445 matches found
CVE-2005-1929
Multiple heap-based buffer overflows in 1 isaNVWRequest.dll and 2 relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via "wrapped" length values in Chunk...
CVE-2005-1930
Directory traversal vulnerability in the Crystal Report component rptserver.asp in Trend Micro ServerProtect Management Console 5.58, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, and possibly earlier versions, allows remote attackers to read arbitrary files via the IMAGE...
Trend Micro TMCM Console Management Detection (HTTP)
The remote host appears to run Trend Micro Control Manager, connections are allowed to the web console management. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2005-0383
Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password...
Trend Micro TMCM Console Management Detection
The remote host appears to run Trend Micro Control Manager. It is accepting connections to the web console management interface, which may reveal sensitive information. A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; if...
CVE-2005-0383
Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password...
CVE-2005-0383
CVE-2005-0383 concerns Trend Micro Control Manager 3.0 Enterprise Edition, where remote attackers can escalate privileges through a replay attack of the encrypted username and password. The available documents confirm the affected product and the underlying issue (replay of credentials) but do no...
CVE-2005-0383: Undefined Security Weakness
Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password...
Race in XP SCM Service Shutdown Mechanism
Race Condition in Windows XP Service Control Manager Service Shutdown Mechanism ABSTRACT "The Windows XP Professional operating system is the best choice for businesses of all sizes. Windows XP Professional integrates the strengths of Windows 2000 Professional, such as standards-based security,...
Microsoft Windows 2000 Service Control Manager creates predictably named pipes
Overview A vulnerability exists in the Microsoft Windows 2000 Service Control Manager which could allow local users to gain control of the system. Description A vulnerability exists in the Service Control Manager SCM function. This function creates named pipes for system services. More informatio...
CVE-2000-0737
The Service Control Manager SCM in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability...
CVE-2000-0737
The Service Control Manager SCM in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability...
CVE-2000-0737: Undefined Security Weakness
The Service Control Manager SCM in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability...
Security Bulletin (MS00-053)
Microsoft Security Bulletin MS00-053 - -------------------------------------- Patch Available for "Service Control Manager Named Pipe Impersonation" Vulnerability Originally posted: August 02, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsof...
MS00-053: Service Control Manager Named Pipe Impersonation patch (269523)
The hotfix for the 'Service Control Manager Named Pipe Impersonation' problem has not been applied. This vulnerability allows a malicious user, who has the right to log on this host locally, to gain additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description...
Microsoft Windows Server 2000 - Named Pipes Predictability
source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBook. A server-side named pipe is created before each service ...
CVE-1999-0980
Windows NT Service Control Manager SCM allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request...
CVE-1999-0980
Windows NT Service Control Manager SCM allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request...
CVE-1999-0980
CVE-1999-0980 affects the Windows NT Service Control Manager (SCM). A remote attacker can cause a denial-of-service by sending a malformed argument in a resource-enumeration request, impacting availability (base score ~5.0, network vector, low complexity; no confidentiality or integrity impact st...