2790 matches found
CVE-2010-3079
kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which allows local users to cause a denial of service NULL pointer dereference and outage of all function tracing files via an...
IBM WebSphere Application Server 6.1 < 6.1.0.33 Multiple Vulnerabilities
IBM WebSphere Application Server 6.1 before Fix Pack 33 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - An unspecified cross-site scripting vulnerability exists in the Administration Console. PM09250, PM11778 - An unspecified error exis...
Microsoft Windows Tracing Feature Privilege Elevation Vulnerabilities (982799)
This host is missing a critical security update according to Microsoft Bulletin MS10-059. OpenVAS Vulnerability Test $Id: secpodms10-059.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows Tracing Feature Privilege Elevation Vulnerabilities 982799 Authors: Antu Sanadi Copyright: Copyright c 20...
Microsoft Windows Tracing Feature Privilege Elevation Vulnerabilities (982799)
This host is missing a critical security update according to Microsoft Bulletin MS10-059. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Tracing功能注册表ACL不安全权限漏洞（MS10-059）
BUGTRAQ ID: 42269 CVECAN ID: CVE-2010-2554 Microsoft Windows是微软发布的非常流行的操作系统。 一些Windows应用中使用了Tracing功能记录调试信息。该功能不是默认启用的，如果要启用必须编辑 HKEYLOCALMACHINE\SOFTWARE\Microsoft\Tracing键下的注册表值。使用了这个Tracing功能的 Windows进程会持续监控相关子键的变化，一旦注册表值发生了变化就会立即读取该值。其中的一个注册表值为FileDirectory，包含有 Windows目录名。在Local...
CVE-2010-2555
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service memory corruption via vectors...
Security feature bypass
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL...
Memory corruption
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service memory corruption via vectors...
CVE-2010-2555
CVE-2010-2555 relates to the Tracing Feature for Services in Windows (Vista SP1/SP2, Server 2008 SP2+R2, Windows 7). The vulnerability stems from how memory is allocated/strings are processed when reading registry data, leading to memory corruption and potential privilege escalation. Microsoft’s ...
CVE-2010-2554
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL...
CVE-2010-2554
CVE-2010-2554 affects the Tracing Feature for Services in Windows Vista SP1/ SP2, Windows Server 2008 SP2/R2, and Windows 7. The vulnerability arises from incorrect ACLs on registry keys used by the tracing feature, enabling local users to gain elevated privileges via a named pipe and impersonati...
Microsoft Windows Tracing Feature for Services security vulnerabilities
Weak permissions on registry keys, buffer overflow on registry keys reading...
PT-2010-4102 · Microsoft · Windows Vista +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 and R2 Microsoft Windows 7 affected versions not specified Description: The issue arises from incorrect access control lists ACLs on the...
Microsoft Security Bulletin MS10-059 - Important Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege (982799)
Microsoft Security Bulletin MS10-059 - Important Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege 982799 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed vulnerability and one...
PT-2010-4103 · Microsoft · Windows Vista +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 and R2 Microsoft Windows 7 affected versions not specified Description: The issue arises from the Tracing Feature for Services not proper...
MS10-059: Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege (982799)
The version of Tracing Feature for Services on the remote host has the following vulnerabilities : - Windows places incorrect ACLs on registry keys, which could allow an attacker to execute code with elevated privileges. CVE-2010-2554 - Memory is allocated in an unspecified, unsafe manner when...
CVE-2010-1651
IBM WebSphere Application Server WAS 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing aka full trace logging for SIP are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by readi...
Design/Logic Flaw
IBM WebSphere Application Server WAS 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing aka full trace logging for SIP are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by readi...
CVE-2010-1651
IBM WebSphere Application Server WAS 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing aka full trace logging for SIP are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by readi...
Sun Java System Application Server Cross Site Tracing Vulnerability
This host has Sun Java System Application Server running which is prone to Cross Site Tracing vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavaappservxstvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ Sun Java System Application Server Cross Site Tracing Vulnerability Authors: Veerendra G...