Kingsoft Antivirus 'kavfm.sys' Buffer overflow Vulnerability

Kingsoft Antivirus is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft LSASS ADAM/ADLDS Privilege Escalation Vulnerability

Description Microsoft Windows Local Security Authority Subsystem Service LSASS is prone to a privilege-escalation vulnerability. This issue occurs in Active Directory, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service ADLDS. An attacker can exploit this...

Microsoft Windows Print Spooler Service Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the Print Spooler Service. A remote attacker can exploit this issue to execute code with SYSTEM-level privileges. Local attackers able to submit print jobs can exploit this issue to gain elevated...

Microsoft Windows CSRSS Memory Allocation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. This issue affects...

HP OpenView Network Node Manager 'execvp_nc()' Code Execution Vulnerability

HP OpenView Network Node Manager OV NNM is prone to a remote code-execution vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Microsoft Windows - Tracing Registry Key ACL Privilege Escalation

Microsoft Windows - Tracing Registry Key ACL Privilege Escalation source: https://www.securityfocus.com/bid/42269/info Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful...

Microsoft Windows Tracing Registry Key ACL Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...

Microsoft Windows Tracing Memory Corruption Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may cause a...

Microsoft Windows - Tracing Registry Key ACL Privilege Escalation

source: https://www.securityfocus.com/bid/42269/info Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computer...

Foofus.net Security Advisory: Symantec AMS Intel Alert Handler service Design Flaw

================================================== Foofus.net Security Advisory: foofus-20100726 ================================================== Title: Symantec Antivirus Corporate Edition AMS Intel Alert Handler Version: 10.1.8.8000 and earlier Vendor: Symantec Release Date: 26.07.2010 Issue...

CA BrightStor ARCserve Backup Tape Engine RPC ReserveGroup Buffer Overflow (CVE-2006-6917)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

Symantec AMS Intel Alert Handler Command Execution

// Remote command execution at System level without authentication // Advisory:https://www.foofus.net/?pageid=149 // Exploit Title: Symantec AMS Intel Alert Handler service Design Flaw // Date: 07/28/10 // Author: Spider // Software Link: http://www.foofus.net/spider/code/ams-cmd.cpp.txt // Teste...

Symantec Ams Intel Alert Handler Service - Design Flaw

Symantec Ams Intel Alert Handler Service - Design Flaw // Remote command execution at System level without authentication // Advisory:https://www.foofus.net/?pageid=149 // Exploit Title: Symantec AMS Intel Alert Handler service Design Flaw // Date: 07/28/10 // Author: Spider // Software Link:...

Ipswitch IMail Server < 11.02 multiple Vulnerabilities

Ipswitch IMail Server Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2 or any later version, as published by the Free Software Foundation. This program is...

Alt-N SecurityGateway 1.0.1 - 'Username' Remote Buffer Overflow (Metasploit)

$Id: altnsecuritygateway.rb 9719 2010-07-07 17:38:59Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

RSA Authentication Agent for Web Buffer Overflow (CVE-2005-1471)

The RSA Authentication Agent for Web for Internet Information Services IIS provides protection for selected web pages by securing them with the RSA SecurID authentication mechanism. When a user attempts to access a resource that is secured with the RSA SecurID, the RSA Agent authenticates the use...

Microsoft SQL Server - Hello Overflow (MS02-056) (Metasploit)

$Id: ms02056hello.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Windows Media Services Remote Code Execution Vulnerability (980858)

This host is missing a critical security update according to Microsoft Bulletin MS10-025. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability

ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-051 April 5, 2010 -- CVE ID: CVE-2010-0094 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime --...

Deserialization of untrusted data

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March...