NetSarang多款产品 安全漏洞

NetSarang Xshell and others are products of NetSarang, Inc. of the U.S.A. NetSarang Xshell is NetSarang Xmanager is a powerful and convenient PC X server software package.NetSarang XLPD is a remote printing tool. A security vulnerability exists in several NetSarang products that stems from a...

CVE-2017-20203: Embedded Malicious Code

NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT...

EUVD-2006-0156

Malware in sbrugna...

EUVD-2022-32451

Malicious code in bioql PyPI...

CVE-2022-27965

Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-33035

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...

NetSarang XLPD Elevation of Privilege Vulnerability

NetSarang XLPD is a remote printing tool from NetSarang, Inc. It is used to manage an organization's print jobs. An elevation of privilege vulnerability exists in NetSarang XLPD v7.0.0094 and prior versions, which stems from an application containing an un-referenced service path. An attacker can...

CVE-2022-33035

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...

CVE-2022-33035

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...

Design/Logic Flaw

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...

CVE-2022-33035

CVE-2022-33035 affects NetSarang XLPD v7.0.0094 and earlier. The root cause is an unquoted service path that can be exploited by a local attacker to start a process with elevated privileges, resulting in local privilege escalation. Multiple sources in the connected set corroborate the same descri...

CVE-2022-33035

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...

CVE-2022-33035: Uncontrolled Search Path Element

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...

PT-2022-21660

Name of the Vulnerable Software and Affected Versions XLPD versions 7.0.0094 and below Description The issue allows local users to launch processes with elevated privileges due to an unquoted service path vulnerability. Recommendations For XLPD versions 7.0.0094 and below, at the moment, there is...

NetSarang XLPD 代码问题漏洞

NetSarang XLPD is a remote printing tool from NetSarang, Inc. It is used to manage an organization's print jobs. An elevation of privilege vulnerability exists in NetSarang XLPD v7.0.0094 and prior versions, which stems from an application containing an un-referenced service path. An attacker can...

CVE-2022-27965

Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-27965

Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-27965

Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...

Design/Logic Flaw

Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-27965

Summary: CVE-2022-27965 affects NetSarang Xlpd, ≤ v7.0.0094. The issue is described as a binary hijack that enables arbitrary code execution when processing a crafted .exe file. The connected records confirm the affected product/version and the basic impact (arbitrary code execution) but do not p...