(0Day) Novell File Reporter NFRAgent.exe VOL Tag Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Agent. Authentication is not required to exploit this vulnerability. The specific flaw exists within NFRAgent.exe which communicates with the Agent component over HTTPS on TCP...

ZDI-12-018 : Symantec PCAnywhere awhost32 Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-018 : Symantec PCAnywhere awhost32 Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-018 January 25, 2012 - -- CVE ID: CVE-2011-3478 - -- CVSS: 9.7, AV:N/AC:L/Au:N/C:C/I:C/A:P - -- Affected Vendors: Symantec...

Symantec PCAnywhere awhost32 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec PCAnywhere. Authentication is not required to exploit this vulnerability. The flaw exists within the awhost32 component which is used when handling incoming connections. This process liste...

Elevating Privileges Via Windows Installers

There’s an odd bit of behavior that some Windows systems will exhibit when certain kinds of installers are launched, automatically elevating the privileges of the installer process to system-level privileges. In theory, the issue shouldn’t be exploitable because at one point in the process the...

Citrix EdgeSight Load Tester Buffer Overflow

A stack overflow vulnerability exists in the Citrix EdgeSight Load Tester software installed on the remote host. By sending a specially crafted message to the server, a remote attacker can leverage this vulnerability to execute arbitrary code on the server as the SYSTEM account. Versions prior to...

Microsoft Windows CSRSS SrvWriteConsoleOutput Code Execution (MS11-056; CVE-2011-1284)

An elevation of privilege vulnerability has been reported in Windows CSRSS. Remote attackers can exploit this vulnerability to run arbitrary code in kernel mode. The vulnerability is due to an integer overflow condition that could enable an attacker to execute code in the context of the system...

Novell File Reporter Engine RECORD Element Tag Parsing Overflow (credentialed check)

The version of Novell File Reporter NFR Engine installed on the remote Windows host is earlier than 1.0.2.53. As such, it reportedly has a flaw in its handling of HTTP requests to the TCP port used to communicate with the NFR Agent, normally 3035. Specifically, the application fails to check the...

Novell File Reporter Engine RECORD Tag Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Engine. Authentication is not required to exploit this vulnerability. The specific flaw exists within NFREngine.exe which communicates with the Agent component over HTTPS on TC...

QUIK email(QuarkMail)remote command execution vulnerabilities and fixes-vulnerability warning-the black bar safety net

Vulnerability Description: The QUIK e-mail（QuarkMail Beijing Xiong Zhi weiye science and Technology Company launched the e-mail system, is widely used in various areas of email solutions, webmail section Using perl cgi to write, but 80sec in their system found a major security vulnerability leads...

Windows zero-day flaw bypasses UAC !

A new zero-day attack against Windows, capable of bypassing the User Access Control protections introduced in Windows Vista and designed to prevent malware from gaining administrative access without user authorisation, has been discovered in the wild. The proof-of-concept implementation of the...

Oracle Secure Backup Administration preauth Variable Command Injection (CVE-2010-0906)

Oracle Secure Backup is a backup solution allowing for centralized tape backup management. The server allowsfor single point of management of data present on network attached storage NAS devices and distributed hostswhich may have different operating systems. A command execution vulnerability...

MailEnable SMTP NTLM Authentication Buffer Overflow

A buffer overflow vulnerability exists in MailEnable server products. The flaw is caused by insufficient validation checks when processing the signature field of NTLM Type1 messages within the SMTP service. A remote unauthenticated attacker may successfully exploit this vulnerability to execute...

Symantec Veritas NetBackup Server bpcd Long Request Buffer Overflow (CVE-2006-6222)

There exists a buffer overflow vulnerability in Symantec VERITAS NetBackup Server. The flaw is caused by incorrect processing of specially crafted BPCD messages. A remote attacker may exploit this vulnerability to inject and execute arbitrary code on the vulnerable system within the security...

IBM Lotus Domino LDAP Server Invalid DN Message Buffer Overflow (CVE-2007-1739)

IBM Lotus Domino Server is a collaboration software that provides mail, messaging, calendaring and scheduling capabilities across multiple platforms. The product implements numerous services based on open standards, including LDAP, SMTP, IMAP, and POP3. There exist a buffer overflow vulnerability...

Atrium Software MERCUR IMAPD NTLMSSP Command Handling Memory Corruption (CVE-2007-1578)

The Internet Message Access Protocol IMAP specifies a method for the access and manipulation of electronic mail. The protocol permits the manipulation of mailboxes on a remote server and allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. The...

Oracle Secure Backup observiced.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Secure Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Oracle Secure Backup Services daemon observiced.exe listening on TCP port 10000 b...

RealNetworks Helix Server DESCRIBE Request Buffer Overflow (CVE-2006-6026)

Helix Server is a multi-media server that is designed to serve streaming and static audio and video content. Helix project, Helix Server being part of it, is intended as a largely free software/open source digital media framework that runs on numerous operating systems and processors including...

MailEnable POP3 Service PASS Command Buffer Overflow (CVE-2006-6605)

MailEnable is an email server suite for the Microsoft Windows platform. The product supports various email transfer protocols such as SMTP, POP3 and IMAP. The MailEnable protocol handlers are installed as individual services on the system, called Connectors. There exists a stack-based buffer...

Oracle Secure Backup Administration Server Multiple Command Injection Vulnerabilities

This vulnerability allows remote attackers to inject arbitrary commands on vulnerable installations of Oracle Secure Backup. User interaction is not required to exploit this vulnerability but an attacker must be authenticated. The specific flaw exists in the handling of various variables to the...

XX antivirus Avira when NTFS permissions vulnerability-vulnerability warning-the black bar safety net

ＸＸ and other mollusc in the processing of the NTFS partition to have special permissions when a file will avoid the check, or direct skip, cause any virus can escape the antivirus check. Currently known Kaspersky the memory of killing there is no such vulnerability, but the file scan will skip...