CVE-2013-3862

Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager SCM, aka "Service Control Manager Double Free Vulnerability."...

MS Windows Service Control Manager Privilege Elevation Vulnerability (2872339)

This host is missing an important security update according to Microsoft Bulletin MS13-077. OpenVAS Vulnerability Test $Id: secpodms13-077.nasl 5346 2017-02-19 08:43:11Z cfi $ MS Windows Service Control Manager Privilege Elevation Vulnerability 2872339 Authors: Antu Sanadi Copyright: Copyright c...

CVE-2013-3862: Undefined Security Weakness

Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager SCM, aka "Service Control Manager Double Free Vulnerability."...

MS13-077: Vulnerability in Windows Service Control Manager Could Allow Elevation of Privilege (2872339)

The remote Windows host is potentially affected by a privilege escalation vulnerability in the Windows Service Control Manager. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69836; scriptversion"1.11"; scriptcvsdate"Date: 2019/11/27"; scriptcveid"CVE-2013-3862";...

MS13-077: Vulnerability in Windows Service Control Manager could allow elevation of privilege: September 10, 2013

Resolves a vulnerability in Windows Service Control Manager that could allow elevation of privilege if an authenticated user is convinced to execute a specially crafted application.INTRODUCTIONMicrosoft has released security bulletin MS13-077. To view the complete security bulletin, go to one of...

Microsoft Windows Service Control Manager CVE-2013-3862 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that exists in the Windows Service Control Manager SCM. An attacker can exploit this issue to execute arbitrary code with escalated privileges. Successfully exploiting this issue can lead to the complete compromi...

[SECURITY] Fedora 15 Update: systemd-26-18.fc15

systemd is a system and service manager for Linux, compatible with SysV and LSB init scripts. systemd provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux cgroups,...

Fedora Update for systemd FEDORA-2012-4024

Check for the Version of systemd OpenVAS Vulnerability Test Fedora Update for systemd FEDORA-2012-4024 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

PHP <5.2.6 posix_access()函数服务控制绕过漏洞

No description provided by source...

Squid SNMP Parser ASN.1 Header Parsing Denial of Service (CVE-2004-0918)

Squid is a full featured, open source web proxy caching server. It supports proxying FTP, HTTP, SSL, DNS and has support for Simple Network Management Protocol SNMP. There is a vulnerability in the way Squid web proxy parses SNMP messages. An SNMP message with specially crafted ASN.1 length field...

South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges

South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location: http://www.webdrive.com/download/index.html Tested against: South Rive...

NameLess the back door of technical analysis full-contact-vulnerability warning-the black bar safety net

NameLess's name should be heard of it, estimated there are quite a lot of people used it, personally think that this back door is very classic, we'll simply look at about it description: there is only one DLL file, usually do not start in the mouth,can be a reverse connection back door program...

iDefense Security Advisory 10.14.08: Microsoft Host Integration Server 2006 Command Execution Vulnerability

iDefense Security Advisory 10.14.08 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 14, 2008 I. BACKGROUND The Host Integration Server is an application suite that is used to communicate with IBM mainframe servers. One of the components of the suite is a remote management interface. Th...

Cisco服务控制引擎SSH服务器多个拒绝服务漏洞

BUGTRAQ ID: 29316 CVECAN ID: CVE-2008-0534,CVE-2008-0535,CVE-2008-0536 Cisco服务控制引擎（SCE）设备提供高性能的高级应用层带宽优化、状态应用检查、基于会话的分类和网络通讯控制等功能。 SSH登录行为漏洞 在SSH登录行为期间可能触发影响SCE SSH服务器的漏洞，导致系统不稳定或SCE重载。如果在积极间隔期间调用了特定的SSH进程的话，就会导致临时的资源不可用。 这个漏洞在Cisco Bug ID中记录为CSCsi68582，所分配的CVE ID为CVE-2008-0534。 SSH登录行为导致非法输入/输出操...

Code injection

The SSH server in 1 Cisco Service Control Engine SCE before 3.1.6, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service device restart or daemon outage via a high rate of login attempts, aka Bug ID CSCsi68582...

CVE-2008-0535

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE before 3.1.6, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service device instability via "SSH credentials that attempt to change the authentication method," aka Bug ID...

CVE-2008-0534

The SSH server in 1 Cisco Service Control Engine SCE before 3.1.6, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service device restart or daemon outage via a high rate of login attempts, aka Bug ID CSCsi68582...

CVE-2008-0535

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE before 3.1.6, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service device instability via "SSH credentials that attempt to change the authentication method," aka Bug ID...

CVE-2008-0536

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service management interface outage via SSH traffic that occurs during management...

CVE-2008-0534

Summary of CVE-2008-0534 : The SSH server in Cisco Service Control Engine (SCE) prior to 3.1.6 and Icon Labs Iconfidant SSH prior to 2.3.8 is affected. The vulnerability allows remote attackers to cause a denial of service (device restart or daemon outage) by issuing a high rate of login attempts...