Design/Logic Flaw

Unspecified vulnerability in the Java Administration GUI jnbSA in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava binaries."...

CVE-2008-4339

Unspecified vulnerability in the Java Administration GUI jnbSA in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava binaries."...

CVE-2008-4339

Summary: CVE-2008-4339 affects Symantec Veritas NetBackup Server/Enterprise Server (versions 5.1 before MP7, 6.0 before MP7, 6.5 before 6.5.2). The vulnerability is in the Java Administration GUI (jnbSA) and allows remote authenticated users to gain privileges via unknown attack vectors related t...

CVE-2008-4339: Undefined Security Weakness

Unspecified vulnerability in the Java Administration GUI jnbSA in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava binaries."...

Symantec Vertias NetBackup Java管理GUI远程特权提升漏洞

BUGTRAQ ID: 31221 CNCAN ID：CNCAN-2008092514 Symantec Veritas NetBackup是一款数据备份应用解决方案。 Symantec Veritas NetBackup包含的Java管理GUIjnbSA存在漏洞，远程授权非特权攻击者可以利用漏洞以应用程序权限执行任意命令。 恶意用户需要通过验证并登录到GUI来利用此漏洞。 Symantec Veritas NetBackup Server 6.5 Symantec Veritas NetBackup Server 6.0 Symantec Veritas NetBackup Serve...

[SECURITY] Fedora 9 Update: amarok-1.4.10-1.fc9

Amarok is a multimedia player with: - fresh playlist concept, very fast to use, with drag and drop - plays all formats supported by the various engines - audio effects, like reverb and compressor - compatible with the .m3u and .pls formats for playlists - nice GUI, integrates into the KDE look, b...

Code injection

Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain privileges via unknown attack vectors...

CVE-2008-2794

CVE-2008-2794 describes a local privilege escalation affecting the Symantec Altiris Notification Server Agent GUI. The vulnerability is tied to Altiris Notification Server Agent 6.x (before 6.0 SP3 R8) and allows local users to gain privileges via unspecified attack vectors. The connected sources...

CVE-2008-2794: Undefined Security Weakness

Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain privileges via unknown attack vectors...

Symantec Altiris Notification Server Agent GUI Local Elevation of Privilege

SUMMARY A non-privileged user can leverage the Symantec Altiris Notification Server Agent Graphical User Interface GUI to gain privileged access to the system. Severity Medium Remote Access adjacent network | No ---|--- Local Access | Yes Authentication Required | Yes Exploit available | No...

[SECURITY] Fedora 8 Update: system-config-network-1.5.10-1.fc8

This is the GUI of the network configuration tool, supporting Ethernet, Wireless, TokenRing, ADSL, ISDN and PPP...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web GUI in SAP Web Application Server WAS 7.0, Web Dynpro for ABAP aka WD4A or WDA, and Web Dynpro for BSP allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under bc/gui/sap/its/webgui/...

CVE-2008-2421

CVE-2008-2421 concerns a Cross-site Scripting (XSS) vulnerability in the Web GUI of SAP Web Application Server (WAS) 7.0, affecting Web Dynpro for ABAP (WD4A/WDA) and Web Dynpro for BSP. The issue allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to the default URI unde...

CVE-2008-2421: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web GUI in SAP Web Application Server WAS 7.0, Web Dynpro for ABAP aka WD4A or WDA, and Web Dynpro for BSP allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under bc/gui/sap/its/webgui/...

SAP Web Application Server crossite scripting

Crossite scripting with /sap/bc/gui/sap/its/webgui/...

Altiris Deployment Solution Agent < 6.9.176 Multiple Local Vulnerabilities

The version of the Altiris Deployment Solution Agent installed on the remote host reportedly is affected by several issues : - A local user could access a privileged command prompt via the Agent's user interface CVE-2008-2290. - A local user could leverage a GUI tooltip to access a privileged...

CVE-2008-1902

The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL...

CVE-2008-1902

The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL...

Code injection

The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL...

CVE-2008-1902

The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL...