CVE-2008-2747: Exposure of Sensitive Information to an Unauthorized Actor

No-IP Dynamic Update Client DUC 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE\Vitalwerks\DUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the 1 TrayPassword, 2 Username, 3 Password, and 4 Hosts registry values...

CVE-2008-0525: Improper Link Resolution Before File Access

PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac LUM 6.2094 through 6.4102 and other products, allows local users to 1 truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and 2...

Detectoid for Windows Update Client supporting MSI Handler

This detectoid checks for the presence of the minimum version of the Windows Update Client that supports the MSI Handler...

Detectoid for WU Client supporting the MUv3 MSI Handler

This detectoid checks for the presence of the minimum version of the Windows Update Client that supports the MUv3 MSI Handler functionality...