EUVD-2007-2915

Malware in sbrugna...

Command injection

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

CVE-2007-2923

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

CVE-2007-2923

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

CVE-2007-2923

The CVE-2007-2923 issue concerns the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services. The launch() method can be abused to execute arbitrary commands on the affected host. A remote attacker could exploit this by enticing a user to visit a crafted page, ...

CVE-2007-2923: Undefined Security Weakness

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

Novell exteNd Director LocalExec ActiveX (LocalExec.ocx) launch() Method Arbitrary Command Execution

The remote host contains the LocalExec ActiveX control from Novell exteND Director, a set of development tools for creating enterprise web applications. The version of this control on the remote host reportedly contains a method named 'launch' that can be used to execute arbitrary commands. If an...

Novell exteNd Director 4.1 LocalExec ActiveX control fails to restrict access to dangerous methods

Overview The Novell exteNd Director 4.1 LocalExec ActiveX control fails to restrict access to dangerous methods, which can allow a remote, unauthenticated attacker to execute arbitrary commands on a vulnerable system. Description Novell exteNd Director is a set of software development tools and...