Arbitrary Code Execution Vulnerability in HiRDB Control Manager

Overview HiRDB Control Manager - Agent contains a vulnerability that could allow a remote attacker to execute arbitrary code when it receives an unexpected, invalid request. Impact A remote attacker could execute arbitrary code via an unexpected, invalid request. Solution Please refer to the...

Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution

The Trend Micro Control Manager install on the remote Windows host is missing Critical Patch 1422. As such, the included CasLogDirectInsert.aspx http handler reportedly has a vulnerability by which malicious XML and schema information can be used in queries in the backend database. Using a...

ZDI-11-234: Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability

ZDI-11-234: Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-234 July 11, 2011 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Trend Micro -- Affected Products: Trend Micro Control Manager -...

TrendMicro Control Manager security vulnerabilities

Integer overflow on TCP/20801 request handling. SQL injection...

ZDI-11-234: Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability

ZDI-11-234: Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-234 July 11, 2011 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Trend Micro -- Affected Products: Trend Micro Control Manager -...

TrendMicro Control Manager CASProcessor.exe BLOB Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within EnUtility.dll. A module called from CASProcessor.exe running on TCP port...

Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the CasLogDirectInsert.aspx...

Denial of Service (DoS) Vulnerability in JP1/ServerConductor/Control Manager

Overview A built-in database in JP1/ServerConductor/Control Manager contains a vulnerability that could cause a denial of service DoS condition due to the abnormal ending of the database process when receiving unexpected data. After the process abends, the service can be restarted by rebooting th...

Trend Micro Control Manager Chunked Overflow (CVE-2005-1929)

The Trend Micro Control Manager product is a centralized outbreak management console. It is meant to consolidate the coordination of outbreak security actions and the management of Trend Micro products and services. The product is a central command center for management of infections or...

Squid SNMP Parser ASN.1 Header Parsing Denial of Service (CVE-2004-0918)

Squid is a full featured, open source web proxy caching server. It supports proxying FTP, HTTP, SSL, DNS and has support for Simple Network Management Protocol SNMP. There is a vulnerability in the way Squid web proxy parses SNMP messages. An SNMP message with specially crafted ASN.1 length field...

iDefense Security Advisory 10.14.08: Microsoft Host Integration Server 2006 Command Execution Vulnerability

iDefense Security Advisory 10.14.08 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 14, 2008 I. BACKGROUND The Host Integration Server is an application suite that is used to communicate with IBM mainframe servers. One of the components of the suite is a remote management interface. Th...

CVE-2006-3261

Cross-site scripting XSS vulnerability in Trend Micro Control Manager TMCM 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the login page, which is not properly sanitized before being displayed in the error log...

CVE-2006-3261

Cross-site scripting XSS vulnerability in Trend Micro Control Manager TMCM 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the login page, which is not properly sanitized before being displayed in the error log...

CVE-2006-3261

CVE-2006-3261 affects Trend Micro Control Manager (TMCM) 3.5. The vulnerability is a cross-site scripting (XSS) flaw in the login page: the username field is not properly sanitized and its value may be reflected in the error log, enabling remote attackers to inject arbitrary web script or HTML. T...

CVE-2006-3261: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Trend Micro Control Manager TMCM 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the login page, which is not properly sanitized before being displayed in the error log...

Trend Micro Control Manager crossite scripting

It's possible to inject script into username...

Trend Micro Control Manager (TMCM) Persistent XSS Vulnerability

Trend Micro Control Manager TMCM Persistent XSS Vulnerability June 23, 2006 Product Overview: Trend Micro Control Manager is a centralized, web-based outbreak management console designed to simplify enterprise-wide coordination of outbreak security actions and management of Trend Micro products a...

Windows Access Control Demystified

Hello everybody, We have constructed a logical model of Windows XP access control, in a declarative but executable Datalog format. We have built a scanner that reads access-control configuration information from the Windows registry, file system, and service control manager database, and feeds ra...

Trend Micro ServerProtect Management Console isaNVWRequest.dll chunked POST buffer overflow

Added: 01/24/2006 CVE: CVE-2005-1929 BID: 15865 OSVDB: 21771 Background ServerProtect is a virus scanner for servers. Problem A buffer overflow in ServerProtect Management Console could allow a remote attacker to execute commands using a chunked POST request to isaNVWRequest.dll. Resolution Use t...

CVE-2005-1929

Trend Micro ServerProtect Management Console (versions 5.58 and earlier, used in Control Manager 2.5/3.0 and Damage Cleanup Server 1.1) is affected by heap-based buffer overflows in two ISAPI DLLs, isaNVWRequest.dll and relay.dll, triggered by processing large chunked POST requests with wrapped l...