Out-of-bounds

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...

HP OpenView产品Trace服务RPC请求拒绝服务漏洞

BUGTRAQ ID: 31860 CVECAN ID: CVE-2007-4349 HP OpenView是惠普公司开发的系列网络管理软件。 HP OpenView产品的Trace服务在TCP 5051或5053端口上所暴露的RPC服务没有要求认证，如果向该端口发送了特定序列的RPC请求的话，就可能错误的引用对象，导致引用所分配缓冲区范围之外的内存。成功利用这个漏洞只能导致拒绝服务的情况。 HP OpenView Report 3.70 HP Performance Agent 4.70 HP --...

CVE-2008-4693

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

Design/Logic Flaw

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

CVE-2008-4693

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

Black the world God soldiers-Cain-the-vulnerability warning-the black bar safety net

You can right-click for playback. Below we to carry out Arp spoofing, click on the following“ARP”tab ! 1 4） On the right side of the blank at a click, and then point above the“plus sign”, the emergence of the“new ARP spoofing”dialog box, in the left of the selected Gateway, the right choice is...

Ruby multiple insufficient safe mode restrictions

Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly restrict access to critical variables and methods at various safe levels, which allows context-dependent attackers to bypass intended access restrictions via 1 untracevar, 2...

JP1/Cm2/Network Node Manager Arbitrary Code Execution Vulnerability

Overview Shared Trace Service in JP1/Cm2/Network Node Manager NNM is vulnerable to arbitrary code execution. Impact An attacker could execute arbitrary code. Solution Please refer to the 'Vendor Information' section for the vendor recommended workaround...

CVE-2005-4874

The vulnerability CVE-2005-4874 affects the XMLHttpRequest object in Mozilla 1.7.8, where the HTTP TRACE method can be abused to disclose credentials. Specifically, an attacker can obtain (1) proxy authentication passwords via a request with Max-Forwards: 0 and (2) arbitrary local passwords on th...

CVE-2005-4874

The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain 1 proxy authentication passwords via a request with a "Max-Forwards: 0" header or 2 arbitrary local passwords on the web server that hosts this object...

ClassCastException reported when stopping JIRA

When stopping tomcat wich hosts only Jira, there is always such stack trace in tomcat logs: code 2008-02-18 19:25:32,767: ERROR Thread-33 - org.apache.catalina.core.ContainerBase.Catalina.localhost./jira.release - ApplicationFilterConfig.doAsPrivilege java.lang.ClassCastException:...

ClassCastException reported when stopping JIRA

When stopping tomcat wich hosts only Jira, there is always such stack trace in tomcat logs: code 2008-02-18 19:25:32,767: ERROR Thread-33 - org.apache.catalina.core.ContainerBase.Catalina.localhost./jira.release - ApplicationFilterConfig.doAsPrivilege java.lang.ClassCastException:...

wireshark SSL and OS/400 trace flaws

Multiple buffer overflows in Wireshark formerly Ethereal 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 the SSL dissector or 2 the iSeries OS/400 Communication trace file parser...

wireshark SSL and OS/400 trace flaws

Multiple buffer overflows in Wireshark formerly Ethereal 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 the SSL dissector or 2 the iSeries OS/400 Communication trace file parser...

CVE-2008-0368

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

Information disclosure

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

CVE-2008-0368

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

HP-UX PHSS_37399 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)

s700800 11.X OV OVO8.X Core Agt HPUX 11 IA A.08.17.3 : A potential security vulnerability has been identified in HP OpenView Operations OVO Agents running Shared Trace Service. The vulnerability could be remotely exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security,...

HP-UX PHSS_37335 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)

s700800 11.X OV OVO8.X Core Agt Windows A.08.17.3 : A potential security vulnerability has been identified in HP OpenView Operations OVO Agents running Shared Trace Service. The vulnerability could be remotely exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, In...

HP-UX PHSS_37398 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)

s700800 11.X OV OVO8.X Core Agt Solaris A.08.17.3 : A potential security vulnerability has been identified in HP OpenView Operations OVO Agents running Shared Trace Service. The vulnerability could be remotely exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, In...