipswitch WSFTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name...
CVE-2008-2468
CVE-2008-2468 affects LANDesk Management Suite through the QIP Server Service (qipsrvr.exe). A heap/stack buffer overflow in processing specially crafted heal requests (via MultiByteToWideChar) targets the StringToMap and StringSize arguments, allowing remote code execution with SYSTEM privileges...
CVE-2008-2468: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in the QIP Server Service aka qipsrvr.exe in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap and StringSize arguments...
Logs visualization in WS_FTP Server Manager 6.1.0.0
Luigi Auriemma Application: WSFTP Server Manager http://www.wsftp.com Versions: WSFTP Server = 6.1.0.0 Platforms: Windows Bugs: A authorization bypassing in log visualization B ASP source visualization Exploitation: remote Date: 06 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web:...
Re: Logs visualization in WS_FTP Server Manager 6.1.0.0
Luigi Auriemma wrote: WSFTP Server Manager aka WSFTP WebService is the web administration interface of the IpSwitch WSFTP server and runs by default on port 80. This also affects the Ipswitch What's Up Gold 11.03 web server...
wsftp-disclose.txt
Luigi Auriemma Application: WSFTP Server Manager http://www.wsftp.com Versions: WSFTP Server = 6.1.0.0 Platforms: Windows Bugs: A authorization bypassing in log visualization B ASP source visualization Exploitation: remote Date: 06 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web:...
Ipswitch WS_FTP Server 6 - WSFTPSVRFTPLogServerLogViewer.asp Authentication Bypass
Ipswitch WSFTP Server 6 - WSFTPSVRFTPLogServerLogViewer.asp Authentication Bypass source: https://www.securityfocus.com/bid/27654/info WSFTP Server Manager is prone to an authentication-bypass vulnerability and an information-disclosure vulnerability. An attacker can exploit these issues to gain...
