8097 matches found
CVE-2005-4752
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, might allow local users to gain privileges by using the run-as deployment descriptor element to change the privileges of a web application or EJB from the Deployer security role to the Admin security role...
CVE-2004-2622
AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access...
CVE-2004-2622
CVE-2004-2622 affects Altiris Deployment Solution 6.x and 5.x. AClient.exe does not require authentication from the first Deployment Server it connects to, enabling remote malicious servers to gain administrator access. Impact is complete administrator-level access on affected systems. The provid...
IBM Security SiteProtector (ISS) Deployment Manager Detection (HTTP)
HTTP based detection of the IBM Security SiteProtector ISS Deployment Manager. SPDX-FileCopyrightText: 2005 David Maciejak SPDX-FileCopyrightText: New code/product registration code since 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
autoDeploy
In a default installation of Oracle 9iAS v.1.0.2.2, it is possible to deploy or undeploy SOAP services without the need of any kind of credentials. This is due to SOAP being enabled by default after installation in order to provide a convenient way to use SOAP samples. However, this feature poses...
ISS deployment manager detection
The remote host appears to run ISS deployment manager, connections are allowed to the web interface to remote install various SiteProtector components. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. In addition...
Multiple HP Ignite-UX deployment tool vulnerabilities
/etc/passwd copy is available via TFTP, TFTP filesystem is world writable...
Altris deployment solution AClient privilege escalation
It's possible to launch executable with LocalSystem privileges...
SQL Injection in Oracle Forms
SQL Injection in Oracle Forms V1.00 © 2005 by Red-Database-Security GmbH 1/5 Summary: All Oracle Forms applications are vulnerable against SQL Injection by default. Oracle Applications =11.5.9 is not affected due to the default setting value “FORMSxxRESTRICTENTERQUERY = TRUE”. About Oracle Forms:...
ISS Deployment Manager Detection
The remote host appears to run ISS deployment manager. Connections are allowed to the web interface to remote install various SiteProtector components. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. In addition...
CVE-2004-2622
AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access...
[Full-Disclosure] Privilege escalation flaw in the AClient Service for Windows (Version 5.6.181).
Summary: A privilege escalation flaw exists in the AClient Service for Windows Version 5.6.181 http://www.altiris.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the AClient Service for Windows tray icon. Vulnerable Versions: Altiris...
Privilege escalation flaw in AClient Service for Windows (Version 5.6.181).
Summary: A privilege escalation flaw exists in the AClient Service for Windows Version 5.6.181 http://www.altiris.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the AClient Service for Windows tray icon. Vulnerable Versions: Altiris...
aclient.txt
Summary: A privilege escalation flaw exists in the AClient Service for Windows Version 5.6.181 http://www.altiris.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the AClient Service for Windows tray icon. Vulnerable Versions: Altiris...
Altiris Deployment Solution 5.6 - Client Service Privilege Escalation
Altiris Deployment Solution 5.6 - Client Service Privilege Escalation source: https://www.securityfocus.com/bid/11709/info Altiris Deployment Solution Client allows a user to activate the client interface by easily launching the software from an icon in the Windows system tray. It is reported tha...
Altiris Deployment Solution 5.6 - Client Service Privilege Escalation
source: https://www.securityfocus.com/bid/11709/info Altiris Deployment Solution Client allows a user to activate the client interface by easily launching the software from an icon in the Windows system tray. It is reported that a local user may exploit the client interface to escalate privileges...
Critical Vulnerability in Altiris Deployment Server architecture
Subject: Design flaw in Altiris Deployment Server - Attacker can take over all clients on a network with Admininstrator Rights and Remote Control ability PRODUCTS AFFECTED: --------------------------------------------------------------------------------------------- ALTIRIS DEPLOYMENT SERVER - 5....
Witango & Tango 2000 Application Server Remote System Buffer Overrun
NGSSoftware Insight Security Research Advisory Name: WiTango Application Server & Tango 2000 Systems Affected: Windows Severity: Critical Risk Category: Remote System Buffer Overrun Vendor URL: http://www.witango.com Author: Mark Litchfield [email protected] Date: 18th July 2003 Advisory numbe...
CVE-2001-1371
The CVE-2001-1371 entry concerns Oracle 9iAS (Oracle Application Server 9iAS) where SOAP is enabled by default (version 1.0.2.2), allowing anonymous remote deployment of SOAP services via urn:soap-service-manager and urn:soap-provider-manager. The connected OpenVAS/Nessus/NVD references corrobora...
CVE-2001-1371
The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager...