Schneider Electric Floating License Manager Vulnerability

OVERVIEW Schneider Electric had become aware of an “unquoted service path” vulnerability in the Schneider Electric Floating License Manager, produced a patchSchneider Electric Security Notification SEVD 2014-015-01v3,...

Privacyware Privatefirewall 7.0 - Unquoted Service Path Privilege Escalation

Privacyware Privatefirewall 7.0 - Unquoted Service Path Privilege Escalation Privacyware Privatefirewall 7.0 Unquoted Service Path Privilege Escalation Vendor: PWI, Inc. Product web page: http://www.privacyware.com Affected version: 7.0.30.3 Summary: Privatefirewall multi-layered endpoint securit...

Privacyware Privatefirewall 7.0 - Unquoted Service Path Privilege Escalation

Privacyware Privatefirewall 7.0 Unquoted Service Path Privilege Escalation Vendor: PWI, Inc. Product web page: http://www.privacyware.com Affected version: 7.0.30.3 Summary: Privatefirewall multi-layered endpoint security software protects 32 and 64 bit Windows desktops and servers from malware a...

Privacyware Privatefirewall 7.0 Unquoted Service Path Privilege Escalation

Summary Privatefirewall multi-layered endpoint security software protects 32 and 64 bit Windows desktops and servers from malware and unauthorized use. Personal firewall, packet inspection, URL filtering, anti-logger, process monitor, and application/system behavior modeling and anomaly detection...

Privacyware Privatefirewall 7.0 Privilege Escalation

Privacyware Privatefirewall 7.0 Unquoted Service Path Privilege Escalation Vendor: PWI, Inc. Product web page: http://www.privacyware.com Affected version: 7.0.30.3 Summary: Privatefirewall multi-layered endpoint security software protects 32 and 64 bit Windows desktops and servers from malware a...

OpenVPN Private Tunnel Core Service - Unquoted Service Path Elevation Of Privilege

No description provided by source. OpenVPN Private Tunnel Core Service Unquoted Service Path Elevation Of Privilege Vendor: OpenVPN Technologies, Inc Product web page: http://www.openvpn.net Affected version: 2.1.28.0 PrivateTunnel 2.3.8 Summary: Private Tunnel is a new approach to true Internet...

OpenVPN Private Tunnel Core Service - Unquoted Service Path Privilege Escalation

OpenVPN Private Tunnel Core Service - Unquoted Service Path Privilege Escalation OpenVPN Private Tunnel Core Service Unquoted Service Path Elevation Of Privilege Vendor: OpenVPN Technologies, Inc Product web page: http://www.openvpn.net Affected version: 2.1.28.0 PrivateTunnel 2.3.8 Summary:...

OpenVPN Private Tunnel Core Service - Unquoted Service Path Privilege Escalation

OpenVPN Private Tunnel Core Service Unquoted Service Path Elevation Of Privilege Vendor: OpenVPN Technologies, Inc Product web page: http://www.openvpn.net Affected version: 2.1.28.0 PrivateTunnel 2.3.8 Summary: Private Tunnel is a new approach to true Internet security creating a Virtual Private...

OpenVPN Private Tunnel Core Service Unquoted Service Path Elevation Of Privilege

Summary Private Tunnel is a new approach to true Internet security creating a Virtual Private Tunnel VPT or Virtual Private Network VPN that encrypts, privatizes, and protects your Internet traffic. Description Private Tunnel application suffers from an unquoted search path issue impacting the Co...

OpenVPN Private Tunnel Privilege Escalation

OpenVPN Private Tunnel Core Service Unquoted Service Path Elevation Of Privilege Vendor: OpenVPN Technologies, Inc Product web page: http://www.openvpn.net Affected version: 2.1.28.0 PrivateTunnel 2.3.8 Summary: Private Tunnel is a new approach to true Internet security creating a Virtual Private...

Schneider Electric Patches SCADA, ICS Security Vulnerabilities

The Industrial Control Systems Cyber Emergency Response Team ICS-CERT last week issued advisories warning of serious vulnerabilities in Schneider Electric SCADA gear. Schneider Electric is a supplier of energy management control products that are used in a number of critical industries in North...

CVE-2013-0111

daemonu.exe aka the NVIDIA Update Service Daemon, as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " double quote characters in the service path, which allows local users to gain privileges via a Trojan horse program...

CVE-2013-0110

nvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service, as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " double quote characters in the service path, which allows local users to gain privileges via a Trojan horse program...

CVE-2013-0110

nvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service, as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " double quote characters in the service path, which allows local users to gain privileges via a Trojan horse program...

CVE-2013-0110

nvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service, as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " double quote characters in the service path, which allows local users to gain privileges via a Trojan horse program...

CVE-2013-0513

IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " double quote characters in the service path, which allows local users to gain privileges via a Trojan horse program, related to an "Unquoted Service Path...

CVE-2013-0513

IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " double quote characters in the service path, which allows local users to gain privileges via a Trojan horse program, related to an "Unquoted Service Path...

CVE-2013-0513: Undefined Security Weakness

IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " double quote characters in the service path, which allows local users to gain privileges via a Trojan horse program, related to an "Unquoted Service Path...

Microsoft Windows Unquoted Service Path Enumeration

The remote Windows host has at least one service installed that uses an unquoted service path, which contains at least one whitespace. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service. Note that this is a generic test that will flag...

Windows Unquoted Service Path Privilege Escalation

This module exploits a logic flaw due to how the lpApplicationName parameter is handled. When the lpApplicationName contains a space, the file name is ambiguous. Take this file path as example: C:\program files\hello.exe; The Windows API will try to interpret this as two possible paths:...