CVE-2010-0106

The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled, allows remote attackers to cause a denial of service prevention of on-demand scanning via "specific events" that prevent...

asp. net virtual host path disclosure issue-vulnerability warning-the black bar safety net

Learn asp. net when found,asp. net the site asp. net code for temporary compilationI so understood,could such an argument not a pairput in the WINDOWS\Microsoft. NET\Framework\v1. 1. 4 3 2 2\Temporary ASP.NET Files if you are using 2. 0 of the frameworks,then it is the WINDOWS\Microsoft...

A Black Hat Loses Control

Malware writers today always try to conceal their identities, right? Wrong – even some of today’s profit driven cyber criminals reveal their identities. We are a bit surprised, but here is the story of how a blackhat has revealed his identity and is trying to ‘get compensation’ from Kaspersky for...

Botmasters Holding Summer Clearance Sale

How much does a bot cost these days? Like everything else in our economy, the price of a bot-infected PC fluctuates significantly, based on supply, demand, volume purchased and any number of other factors. But according to research done by the folks at Cisco, bots can be had for as little as 10...

Hackers break into database, demand ransom

From WaPo Security Fix Brian Krebs Hackers last week broke into a Virginia state Web site used by pharmacists to track prescription drug abuse. They deleted records on more than 8 million patients and replaced the site’s homepage with a ransom note demanding $10 million for the return of the...

IBM WebSphere Host On-Demand绕过认证访问管理功能漏洞

IBM WebSphere Host On-Demand是一款允许从启用Java的Web浏览器访问主机应用和数据的解决方案。 IBM WebSphere Host On-Demand用户访问验证处理存在设计问题，远程攻击者可利用漏洞绕过访问验证非获得对管理功能的访问。 IBM WebSphere Host On-Demand用于验证用户的applet一般位于https://server/hod/HODAdmin.html 。访问这个页面并运行applet，Web浏览器会显示如下URL：...

CVE-2006-6537

IBM WebSphere Host On-Demand 6.0, 7.0, 8.0, 9.0, and possibly 10, allows remote attackers to bypass authentication via a modified pnl parameter, related to hod/HODAdmin.html and hod/frameset.html...

CVE-2006-6537

IBM WebSphere Host On-Demand 6.0, 7.0, 8.0, 9.0, and possibly 10, allows remote attackers to bypass authentication via a modified pnl parameter, related to hod/HODAdmin.html and hod/frameset.html...

CVE-2006-6537

IBM WebSphere Host On-Demand versions 6.0–9.0 (and possibly 10) areAffected by CVE-2006-6537 due to an authentication bypass via a modified pnl parameter in hod/HODAdmin.html and hod/frameset.html. This remote-auth bypass vulnerability could allow an attacker to gain access without valid credenti...

ibmwebsphere-bypass.txt

SUMMARY Vulnerability found in: IBM WebSphere Host On-Demand HOD Type: Unauthorized, remote access to HOD administration pages Applies to: Version 6.0, 7.0, 8.0, and 9.0 possibly 10.0 Severity Level: High Exploit Difficulty: Very Low Initial Vendor Notification: approximately 11/3/2006 Discovered...

CVE-2006-6473

Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 have unknown impact and attack vectors, related to 1 an Immediate Image Overwrite IIO error message at the Local User Interface LUI if overwri...

Unauthenticated access to IBM Host On-Demand administration pages

SUMMARY Vulnerability found in: IBM WebSphere Host On-Demand HOD Type: Unauthorized, remote access to HOD administration pages Applies to: Version 6.0, 7.0, 8.0, and 9.0 possibly 10.0 Severity Level: High Exploit Difficulty: Very Low Initial Vendor Notification: approximately 11/3/2006 Discovered...

IBM WebSphere Host On-Demand authentication bypass

Some URLs allow access without authentication...

Symantec On-Demand Protection加密数据信息泄露漏洞

Symantec On-Demand Agent（SODA）和Symantec On-Demand Protection（SODP）可为基于WEB的应用和服务提供虚拟桌面环境。 本地攻击者可以解密Symantec On-Demand虚拟桌面环境所加密的文件，访问文件中的数据。攻击的具体影响取决于所加密文件的内容。 Symantec SODP 2.6 build 2232 Symantec SODA 2.5 MR2 build 2156 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://support.sygate.com/...

CVE-2006-3457

Symantec On-Demand Agent SODA before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection SODP before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an...

CVE-2006-3457

CVE-2006-3457 affects Symantec On-Demand Agent (SODA) up to 2.5 MR2 Build 2157 and the Virtual Desktop module in Symantec On-Demand Protection (SODP) up to 2.6 Build 2233. The issue: files encrypted by policy-based automatic encryption can potentially be decrypted by a local attacker via an unspe...

CVE-2006-3457

Symantec On-Demand Agent SODA before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection SODP before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an...

Symantec On-Demand Agent / Symantec On-Demand Protection protection bypass

It's possible to access encrypted data...

SYM06-013 Symantec On-Demand Protection Encrypted Data Exposure

SYM06-013 August 1, 2006 Symantec On-Demand Protection Encrypted Data Exposure Revision History None Risk Impact Medium Remote No Local Yes Authentication Required No Exploit publicly available No Overview Symantec On-Demand Agent SODA and Symantec On-Demand Protection SODP provide a Virtual...

Symantec On-Demand Protection Encrypted Data Exposure

SUMMARY Symantec On-Demand Agent SODA and Symantec On-Demand Protection SODP provide a Virtual Desktop environment to secure Web-based applications and services. Files created while in the virtual desktop are encrypted as they are saved to a hard drive or removable media, if that option is enable...