7-Technologies IGSS 9 Data Server/Collector Packet Handling

$Id: igss9misc.rb 12773 2011-05-30 21:06:56Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

7-Technologies IGSS 9 - Data Server/Collector Packet Handling (Metasploit)

$Id: igss9misc.rb 12779 2011-05-31 14:33:19Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

7-Technologies IGSS 9 Data Server/Collector Packet Handling

Exploit for windows platform in category remote exploits $Id: igss9misc.rb 12773 2011-05-30 21:06:56Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

IGSS Data Server Directory Traversal Arbitrary File Access

Binary data scadaigssdirtraversal.nbin...

7-Technologies IGSS 9 Data Server/Collector Packet Handling Vulnerabilities

This module exploits multiple vulnerabilities found on IGSS 9's Data Server and Data Collector services. The initial approach is first by transferring our binary with Write packets opcode 0x0D via port 12401 igssdataserver.exe, and then send an EXE packet opcode 0x0A to port 12397 dc.exe, which...

SuSE 10 Security Update : evolution-data-server (ZYPP Patch Number 7029)

The following bugs have been fixed : evolution considered S/MIME signatures to be valid even for modified mails CVE-2009-0547. specially crafted base64 encoded messages could cause a heap buffer overflow CVE-2009-0587. A POP3 server sending overly long lines could crash evolution. %NASLMINLEVEL...

Buffer overflow

Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

Buffer overflow

Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 and 11.2.1.4.1 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0910

Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 and 11.2.1.4.1 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0873

Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-0873

CVE-2010-0873 affects Oracle TimesTen In-Memory Database Data Server (TimesTen Data Server) 7.0.6.0. The vulnerability is remotely exploitable over TCP/IP (network), with no authentication, and has a CVSS v2 base score of 10.0 (Confidentiality, Integrity, and Availability all Complete). The issue...

CVE-2010-0910: Undefined Security Weakness

Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 and 11.2.1.4.1 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0873: Undefined Security Weakness

Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

openSUSE Security Update : evolution-data-server (openSUSE-SU-2010:0216-1)

evolution considered S/MIME signatures to be valid even for modified mails CVE-2009-0547. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update evolution-data-server-2333. The text description of th...

SuSE 11 Security Update : evolution-data-server (SAT Patch Number 1944)

This update fixes the following vulnerability : evolution considered S/MIME signatures to be valid even for modified mails. CVE-2009-0547: CVSS v2 Base Score: 5.0 Additionally the following bug has been fixed : - A POP3 server sending overly long lines could crash evolution. %NASLMINLEVEL 70300 C...

SLES10: Security update for evolution-data-server

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: evolution-data-server evolution-data-server-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the...

SLES11: Security update for Evolution

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: evolution-data-server evolution-data-server-lang gtkhtml2 gtkhtml2-lang More details may also be found by searching for the SuSE Enterprise Server 11 patch...

SLES11: Security update for Evolution

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: evolution-data-server evolution-data-server-lang gtkhtml2 gtkhtml2-lang More details may also be found by searching for the SuSE Enterprise Server 11 patch...

SuSE 10 Security Update : evolution-data-server (ZYPP Patch Number 6166)

camel's NTLM SASL authentication mechanism as used by evolution did not properly validate server's challenge packets. CVE-2009-0582 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

openSUSE Security Update : evolution-data-server (evolution-data-server-782)

camel's NTLM SASL authentication mechanism as used by evolution did not properly validate server's challenge packets CVE-2009-0582. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...