多个供应商SizerOne ActiveX控件'AddTab'方法缓冲区溢出漏洞

BUGTRAQ ID: 33148 CNCAN ID：CNCAN-2009010809 ComponentOne SizerOne是一款集成了四个控件的组件工具，包括了两个调整分割控件用来控制所有的调整分割任务，一个个Tabbling控件用来快速创建类似记事本和OutLook风格的Tab，一个字符分割控件自动处理分割和剪切字符的工作。 ComponentOne SizerOne包含的控件对'AddTab'方法处理存在问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 -TAB...

Fedora 9 : git-1.5.6.6-1.fc9 (2008-11650)

This update fixes a local privilege escalation bug in gitweb. For details: http://article.gmane.org/gmane.comp.version-control.git/103624 Additionally, gitk has been added as a requirement of git-gui bug 476308 and perlNet::SMTP::SSL has been added as a requirement of git-send-email bug 443615...

Default credentials

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...

Design/Logic Flaw

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors...

CVE-2008-5423

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...

CVE-2008-5422

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors...

JP1/VERITAS NetBackup JAVA Administration GUI Privilege Escalation Vulnerability

Overview The JAVA Administration Graphical User Interface GUI in JP1/VERITAS NetBackup contains a privilege escalation vulnerability. Impact A remote authenticated attacker could gain escalated privileges. Solution Please refer to the 'Vendor Information' section for the official countermeasure a...

SAP GUI VSFlexGrid.VSFlexGridL sp<=14 Buffer Overflow

No description provided by source. Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vendor response: 27.11.208 Publ...

SAP GUI VSFlexGrid.VSFlexGridL sp 14 - Remote Buffer Overflow

Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vendor response: 27.11.208 Public Advisory: 06.10.2009 Originaly...

SAP GUI VSFlexGrid.VSFlexGridL sp 14 - Remote Buffer Overflow

SAP GUI VSFlexGrid.VSFlexGridL sp 14 - Remote Buffer Overflow Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vend...

SAP GUI vsflexGrid ActiveX — Buffer Overflow vulnerability

Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control SP=14 Vendor URL: http://sap.com” Bugs: Buffer Overflow Exploits: YES Reported: 26.11.2008 Vendor response: 27.11.2008 Date of Public Advisory: 06.10.2009...

SAP GUI 6.4 Buffer Overflow Vulnerability

Application: EnjoySAP, SAP GUI for Windows Versions Affected: Version 6.4 Vendor URL: Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor response: 17.11.2008 Date of Public Advisory: 08.06.2009 Author: Alexandr Polyakov Description SAP GUI for Windows version 6.4 contains ActiveX...

Fedora 8 : optipng-0.6.2-1.fc8 (2008-9639)

The main reason for this update is a buffer overflow that is removed in this version, that could be triggered by processing specially crafted bitmap images .bmp. Aggregated upstream changelog: ============================== ++ Put back a speed optimization, accidentally removed in version 0.6,...

Microsoft Visual Basic ActiveX Controls Remote Code Execution (MS08-070; CVE-2008-3704; CVE-2008-4252; CVE-2008-4253; CVE-2008-4254; CVE-2008-4255; CVE-2008-4256)

Visual Basic is an event-driven programming language that was created by Microsoft for building stand alone Windows-based programs. Developers can use it for quickly building GUI applications. Several remote code execution vulnerabilities have been reported in Microsoft Visual Basic: CVE-2008-425...

KVIrc 3.4.0 Virgo Remote Format String Exploit PoC

No description provided by source. !-- KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Summary: KVIrc is a free portable IRC client based on the excellent Qt GUI toolkit. KVirc is being written by Szymon Stefanek and the KVIrc Development Team with the contribution of many IRC addicted...

KVIrc 3.4.0 Virgo Remote Format String Exploit PoC

Exploit for unknown platform in category dos / poc ================================================== KVIrc 3.4.0 Virgo Remote Format String Exploit PoC ================================================== KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remo...

KVIrc 3.4.0 - Virgo Remote Format String (PoC)

KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remote Format String Exploit PoC\n\n\t\tby LiquidWorm c 2008"; function poc window.location.href = "irc://A:%n -i"; var answ = confirm"Press OK to start exploitation\nPress Cancel to skip exploitation"; if an...

Symantec Altiris Deployment Solution客户端GUI本地权限提升漏洞

BUGTRAQ ID: 31766 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Altiris客户端GUI的主窗口有一个隐藏按键，该按键的标题为“命令提示符”。点击这个按键会导致GUI试图用以下命令行参数调用CreateProcess： c:\Program Files\Altiris\AClient\cmd.exe...

Symantec Altiris Deployment Solution Local Access Elevation of Privilege in Client GUI

SUMMARY A local access elevation of privilege issue has been identified and resolved in the Symantec Altiris Deployment Solution Client GUI. Successful exploitation could result in unauthorized local system access on a client system. Severity Medium Remote Access adjacent network | No ---|--- Loc...

CVE-2008-4339

Unspecified vulnerability in the Java Administration GUI jnbSA in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava binaries."...