Altiris Deployment Server Agent privilege escalation

multiple shatter-attacks...

DSquare Exploit Pack: D2SEC_HBDW

Name| d2sechbdw ---|--- CVE| CVE-2008-4728 Exploit Pack| D2ExploitPack Description| Hummingbird Deployment Wizard ActiveX Arbitrary Code Execution Vulnerability Notes|...

Design/Logic Flaw

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the 1 Run and 2 PerformUpdateAsync methods, and 3 modify arbitrary registry values via...

CVE-2008-4728

Affected software: Hummingbird Deployment Wizard 2008 (version 10.0.0.44) with DeployRun.DeploymentSetup.1 ActiveX control. Vulnerabilities allow remote arbitrary-program execution via DeployRun.dll methods Run and PerformUpdateAsync, and arbitrary registry modification via SetRegistryValueAsStri...

Symantec Altiris Deployment Solution明文口令漏洞

BUGTRAQ ID: 31767 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Symantec Altiris Deployment Solution代理在系统内存中以明文存储了安装期间所设置的Application Identity Account口令，授权访问Deployment Solution Server系统的非特权用户可以从系统内存检索这个口令，然后利用这个口令对客户端执行各种操作。 Symantec Altiris Deployment Solution 6.x...

PT-2008-5939 · Hummingbird · Hummingbird Deployment Wizard

Name of the Vulnerable Software and Affected Versions: Hummingbird Deployment Wizard 2008 version 10.0.0.44 Description: The issue concerns insecure methods in the DeployRun.DeploymentSetup.1 ActiveX control, allowing remote attackers to execute arbitrary programs via the Run and PerformUpdateAsy...

CVE-2008-4728: Undefined Security Weakness

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the 1 Run and 2 PerformUpdateAsync methods, and 3 modify arbitrary registry values via...

Hummingbird Deployment Wizard ActiveX Control Multiple Security Vulnerabilities

This host is installed with Deployment Wizard ActiveX Control and is prone to multiple security vulnerabilities. The multiple flaws are due to error in 'SetRegistryValueAsString', 'Run' and 'PerformUpdateAsync' methods in DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control. OpenVAS...

Symantec Altiris Deployment Solution客户端GUI本地权限提升漏洞

BUGTRAQ ID: 31766 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Altiris客户端GUI的主窗口有一个隐藏按键，该按键的标题为“命令提示符”。点击这个按键会导致GUI试图用以下命令行参数调用CreateProcess： c:\Program Files\Altiris\AClient\cmd.exe...

[SECURITY] Fedora 8 Update: php-Smarty-2.6.20-1.fc8

Although Smarty is known as a "Template Engine", it would be more accurately described as a "Template/Presentation Framework." That is, it provides the programmer and template designer with a wealth of tools to automate tasks commonly dealt with at the presentation layer of an application. I stre...

Symantec Altiris Deployment Solution Local Access Elevation of Privilege in Client GUI

SUMMARY A local access elevation of privilege issue has been identified and resolved in the Symantec Altiris Deployment Solution Client GUI. Successful exploitation could result in unauthorized local system access on a client system. Severity Medium Remote Access adjacent network | No ---|--- Loc...

Symantec Altiris Deployment Solution Elevation of Privilege Clear Text Password in Memory

SUMMARY An elevation of privilege issue via a privileged access password stored in memory has been identified and resolved in the Symantec Altiris Deployment Solution. Successful exploitation could potentially allow a non-privileged user with authorized access to the system hosting the Deployment...

Hummingbird Deployment Wizard 2008 ActiveX File Execution(2)

Exploit for unknown platform in category remote exploits ============================================================ Hummingbird Deployment Wizard 2008 ActiveX File Execution2 ============================================================...

Hummingbird Deployment Wizard 2008 ActiveX Command Execution

Exploit for unknown platform in category remote exploits ============================================================ Hummingbird Deployment Wizard 2008 ActiveX Command Execution ============================================================...

Hummingbird Deployment Wizard 2008 - ActiveX Command Execution

------------------------------------------------------------------------------ Hummingbird Deployment Wizard 2008 DeployRun.dll Arbitrary File Execution url: http://www.hummingbird.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational...

Hummingbird Deployment Wizard 10 - DeployRun.dll ActiveX Control Multiple Security Vulnerabilities

Hummingbird Deployment Wizard 10 - DeployRun.dll ActiveX Control Multiple Security Vulnerabilities source: https://www.securityfocus.com/bid/31799/info Hummingbird Deployment Wizard 10 ActiveX control is prone to multiple vulnerabilities that attackers can exploit to run arbitrary code. The issue...

Hummingbird Deployment Wizard 2008 - ActiveX Command Execution

Hummingbird Deployment Wizard 2008 - ActiveX Command Execution ------------------------------------------------------------------------------ Hummingbird Deployment Wizard 2008 DeployRun.dll Arbitrary File Execution url: http://www.hummingbird.com Author: shinnai mail: shinnaiatautisticidotorg...

Hummingbird Deployment Wizard 2008 Registry Values Creation/Change

Exploit for unknown platform in category remote exploits ================================================================== Hummingbird Deployment Wizard 2008 Registry Values Creation/Change ==================================================================...

hummingbird-registry.txt

------------------------------------------------------------------------------------ Hummingbird Deployment Wizard 2008 DeployRun.dll Registry Values Creation/Change url: http://www.hummingbird.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for...

Hummingbird Deployment Wizard 2008 Registry Values Creation/Change

No description provided by source. ------------------------------------------------------------------------------------ Hummingbird Deployment Wizard 2008 DeployRun.dll Registry Values Creation/Change url: http://www.hummingbird.com Author: shinnai mail: shinnaiatautisticidotorg site:...