Altiris AClient < 6.9.164 Multiple Local Vulnerabilities

The version of the Altiris Client Agent aclient installed on the remote host reportedly is susceptible to a shatter attack that could allow a local user to elevate his or her privileges on the affected system. In addition, the Altiris Deployment Solution reportedly stores the AClient password in...

MS08-017: Description of the security update for BizTalk Server Office Web Components: March 11, 2008

A security vulnerability exists in the Microsoft BizTalk Server Office Web Components that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.INTRODUCTIONMicrosoft has released security bulletin MS08-017. The security bulletin...

[SECURITY] Fedora 8 Update: dnssec-tools-1.3.2-1.fc8

The goal of the DNSSEC-Tools project is to create a set of tools, patches, applications, wrappers, extensions, and plugins that will help ease the deployment of DNSSEC-related technologies...

[SECURITY] Fedora 7 Update: dnssec-tools-1.3.2-1.fc7

The goal of the DNSSEC-Tools project is to create a set of tools, patches, applications, wrappers, extensions, and plugins that will help ease the deployment of DNSSEC-related technologies...

IBM Tivoli Provisioning Manager OS Deployment < 5.1.0.3 Interim Fix 3 HTTP Server Logging Functionality Remote Overflow

The remote host is running IBM Tivoli Provisioning Manager for OS Deployment, for remote deployment and management of operating systems. There is a buffer overflow vulnerability in the software's HTTP server, in its logging functionality. An unauthenticated, remote attacker may be able to leverag...

IBM Tivoli Provisioning Manager for OS Deployment HTTP Server远程缓冲区溢出漏洞

BUGTRAQ ID: 27387 CVECAN ID: CVE-2008-0401 IBM Tivoli Provisioning Manager for OS Deployment是一款网络引导服务器，方便集中管理联网的工作站。 Tivoli Provisioning Manager for OS Deployment的Web服务器组件中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果远程攻击者向服务器的TCP/443端口提交了恶意的HTTP请求的话，就可能触发这个溢出，导致以系统权限执行任意代码。 IBM Tivoli Provisioning Manager for...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...

IBM Tivoli Provisioning Manager for OS Deployment buffer overflow

Buffer overflow on oversized HTTP request...

Buffer overflow

Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment TPMfOSD before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an HTTP request with a long method...

CVE-2008-0401: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment TPMfOSD before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an HTTP request with a long method...

flexnet-overwrite.txt

Who: Macrovision What: Macrovision FlexNext Connect is a software package that allows ISV's to update their software products. It is generally used in conjunction with the InstallShield software deploymnet framework. FlexNet uses a number of ActiveX controls, some of which are marked safe for...

Verify whether the patch installed three large exploit tools-vulnerability warning-the black bar safety net

We are talking about here is some for creating security tools and exploits program Security Platform. Security experts to perform penetration tests, system administrators can verify whether the patch has been installed, manufacturers can perform regression testing. First, the Metasploit Framework...

Security collection: help your hand three exploits tools-vulnerability warning-the black bar safety net

We are talking about here is some for creating security tools and exploits program Security Platform. Security experts to perform penetration tests, system administrators can verify whether the patch has been installed, manufacturers can perform regression testing. First, the Metasploit Framework...

Design/Logic Flaw

Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380...

CVE-2007-5838

Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380...

CVE-2007-5838

CVE-2007-5838 affects Symantec Altiris Deployment Solution 6.x prior to 6.8.380.0. A local privilege escalation is possible because a local user can gain SYSTEM privileges via the browser option “Enable key-based authentication to Deployment server.” The description notes this is a different issu...

CVE-2007-3874

The CVE-2007-3874 issue affects Symantec Altiris Deployment Solution 6.x PXE server’s tftp/mtftp daemon (pxemtftp.exe). A directory traversal vulnerability in the PXE server component could allow unauthenticated remote attackers to read arbitrary files on the Altiris server. Impact is read access...