CVE-2009-0624

Unspecified vulnerability in the SNMPv2c implementation in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.3 and Cisco ACE 4710 Application Control Engine Appliance before A32.1 allows remote attackers to cause a denial of service device reload v...

CVE-2009-0624

CVE-2009-0624 affects Cisco ACE 4710 Appliance and Cisco ACE Module for Catalyst 6500/7600, with vulnerability in SNMP handling. A crafted SNMP packet (SNMPv1 noted, SNMPv2c must be enabled to process) can cause the device to reload, resulting in a DoS. Affected versions are prior to A3(2.1) for ...

CVE-2009-0620

Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.1 uses default 1 usernames and 2 passwords for a the administrator and b web management, which makes it easier for remote attackers to perform configuration changes or obtain operating-system access...

Cisco Security Advisory: Cisco ACE Application Control Engine Device Manager and Application Networking Manager Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco ACE Application Control Engine Device Manager and Application Networking Manager Vulnerabilities Advisory ID: cisco-sa-20090225-anm http://www.cisco.com/warp/public/707/cisco-sa-20090225-anm.shtml Revision 1.0 For Public...

Cisco应用联网管理器和应用控制引擎多个安全漏洞

BUGTRAQ ID: 33903 CVECAN ID: CVE-2009-0615,CVE-2009-0616,CVE-2009-0617,CVE-2009-0618 Cisco应用联网管理器（ANM）是用于管理Cisco应用控制引擎（ACE）模块或设备的网络管理应用，安装在Red Hat Enterprise Linux操作系统的客户服务器上；ACE设备管理器位于ACE设备的闪存中，提供了用于配置和管理单个ACE设备的基于浏览器的接口。 ANM中存在多个漏洞，ACE设备管理器产品中存在一个漏洞，以下是本文所述每个漏洞的详细信息。 无效目录权限...

Cisco Security Advisory: Multiple Vulnerabilities in the Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in the Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine Document ID: 109450 Advisory ID: cisco-sa-20090225-ace...

Cisco ACE应用控制引擎模块和Cisco ACE 4710应用控制引擎多个安全漏洞

BUGTRAQ ID: 33900 CVECAN ID: CVE-2009-0620,CVE-2009-0621,CVE-2009-0622,CVE-2009-0623,CVE-2009-0624,CVE-2009-0625 Cisco ACE 4710应用控制引擎设备和Cisco ACE应用控制引擎模块是数据中心的负载均衡和应用交付解决方案。 默认用户名和口令 +------------------------------ Cisco ACE 4710应用控制引擎设备的A18a之前软件版本使用默认的管理员、Web管理和设备管理帐号凭据；类似的，Cisco...

Cisco ACE multiple security vulneraiblities

Privilege escalation, default accounts, DoS...

Cisco ACE Application Control Engine Device Manager and Application Networking Manager Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Multiple Vulnerabilities in the Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

KLA10364 ACE vulnerability in UltraVNC & TightVNC

Integer signing errors were found in UltraVNC & TightVNC. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed message. Original advisories - Related products UltraVNC...

KLA11371 ACE vulnerability in TightVNC

Integer signing errors were found in TightVNC. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed message. Original advisories - Exploitation Public exploits exist f...

KLA10358 ACE vulnerability in multiple products

Buffer overflows were found in multiple products. By exploiting these vulnerabilities malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed tabs. Original advisories - Related products TSC2-Help-Desk ComponentOne-Studio-Enterprise-2005...

KLA10372 ACE vulnerabilities in Trillian

Multiple critical vulnerabilities have been found in Trillian. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities 1. A buffer overflow and double free can be exploited remotely via a specially designed XML; 2. Buffer overflow c...

KLA10371 ACE vulnerability in Trend Micro ServerProtect

Buffer overflows were found in Trend Micro ServerProtect. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products Trend-Micro-ServerProtect-for-Windows-NetWare CVE list...

CVE-2008-4915

CVE-2008-4915 documents a privilege-escalation flaw in CPU hardware emulation across VMware products (Workstation, Player, Server, ESX/ESXi, and related variants) when running 32/64-bit guest OS. The trap-flag handling flaw allows an authenticated guest OS user to gain privileges on the guest OS....

VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0018 Synopsis: VMware Hosted products and patches for ESX and ESXi resolve two security issues Issue date: 2008-11-06 Updated on...

VMware Tools Local Privilege Escalation Vulnerability (VMSA-2008-0009) - Windows

VMWare products are prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMCI/HGFS VmWare Code Execution Vulnerability (Windows)

The host is installed with VMWare products that are vulnerable to arbitrary code execution. OpenVAS Vulnerability Test $Id: gbvmwareprdtsmultvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMCI/HGFS VmWare Code Execution Vulnerability Windows Authors: Chandan S Copyright: Copyright c 2008...

CVE-2008-3698

CVE-2008-3698 is a local privilege-escalation in the host OS via VMware OpenProcess issue. Affected host components include VMware Workstation (5.x, 6.x), VMware Server, VMware Player (1.x/2.x), VMware ACE (1.x/2.x). Exploitation would allow local users to run arbitrary code with elevated host pr...