CVE-2006-1379

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...

CVE-2006-1380

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite IMSS 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe...

CVE-2006-1381

Trend Micro OfficeScan 5.5 (and likely versions before 6.5) is affected by a privilege-escalation issue caused by insecure DACLs on critical files, enabling local users to gain SYSTEM privileges by modifying tmlisten.exe. The issue is documented across multiple sources (NVD, PT-2006-2390) with ex...

Microsoft Windows Web Client Buffer Overflow Vulnerability

Description Microsoft Windows Web Client is prone to a buffer overflow. Successful exploitation could allow arbitrary code execution with System privileges. Technologies Affected Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Itanium Microsoft...

Microsoft Windows Korean Input Method Editor vulnerability

Overview The Microsoft Windows Korean Input Method Editor IME contains a privilege escalation vulnerability. Description According to Microsoft: An IME is a program that allows computer users to enter complex characters and symbols, such as Japanese characters, using a standard keyboard. The...

CVE-2006-0577

Lexmark X1185 printer allows local users to gain SYSTEM privileges by navigating to the "Appearance" dialog and selecting the "Additional styles skins are available on the Lexmark web site" option, which launches a web browser that is running with SYSTEM privileges...

Code injection

Lexmark X1185 printer allows local users to gain SYSTEM privileges by navigating to the "Appearance" dialog and selecting the "Additional styles skins are available on the Lexmark web site" option, which launches a web browser that is running with SYSTEM privileges...

CVE-2006-0577

CVE-2006-0577 affects Lexmark X1185 printers. Local users can obtain SYSTEM privileges by opening the printer’s Appearance dialog and selecting the option that references additional skins on the Lexmark website, which launches a web browser running with SYSTEM rights. This is a local, privilege-e...

Re: High Risk Vulnerability in Lexmark Printer Sharing Service

Here is a lexmark related local Security issue... I never got anywhere with regard to disclosure... enjoy Lexmark skins code execution. Either LEXBCES.exe, LXBKPSWX.exe, LXBKJSWX.exe, or LEXPPS.exe allows interaction from the user while running as SYSTEM. This interaction can lead to CMD.exe...

High Risk Vulnerability in Lexmark Printer Sharing Service

Peter Winter-Smith of NGSSoftware has discovered a high risk vulnerability in the Lexmark Printer Sharing service which could allow a remote, unauthenticated attacker to execute arbitrary code on a Lexmark printer user's computer system with Local System privileges. There is no known official pat...

CVE-2006-0577

Lexmark X1185 printer allows local users to gain SYSTEM privileges by navigating to the "Appearance" dialog and selecting the "Additional styles skins are available on the Lexmark web site" option, which launches a web browser that is running with SYSTEM privileges...

CA iTechnology iGateway Service Content-Length Buffer Overflow

The remote host is using CA iTechnology iGateway service, a software component used in various products from CA. The version of the iGateway service installed on the remote host reportedly fails to sanitize Content-Length HTTP header values before using them to allocate heap memory. An attacker c...

[Full-disclosure] CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability

Title: CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability CA Vulnerability ID: 33778 CA Advisory Date: 2006-01-23 Discovered By: Erika Mendoza reported this issue to iDefense. Impact: Remote attacker can execute arbitrary code with SYSTEM privileges. Summary: The CA iGateway...

Peanut shell local privilege elevation vulnerability-vulnerability warning-the black bar safety net

Peanut shell local privilege escalation vulnerability by Sowhat Last updated: 2005.09.24 English: http://secway.org/advisory/AD20050720EN.txt English: http://secway.org/advisory/AD20050720CN.txt CVE:CAN-2 0 0 5-2 3 8 2 BID:1 4 3 3 0 Affected products: PeanutHull = 3.0.1.0 Review: Network domain...

AppServ appserv/main.php appserv_root Parameter Remote File Inclusion

The remote host appears to be running AppServ, a compilation of Apache, PHP, MySQL, and phpMyAdmin for Windows and Linux. The version of AppServ installed on the remote host fails to sanitize user-supplied input to the 'appservroot' parameter of the 'appserv/main.php' script before using it in a...

CVE-2005-3360

The CVE-2005-3360 issue affects Trend Micro PC-Cillin Internet Security 2005, version 12.00 build 1244 (and likely earlier builds). The vulnerability arises from insecure default ACLs installed with Trend Micro products, allowing local users to modify or move critical program files. This can enab...

CVE-2005-3360

The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses insecure default ACLs, which allows local users to cause a denial of service disabled service and gain system privileges by modifying or moving critical program files...

VERITAS NetBackup Volume Manager Daemon buffer overflow

Added: 12/04/2005 CVE: CVE-2005-3116 BID: 15353 OSVDB: 20674 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The Volume Manager Daemon VMD has an error in its shared library allowing for a buffer overflow. A specially crafted request sent to port...

CVE-2005-3886

Unspecified vulnerability in Cisco Security Agent CSA 4.5.0 and 4.5.1 agents, when running on Windows systems, allows local users to bypass protections and gain system privileges by executing certain local software...

CVE-2004-2554

Novell Client Firewall NCF 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges...