Design/Logic Flaw

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent aka AClient password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory...

CVE-2008-1754

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent aka AClient password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory...

CVE-2008-1754

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent aka AClient password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory...

CVE-2008-1754

The CVE-2008-1754 issue affects Symantec Altiris Deployment Solution before 6.9.164, where the Deployment Solution Agent (AClient) password is stored in cleartext in memory. This allows a local attacker to obtain sensitive credentials by dumping the aclient.exe process memory, leading to potentia...

Microsoft VBScript和JScript脚本引擎远程溢出漏洞（MS08-022）

BUGTRAQ ID: 28551 CVECAN ID: CVE-2008-0083 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的VBScript和JScript脚本引擎在处理畸形数据时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Windows的VBScript和JScript脚本引擎在解码网页中的脚本时允许脚本加载到内存中运行，这可能导致缓冲区溢出。如果用户打开了特制文件或访问正在运行特制脚本的网站，则此漏洞可能允许远程执行代码。 Microsoft VBScript/JScript 5.1 - Microsoft Windows 2000...

CVE-2008-1754: Undefined Security Weakness

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent aka AClient password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory...

CVE-2008-1473

The Altiris Client Service AClient.exe in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a "Shatter" style attack...

CVE-2008-1473

The CVE affects the Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9.164, allowing local users to gain privileges via a Shatter-style attack. Root cause is a privilege-escalation path in AClient.exe; impact is local privilege elevation. Mitigation: upg...

CVE-2008-1473: Undefined Security Weakness

The Altiris Client Service AClient.exe in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a "Shatter" style attack...

Symantec Altiris Deployment服务器代理AClient.exe本地权限提升漏洞

BUGTRAQ ID: 28110 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Symantec Altiris Deployment服务器代理存在权限提升漏洞，本地攻击者可以通过shatter攻击获得非授权的特权访问。仅有登录到运行了Symantec Altiris Deployment Solution代理（AClient.exe） 的系统的攻击者才可以利用这个漏洞。 Symantec Altiris Deployment Solution 6.8.x Symantec...

Altiris AClient < 6.9.164 Multiple Local Vulnerabilities

The version of the Altiris Client Agent aclient installed on the remote host reportedly is susceptible to a shatter attack that could allow a local user to elevate his or her privileges on the affected system. In addition, the Altiris Deployment Solution reportedly stores the AClient password in...

MS08-017: Description of the security update for BizTalk Server Office Web Components: March 11, 2008

A security vulnerability exists in the Microsoft BizTalk Server Office Web Components that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.INTRODUCTIONMicrosoft has released security bulletin MS08-017. The security bulletin...

[SECURITY] Fedora 8 Update: dnssec-tools-1.3.2-1.fc8

The goal of the DNSSEC-Tools project is to create a set of tools, patches, applications, wrappers, extensions, and plugins that will help ease the deployment of DNSSEC-related technologies...

[SECURITY] Fedora 7 Update: dnssec-tools-1.3.2-1.fc7

The goal of the DNSSEC-Tools project is to create a set of tools, patches, applications, wrappers, extensions, and plugins that will help ease the deployment of DNSSEC-related technologies...

IBM Tivoli Provisioning Manager OS Deployment < 5.1.0.3 Interim Fix 3 HTTP Server Logging Functionality Remote Overflow

The remote host is running IBM Tivoli Provisioning Manager for OS Deployment, for remote deployment and management of operating systems. There is a buffer overflow vulnerability in the software's HTTP server, in its logging functionality. An unauthenticated, remote attacker may be able to leverag...

IBM Tivoli Provisioning Manager for OS Deployment HTTP Server远程缓冲区溢出漏洞

BUGTRAQ ID: 27387 CVECAN ID: CVE-2008-0401 IBM Tivoli Provisioning Manager for OS Deployment是一款网络引导服务器，方便集中管理联网的工作站。 Tivoli Provisioning Manager for OS Deployment的Web服务器组件中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果远程攻击者向服务器的TCP/443端口提交了恶意的HTTP请求的话，就可能触发这个溢出，导致以系统权限执行任意代码。 IBM Tivoli Provisioning Manager for...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...