KLA10351 Multiple vulnerabilities in Symantec Backup Exec

Multiple serious vulnerabilities have been found in Symantec Backup Exec. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, read-write backup files, inject scripts and execute arbitrary code Below is a complete list of vulnerabilities 1...

CVE-2013-4678

CVE-2013-4678 concerns the NDMP protocol implementation in Symantec Backup Exec 2010 R3 (before SP3) and 2012 (before SP2). The issue allows remote authenticated users to obtain sensitive host-version information via unspecified vectors, indicating an information-disclosure risk tied to the NDMP ...

CVE-2013-4676

Multiple cross-site scripting XSS vulnerabilities in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 1 custom-reports generation page, 2 Storage Devices creation page, or 3 jobs creation page...

CVE-2013-4676

Symantec Backup Exec Server is affected by CVE-2013-4676: multiple cross-site scripting (XSS) vulnerabilities in the management console and the beutility console. The issues allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) the custom-reports generation page,...

CVE-2013-4677

CVE-2013-4677 concerns Symantec Backup Exec data files stored with weak ACLs, enabling local users to read or alter backup data by direct file access. The affected products, per sources, are: Symantec Backup Exec 2010 R3 (before SP3) and Symantec Backup Exec 2012 (before SP2). The underlying issu...

CVE-2013-4575

The CVE-2013-4575 issue is a heap-based buffer overflow in the Linux agent utility of Symantec Backup Exec (affecting Backup Exec 2010 R3 before SP3 and 2012 before SP2; also reflected for RALUS installations per Nessus). This allows remote, unauthenticated attackers to cause a denial of service ...

CVE-2013-4575

Heap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via unspecified vectors...

CVE-2013-4678

The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users to obtain sensitive host-version information via unspecified vectors...

CVE-2013-4677

Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions Everyone: Read and Everyone: Change for backup data files, which allows local users to obtain sensitive information or modify the outcome of a restore via direct access to these files...

HP System Management Homepage ginkgosnmp.inc Command Injection

Added: 07/26/2013 CVE: CVE-2013-3576 BID: 60471 OSVDB: 94191 Background HP System Management Homepage SMH is a web-based interface that consolidates the management of ProLiant and Integrity servers. Problem A vulnerability in HP SMH ginkgosnmp.inc script allows command execution by a remote...

Kernel: sa_restorer information leak

The flushsignalhandlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sarestorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call...

Oracle Linux 6 : kernel (ELSA-2011-0283)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0283 advisory. - net tcp: Increase TCPMAXSEG socket option minimum to TCPMINMSS Frantisek Hrbata 652510 652511 CVE-2010-4165 - perf perfevents: Fix perfcountermmap ho...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2503)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2503 advisory. - kmod: make requestmodule killable Oleg Nesterov Orabug: 16286305 CVE-2012-4398 - kmod: introduce callmodprobe helper Oleg Nesterov Orabug: 162863...

HP System Management Homepage JustGetSNMPQueue Command Injection

This Metasploit module exploits a vulnerability found in HP System Management Homepage. By supplying a specially crafted HTTP request, it is possible to control the 'tempfilename' variable in function JustGetSNMPQueue found in ginkgosnmp.inc, which will be used in a exec function. This results in...

HP System Management Homepage JustGetSNMPQueue Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "HP System...

HP System Management Homepage contains a command injection vulnerability

Overview HP System Management Homepage contains a command injection vulnerability CWE-77 that may result in arbitrary command execution and privilege escalation. Description Markus Wulftange from Daimler TSS reports: The vulnerability is located in the ginkgosnmp.inc PHP file in the...

Kernel: sa_restorer information leak

The flushsignalhandlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sarestorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call...

Veritas Backup Exec Remote Agent Detection (NDMP)

Network Data Management Protocol NDMP based detection of the Veritas Backup Exec Agent. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Kernel: drm/i915: heap writing overflow

Integer overflow in drivers/gpu/drm/i915/i915gemexecbuffer.c in the i915 driver in the Direct Rendering Manager DRM subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service heap-based buffer...

Linux/x86 CMD[wget,mv,gcc,chmod] Download and exec() - sc_224 bytes

Linux/x86 , Run Multiple Commands wget,mv,gcc,chmod for Download a .c file and exec it !. ref : http://packetstorm.foofus.com/shellcode/dxk.c / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...