metrica-xss.txt

Metrica Service Assurance Multiple Cross Site Scripting Author: Francesco Bianchino Email: [email protected] Title: Metrica Service Assurance Multiple Cross Site Scripting Vendor: IBM Summary Metrica Service Assurance Framework implements a distributed, object-oriented, J2EE-based architectur...

Condor Service Detection

The remote host is running Condor, an open source software framework for distributed job scheduling. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid34693; scriptversion"1.12";...

MS Windows Token Kidnapping local provide the right solutions-vulnerability warning-the black bar safety net

Although it is a time ago of the vulnerability, but had been only concerned with the exploits, and not focus on specific solutions, today inadvertently and the user-chat when mentioned, the user let help to find a solution, the online search under, In The Lancet where to find the relevant...

Solaris sadmind adm_build_path Buffer Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Solaris sadmind adm_build_path - Remote Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Sun Solaris...

MS Windows Token Kidnapping local provide the right solutions-vulnerability warning-the black bar safety net

Today MS updated security Bulletin This vulnerability is due inNetworkService or LocalService the following code running, you can access the same in the NetworkService or LocalService processes that run under that certain processes allow elevation of privileges for theLocalSystem it. For IIS, the...

Absolute path traversal Apache Tomcat WEBDAV

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag...

CVE-2003-1563

Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters OPS/RAC allows local users to cause a denial of service cluster node panic or abort by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager DLM, possibly involving...

Microsoft Dynamics GP Distributed Process Manager Detection

The remote host is running Microsoft Dynamics GP Distributed Process Manager. Dynamics GP is a business accounting and management software solution from Microsoft. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

CVE-2006-5265

Unspecified vulnerability in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allows remote attackers to cause a denial of service crash via an invalid magic number in a Distributed Process Server DPS message...

CVE-2006-5266

Multiple buffer overflows in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allow remote attackers to execute arbitrary code via 1 a crafted Distributed Process Manager DPM message to the a DPM component, or a 2 long string or 3 long IP address in a Distributed Process Server DPS...

Owner Free File System Client Detection

The remote web server is an OFFSystem client. OFFSystem Owner-Free Filesystem is a distributed filesystem for peer-to-peer file sharing in which files are stored as randomized data blocks C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33228; scriptversion"1.10";...

Absolute path traversal Apache Tomcat WEBDAV

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag...

Design/Logic Flaw

The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain configurations, does not properly handle when a client cannot send a message to a member of a distributed queue, which allows remote authenticated users to bypass intended access restrictions for protected...

Design/Logic Flaw

Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access restrictions and receive messages from a standalone JMS Topic or secured Distributed Topic member destination, related to durable subscriptio...

CVE-2008-0898

The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain configurations, does not properly handle when a client cannot send a message to a member of a distributed queue, which allows remote authenticated users to bypass intended access restrictions for protected...

CVE-2008-0897

Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access restrictions and receive messages from a standalone JMS Topic or secured Distributed Topic member destination, related to durable subscriptio...

CVE-2008-0898

The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain configurations, does not properly handle when a client cannot send a message to a member of a distributed queue, which allows remote authenticated users to bypass intended access restrictions for protected...

CVE-2008-0898

The vulnerability (CVE-2008-0898) affects BEA WebLogic Server 9.0–10.0 JMS distributed queues. In certain configurations, the JMS distributed queue feature mishandles a situation where a client cannot Send a message to a distributed-queue member, allowing remote authenticated users to bypass acce...

Microsoft Windows WebDav Mini-Redirector Heap Buffer Overflow (MS08-007; CVE-2008-0080)

Web Distributed Authoring and Versioning WebDAV is a set of extensions for HTTP that allows allow clients to publish, lock, and manage resources on the Web. The vulnerability is due to an error in the Microsoft Windows WebDAV Mini-Redirector that fails to properly handle malformed WebDAV response...