CVE-2012-2536

Cross-site scripting XSS vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."...

MS12-062: Vulnerability in System Center Configuration Manager could allow elevation of privilege: September 11, 2012

Resolves a vulnerability in Microsoft System Center Configuration Manager that could allow elevation of privilege if a user visits an affected website by way of a specially crafted URL.INTRODUCTIONMicrosoft has released security bulletin MS12-062. To view the complete security bulletin, go to one...

MS12-062: Vulnerability in System Center Configuration Manager Could Allow Elevation of Privilege (2741528)

The version of Microsoft System Center Configuration Manager, formerly known as Systems Management Server, installed on the remote host is potentially affected by a reflected cross-site scripting vulnerability. By tricking a user into clicking a specially crafted link, an attacker could gain...

Microsoft SMS / SCCM Installed (Windows)

Microsoft System Center Configuration Manager SCCM, formerly known as Systems Management Server SMS, a systems management application is installed on the remote Windows host. C Tenable, Inc. include"compat.inc"; if description scriptid62028; scriptversion"1.11";...

Veeam Management Pack for Microsoft System Center "Failed to Login" or "Cannot Complete Login" troubleshooting

Purpose The following errors occur: Login failed or Cannot complete login You may see the following event in the Veeam Management Pack for Microsoft System Center logs or receive a similar notification: ERROR IMon Quering IP or VC Name failed: Veeam.LicenseServer.LsException: Soap login to 'IP or...

Symantec Alert Management System AMSSendAlertAck Buffer Overflow

Added: 12/01/2011 CVE: CVE-2010-0110 BID: 45936 OSVDB: 72623 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. It includes an Intel Alert Handler service hndlrsvc.exe. This service handles messages forwarded to it by the Alert Originator Manager...

Symantec System Center Alert Management System (xfr.exe) Arbitrary Command Execution

$Id: amsxfr.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Symantec System Alert Management System (xfr.exe) Command Execution

Exploit for windows platform in category remote exploits $Id: amsxfr.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing an...

Symantec System Center Alert Management System (xfr.exe) Arbitrary Command Execution

Symantec System Center Alert Management System is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewo...

Symantec System Center Alert Management System - 'hndlrsvc.exe' Arbitrary Command Execution (Metasploit)

$Id: amshndlrsvc.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft System Center Configuration Manager Client Installed

The Microsoft System Center Configuration Manager client, a management system client, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid55532; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate",...

Microsoft Forefront Endpoint Protection / System Center Endpoint Protection / Anti-malware Client Detection and Status

Microsoft Forefront Endpoint Protection, or another antimalware product from Microsoft, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. C Tenable Network Security, Inc...

Symantec Alert Management System pagehndl.dll Stack Buffer Overflow (CVE-2010-0110)

Symantec Alert management System 2 AMS2 is a package used by various Symantec solutions such as System Center, AntiVirus Server, and AntiVirus Central Quarantine Server. AMS2 starts multiple services on the system that run with System account privileges, by default. A stack buffer overflow...

Symantec Alert Management System PIN number buffer overflow

Added: 02/03/2011 CVE: CVE-2010-0110 BID: 45936 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. It includes an Intel Alert Handler service hndlrsvc.exe. This service handles messages forwarded to it by the Alert Originator Manager, which listens on po...

Symantec Alert Management System PIN number buffer overflow

Added: 02/03/2011 CVE: CVE-2010-0110 BID: 45936 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. It includes an Intel Alert Handler service hndlrsvc.exe. This service handles messages forwarded to it by the Alert Originator Manager, which listens on po...

Microsoft System Center Configuration Manager Management Point Detection

The remote service is a Management Point for a Microsoft System Center Configuration Manager server. It is used by client agents to communicate with the Configuration Manager. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51836; scriptversion"1.9";...

CVE-2011-0688

Intel Alert Management System aka AMS or AMS2, as used in Symantec Antivirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discover...

Stack overflow

Multiple stack-based buffer overflows in Intel Alert Management System aka AMS or AMS2, as used in Symantec AntiVirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via 1 ...

Code injection

HDNLRSVC.EXE in the Intel Alert Handler service aka Symantec Intel Handler service in Intel Alert Management System aka AMS or AMS2, as used in Symantec AntiVirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows...

Information disclosure

Intel Alert Management System aka AMS or AMS2, as used in Symantec Antivirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discover...