Resetting the root password on the ELM or legacy Unidesk appliances

...

App Layering 4.X - how to change ELM appliance administrator password

App Layering 4.X - how to change ELM appliance administrator password...

App Layering: How to specify or disable SSL protocols and ciphers in the ELM

Modern security requirements often specify disabling certain SSL protocols or cipher families. The ELM uses an Apache web server daemon for accessing the Management Console UI. Citrix keeps the ELM deployment images up to date with modern requirements requiring TLS 1.2, disabling SSLv3, disabling...

App Layering: Benign messages in the ELM conosle

There are a number of messages that normally appear on the ELM VM console that are in fact benign and not an indication of any problem. These are messages that Linux outputs internally and not errors or problems reported by the App Layering software. These are normal messages that are produced...

App Layering: Nutanix AHV 5.5 support requires ELM 4.9 or above

App Layering 4.8 and before is not compatible with networking changes in Nutanix AHV 5.5. Depending on the operation you are performing, you may see any of these errors: Failed to connect to the server at 'host' A failure occurred connecting to the Nutanix server. Error = write EPROTO...

App Layering PVS Agent error registering to ELM "Could not create SSL/TLS secure channel"

When configuring the App Layering Provisioning Services PVS Agent on the PVS server, the error"Could not create SSL/TLS secure channel" occurs...

Unable to Configure Citrix App Layering ELM PVS Connector

The App Layering Agent PVS Agent on the PVS server is registered with the App Layering ELM virtual appliance, and the PVS Server enumerates on the App Layering PVS connector screen. However,clicking "check credentials" an error is displayed stating that the ELM cannot use the credentials on the P...

App Layering: Supporting DFS File Shares

The ELM can only access a DFS namespace if SMB 1.0 is enabled on the servers. If SMB 1.0 is disabled, as is becoming more common, the ELM cannot access a DFS namespace directly. Attempts to test the connection will fail...

How to fix App Layering tasks stuck at "Stalled" status

Tasks stuck in ELM management console stuck in a "Stalled" state...

Nutanix AHV Connector Failure: "The storage container cannot be accessed"

Error observed: "The storage container cannot be accessed. Please check that the ELM is in the container's 'white list'. " When deploying App Layering to Nutanix AHV: You are able to "check credentials" on the left half of the connector screen successfully, and it enumerate templates and storage...

Changing DNS information on App layering ELM - 4.x

In 4.x, you cannot update DNS information by going to port 5480 MAIPAddress:5480...

CVE-2016-0372

CVE-2016-0372 affects IBM Jazz-based CLM/RTC/RQM and related products. The vulnerability stems from not setting the secure flag on the session cookie in SSL mode, allowing a remote attacker to capture the cookie over HTTP. Impact is cookie exposure, not full remote code execution. Affected versio...

elm-dentalclinic.com XSS vulnerability

Vulnerable URL: http://www.elm-dentalclinic.com/build/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7839179 VIP website...

DashCommand (OBD ELM App) - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application DashCommand OBD ELM App published at the 'play' market has multiple vulnerabilities...

Elm Development Group ELM 2.4/2.5.1 Mail for UNIX (ELM) Buffer Overflow (2)

No description provided by source. source: http://www.securityfocus.com/bid/1276/info Buffer overflow vulnerabilities exist in elm Electronic Mail for Unix. / Elm 2.5 PL3 exploit Tested Under Linux Slackware 3.6, 4.0, 7.0 By xfer [email protected] Of Buffer0verfl0w Security At Sat May 27...

Elm 2.4 'filter' Arbitrary Mail Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1802/info Elm is a popular Unix mail client. A vulnerability exists in Elm's 'filter' utility which can grant an attacker access to any user's mail spool. By exploiting a race condition which exists in the creation of...

Elm Development Group ELM 2.4/2.5.1 Mail for UNIX (ELM) Buffer Overflow (1)

No description provided by source. source: http://www.securityfocus.com/bid/1276/info Buffer overflow vulnerabilities exist in elm Electronic Mail for Unix. / Elm Exploit - Scrippie - Phreak.nl - b0f - http://b0f.freebsd.lublin.pl This exploit spawns an EGID mail shell on the default Slackware 4...

Elm 2.3/2.4 - Local TERM Environment Variable Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8030/info A buffer overrun has been discovered in Elm. The problem occurs due to insufficient bounds checking performed before copying user-supplied data into an internal memory buffer. Specifically, a TERM environment...

Elm 2.5.3 Alternative-Folder Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2403/info There is a buffer overflow in elm 2.5 PL3. This overflow is accessible by passing a long string to the -f Alternative-Folder command-line option. This vulnerability may not be restricted to this version of elm. ...

Cisco Unified Communications Manager ELM信息泄漏漏洞

Bugtraq ID:65643 CVE ID:CVE-2014-0733 Cisco Unified Communications Manager是一款Cisco IP电话解决方案中的呼叫处理组件。 访问某些相关ELM的URL时Cisco Unified Communications Manager应用对其缺少正确的验证，允许远程攻击者利用漏洞获取受限文件敏感内容信息。 0 Cisco Unified Communications Manager 10.01.10000.3 厂商补丁： Cisco ----- Cisco Unified Communications Manager...