ZDI-10-182: IBM TSM FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerabilities

ZDI-10-182: IBM TSM FastBack Server FXCLIOraBRExecCommand Remote Code Execution Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-10-182 September 29, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack --...

ZDI-10-180: IBM TSM FastBack Server _SendToLog Remote Code Execution Vulnerability

ZDI-10-180: IBM TSM FastBack Server SendToLog Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-180 September 29, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack -- TippingPointTM...

ZDI-10-187: IBM TSM FastBack Server _DAS_ReadBlockReply Remote Denial of Service Vulnerability

ZDI-10-187: IBM TSM FastBack Server DASReadBlockReply Remote Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-187 September 29, 2010 -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack -- TippingPointTM IPS Customer Protection:...

ZDI-10-186: IBM TSM FastBack _CalcHashValueWithLength Remote Denial of Service Vulnerability

ZDI-10-186: IBM TSM FastBack CalcHashValueWithLength Remote Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-186 September 29, 2010 -- CVSS: 5, AV:N/AC:L/Au:N/C:N/I:N/A:P -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack --...

ZDI-10-183: IBM TSM FastBack Server FXCLI_checkIndexDBLocation Remote Code Execution Vulnerability

ZDI-10-183: IBM TSM FastBack Server FXCLIcheckIndexDBLocation Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-183 September 29, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack --...

Novell iManager <= 2.7.3.2 Arbitrary File Upload Vulnerability

Novell iManager is prone to an arbitrary file upload vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Trend Micro Internet Security Pro ActiveX extSetOwner() Code Execution

Exploit for windows platform in category remote exploits ====================================================================== Trend Micro Internet Security Pro ActiveX extSetOwner Code Execution ====================================================================== trendmicroextsetowner.rb Tren...

Trend Micro Internet Security Pro 2010 - ActiveX 'extSetOwner()' Remote Code Execution (Metasploit)

$Id: trendmicroextsetowner.rb 10538 2010-10-04 04:26:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Oracle Secure Backup Administration property_box.php Other Variable Command Injection

Added: 09/29/2010 CVE: CVE-2010-0899 BID: 41616 OSVDB: 66333 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability in the Oracle Secure Backup web interface allows remote attackers to execute arbitrary...

Microsoft PowerPoint Viewer - TextBytesAtom Stack Buffer Overflow (MS10-004) (Metasploit)

$Id: ms10004textbytesatom.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Missed 2009 Published Article on Stuxnet-Type Attack

A security flaw affecting Microsoft’s Windows operating system that was exploited by the Stuxnet worm was publicly disclosed more than a year before the worm appeared, according to a researcher at Symantec Corp. On September 17, Symantec researcher Liam O Murchu noted on that company’s Connect bl...

Week in Review: Web Insecurity and Fixes for Stuxnet

Web insecurity was in the news this week, with a major flaw in the security of ASP.NET and some sobering statistics on Web site infections. When your bank account gets hacked – is it your fault? And, with a patch out for one of four ! zero day exploits used by Stuxnet, security experts wonder if...

ZDI-10-169: Novell Netware SSHD.NLM Remote Code Execution Vulnerability

ZDI-10-169: Novell Netware SSHD.NLM Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-169 September 1, 2010 -- CVSS: 9, AV:N/AC:L/Au:S/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell Netware -- Vulnerability Details: This vulnerability...

Adobe Warns of Flash Player Zero-Day Attack

The zero-day hacker attacks against Adobe’s software products are coming fast and furious. Less than a week after the discovery of a sophisticated malware attack against an unpatched security hole in Adobe Reader/Acrobat, the company has issued a new warning for in-the-wild attacks against a...

Microsoft Anti-Exploit Tool Protects Against Adobe Zero Day

Although Adobe doesn’t have a patch ready yet for the newly disclosed vulnerability in the company’s Reader application, Adobe and Microsoft security officials said that Microsoft’s recently released Enhanced Mitigation Environment Toolkit 2.0 can protect users against the exploit that is current...

Mozilla Foundation Security Advisory 2010-56

Mozilla Foundation Security Advisory 2010-56 Title: Dangling pointer vulnerability in nsTreeContentView Impact: Critical Announced: September 7, 2010 Reporter: regenrecht Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonkey...

Mozilla Foundation Security Advisory 2010-57

Mozilla Foundation Security Advisory 2010-57 Title: Crash and remote code execution in normalizeDocument Impact: Critical Announced: September 7, 2010 Reporter: regenrecht Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonke...

New Adobe PDF Zero-Day Flaw Under Attack

Adobe today sounded an alarm for a new zero-day flaw in its PDF Reader/Acrobat software, warning that hackers are actively exploiting the vulnerability in-the-wild. Details on the vulnerability are not yet public but the sudden warning from Adobe is a sure sign that rigged PDF documents are being...

Dangling pointer vulnerability in nsTreeContentView — Mozilla

Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that the implementation of XUL 's content view contains a dangling pointer vulnerability. One of the content view's methods for accessing the internal structure of the tree could be manipulated into removing a node pri...

Crash and remote code execution in normalizeDocument — Mozilla

Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that code used to normalize a document contained a logical flaw that could be leveraged to run arbitrary code. When the normalization code ran, a static count of the document's child nodes was used in the traversal, so...