Design/Logic Flaw

The DM Primer in the DM Deployment Common Component in Computer Associates CA BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA...

CA DM Deployment Common Component Multiple DoS

The remote version of DMPrimer service CA DM Deployment Common Component is vulnerable to multiple Denial of Service attacks. An attacker can crash or may cause a high CPU utilization by sending a specially crafted UDP packets. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

CVE-2005-4760

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, when fullyDelegatedAuthorization is enabled for a servlet, does not cause servlet deployment to fail when failures occur in authorization or role providers, which might prevent the servlet from being "fully...

CVE-2005-4752

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, might allow local users to gain privileges by using the run-as deployment descriptor element to change the privileges of a web application or EJB from the Deployer security role to the Admin security role...

CVE-2004-2622

AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access...

CVE-2004-2622

CVE-2004-2622 affects Altiris Deployment Solution 6.x and 5.x. AClient.exe does not require authentication from the first Deployment Server it connects to, enabling remote malicious servers to gain administrator access. Impact is complete administrator-level access on affected systems. The provid...

IBM Security SiteProtector (ISS) Deployment Manager Detection (HTTP)

HTTP based detection of the IBM Security SiteProtector ISS Deployment Manager. SPDX-FileCopyrightText: 2005 David Maciejak SPDX-FileCopyrightText: New code/product registration code since 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

ISS deployment manager detection

The remote host appears to run ISS deployment manager, connections are allowed to the web interface to remote install various SiteProtector components. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. In addition...

autoDeploy

In a default installation of Oracle 9iAS v.1.0.2.2, it is possible to deploy or undeploy SOAP services without the need of any kind of credentials. This is due to SOAP being enabled by default after installation in order to provide a convenient way to use SOAP samples. However, this feature poses...

Multiple HP Ignite-UX deployment tool vulnerabilities

/etc/passwd copy is available via TFTP, TFTP filesystem is world writable...

Altris deployment solution AClient privilege escalation

It's possible to launch executable with LocalSystem privileges...

SQL Injection in Oracle Forms

SQL Injection in Oracle Forms V1.00 © 2005 by Red-Database-Security GmbH 1/5 Summary: All Oracle Forms applications are vulnerable against SQL Injection by default. Oracle Applications =11.5.9 is not affected due to the default setting value “FORMSxxRESTRICTENTERQUERY = TRUE”. About Oracle Forms:...

ISS Deployment Manager Detection

The remote host appears to run ISS deployment manager. Connections are allowed to the web interface to remote install various SiteProtector components. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. In addition...

CVE-2004-2622

AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access...

[Full-Disclosure] Privilege escalation flaw in the AClient Service for Windows (Version 5.6.181).

Summary: A privilege escalation flaw exists in the AClient Service for Windows Version 5.6.181 http://www.altiris.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the AClient Service for Windows tray icon. Vulnerable Versions: Altiris...

Privilege escalation flaw in AClient Service for Windows (Version 5.6.181).

Summary: A privilege escalation flaw exists in the AClient Service for Windows Version 5.6.181 http://www.altiris.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the AClient Service for Windows tray icon. Vulnerable Versions: Altiris...

aclient.txt

Summary: A privilege escalation flaw exists in the AClient Service for Windows Version 5.6.181 http://www.altiris.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the AClient Service for Windows tray icon. Vulnerable Versions: Altiris...

Altiris Deployment Solution 5.6 - Client Service Privilege Escalation

Altiris Deployment Solution 5.6 - Client Service Privilege Escalation source: https://www.securityfocus.com/bid/11709/info Altiris Deployment Solution Client allows a user to activate the client interface by easily launching the software from an icon in the Windows system tray. It is reported tha...

Altiris Deployment Solution 5.6 - Client Service Privilege Escalation

source: https://www.securityfocus.com/bid/11709/info Altiris Deployment Solution Client allows a user to activate the client interface by easily launching the software from an icon in the Windows system tray. It is reported that a local user may exploit the client interface to escalate privileges...

Critical Vulnerability in Altiris Deployment Server architecture

Subject: Design flaw in Altiris Deployment Server - Attacker can take over all clients on a network with Admininstrator Rights and Remote Control ability PRODUCTS AFFECTED: --------------------------------------------------------------------------------------------- ALTIRIS DEPLOYMENT SERVER - 5....