14364 matches found
Zabbix Agent net.tcp.listen Command Injection
This module exploits a metacharacter injection vulnerability in the FreeBSD and Solaris versions of the Zabbix agent. This flaw can only be exploited if the attacker can hijack the IP address of an authorized server as defined in the configuration file. This module requires Metasploit:...
CVE-2009-4314
Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking AMGH is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device...
Design/Logic Flaw
Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking AMGH is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device...
CVE-2009-4314
CVE-2009-4314 affects Sun Ray Server Software 4.1 on Solaris 10. When Automatic Multi-Group Hotdesking (AMGH) is enabled, a logout action results in the user being immediately logged back in, enabling physical access by someone at an unattended DTU device to gain a session. Root cause is the logo...
CVE-2009-4314
Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking AMGH is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device...
Zabbix Agent < 1.6.7 Remote Bypass Vulnerability
Exploit for unknown platform in category web applications ================================================ Zabbix Agent Date: Sun, 13 Dec 2009 16:28:30 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network service...
Solaris 10 (x86) : 137148-08 (deprecated)
SunOS 5.10x86: libexpat patch. Date this patch was last updated by Sun : Oct/17/16 This plugin has been deprecated and either replaced with individual 137148 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...
HP-UX PHSS_36588 : s700_800 11.X OV DP6.00 PA-RISC patch - CS packet
s700800 11.X OV DP6.00 PA-RISC patch - CS packet : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerabilities have been identified with HP OpenView Storage Data Protector running on HP-UX, Windows, Linux and Solaris. These vulnerabilities could be exploit...
Solaris 10 (sparc) : 137147-08 (deprecated)
SunOS 5.10: libexpat patch. Date this patch was last updated by Sun : Oct/17/16 This plugin has been deprecated and either replaced with individual 137147 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...
Zabbix Agent 1.6.7 - Remote Bypass
Zabbix Agent 1.6.7 - Remote Bypass Zabbix Agent : Bypass of EnableRemoteCommands=0 From: Nicob Date: Sun, 13 Dec 2009 16:28:30 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network services, servers, and other...
Zabbix Agent < 1.6.7 - Remote Bypass
Zabbix Agent : Bypass of EnableRemoteCommands=0 From: Nicob Date: Sun, 13 Dec 2009 16:28:30 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network services, servers, and other network hardware." Zabbix Agent : Bypa...
[security bulletin] HPSBMA02483 SSRT090257 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01950877 Version: 1 HPSBMA02483 SSRT090257 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...
Solaris 10 (sparc) : 142900-15
SunOS 5.10: kernel patch. Date this patch was last updated by Sun : Jul/26/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
Sun Solaris AnswerBook2 Multiple Cross-Site Scripting Vulnerabilities
Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities. These issues arise due to insufficient sanitization of user-supplied data facilitating execution of arbitrary HTML and script code in a user's browser. The following specific issues were identified: It is...
Sun Solaris AnswerBook2 <= 1.4.4 Multiple XSS Vulnerabilities - Active Check
Sun Solaris AnswerBook2 is prone to multiple cross-site scripting XSS vulnerabilities. These issues arise due to insufficient sanitization of user-supplied data facilitating execution of arbitrary HTML and script code in a user SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions migh...
Solaris 10 (x86) : 142901-15
SunOS 5.10x86: kernel patch. Date this patch was last updated by Sun : Jul/26/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...
Code injection
The U.S. Defense Information Systems Agency DISA Security Readiness Review SRR script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to 1 java, 2 openssl, 3 php, 4 snort, 5 tshark, 6 vncserver, or 7 wireshark, which allows local users to gain...
CVE-2009-4211
The U.S. Defense Information Systems Agency DISA Security Readiness Review SRR script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to 1 java, 2 openssl, 3 php, 4 snort, 5 tshark, 6 vncserver, or 7 wireshark, which allows local users to gain...
CVE-2009-4211
CVE-2009-4211 arises from the DISA UNIX Security Readiness Review (SRR) scripts for Solaris x86, where SRR’s find(-exec) logic executes programs in root context if files are named one of: java, openssl, php, snort, tshark, vncserver, or wireshark. This enables a local attacker with filesystem acc...
CVE-2009-4211
The U.S. Defense Information Systems Agency DISA Security Readiness Review SRR script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to 1 java, 2 openssl, 3 php, 4 snort, 5 tshark, 6 vncserver, or 7 wireshark, which allows local users to gain...