801 matches found
Cisco Building Broadband Service Manager Captive Portal crossite scripting
Crossite scripting with http://host/ekgnkm/AccessCodeStart.asp?msg=3Cscript3Ealert22XSS22;3C/script3E...
Authentication flaw
IBM Tivoli Business Service Manager TBSM 4.1.1 stores passwords in cleartext 1 after external authentication, which triggers writing the password to SMserver.log; and 2 after a reconfig action; which allows local users to obtain sensitive information...
CVE-2008-0441
IBM Tivoli Business Service Manager TBSM 4.1.1 stores passwords in cleartext 1 after external authentication, which triggers writing the password to SMserver.log; and 2 after a reconfig action; which allows local users to obtain sensitive information...
CVE-2008-0441
IBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext after external authentication and after a reconfig action, triggering writing credentials to SM_server.log. This leads to local users potentially obtaining sensitive information. The vulnerability is documented across ...
CVE-2008-0441
IBM Tivoli Business Service Manager TBSM 4.1.1 stores passwords in cleartext 1 after external authentication, which triggers writing the password to SMserver.log; and 2 after a reconfig action; which allows local users to obtain sensitive information...
CVE-2007-0319
Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData ActiveUtils EmailData ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Manager 5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-0319
The CVE-2007-0319 entry concerns Motive Communications’ ActiveUtils EmailData ActiveX control (ActiveEmailTest.EmailData in ActiveUtils.dll) used by Motive Service Activation Manager 5.1 and Self Service Manager 5.1 and earlier. It describes multiple stack-based buffer overflows that could allow ...
CVE-2007-2359
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string...
Buffer overflow
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string...
CVE-2007-2359
CVE-2007-2359 concerns a buffer overflow in Ghost Service Manager used by Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery and BackupExec System Recovery prior to 20070426. The vulnerability arises from handling of a long string, enabling local users to gain privileges (local pri...
iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Service Manager Buffer Overflow Vulnerability
Symantec Norton Ghost 10 Service Manager Buffer Overflow Vulnerability iDefense Security Advisory 04.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 26, 2007 I. BACKGROUND Symantec Norton Ghost is a backup and recovery application designed to allow users to completely restore the...
Symantec Norton Ghost multiple security vulnerabilities
Service Manager buffer oveflow, weak encryption...
IBM Tivoli Business Service Manager NCISETUP.DB和MSI.LOG密码泄露漏洞
IBM Tivoli Business Service Manager是一款基于策略的电子商务访问控制解决方案。 IBM Tivoli Business Service Manager存在设计错误，本地攻击者可以利用漏洞获得密码信息。 问题是NCISETUP.DB和MSI.LOG文件会泄露密码信息。目前没有详细漏洞细节提供。 IBM Tivoli Business Service Manager 4.1 可参考如下安全公告获得补丁信息： http://www-1.ibm.com/support/docview.wss?uid=swg24015473...
CVE-2007-1940
IBM Tivoli Business Service Manager TBSM 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading 1 ncisetup.db or 2 msi.log...
Information disclosure
IBM Tivoli Business Service Manager TBSM 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading 1 ncisetup.db or 2 msi.log...
CVE-2007-1940
IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, enabling local users to read sensitive data from ncisetup.db or msi.log. Root cause: plaintext password storage during setup/logging. Affected component: TBSM 4.1 prior to Interim Fix 1. Impact: poten...
Hewlett Packard multiple printers privilege escalation
Local user have full access to printer service "PML Driver HPZ12" thorugh service manager, making it possible to configure any executable to be run with local system privileges...
Microsoft Windows RASMAN Service Memory Corruption (MS06-025; CVE-2006-1314)
RASMAN Remote Access Service Manager is a service that handles the details of establishing the connection to the remote server. This service also provides the client with status information during the connection operation. A vulnerability exists in RASMAN service that would allow an attacker who...