ZDI-10-232: Cisco ICM Setup Manager Agent.exe HandleUpgradeAll Remote Code Execution Vulnerability

ZDI-10-232: Cisco ICM Setup Manager Agent.exe HandleUpgradeAll Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-232 November 7, 2010 -- CVE ID: CVE-2010-3040 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco Unifie...

ZDI-10-234: Cisco ICM Setup Manager Agent.exe HandleQueryNodeInfoReq Remote Code Execution Vulnerability

ZDI-10-234: Cisco ICM Setup Manager Agent.exe HandleQueryNodeInfoReq Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-234 November 7, 2010 -- CVE ID: CVE-2010-3040 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco...

Cisco ICM Setup Manager multiple security vulnerabilities

Multiple vulnerabilities in Agent.exe TCP/40078...

Cisco ICM Setup Manager Agent.exe HandleUpgradeTrace Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco ICM. Authentication is not required to exploit this vulnerability. The flaw exists within the Agent.exe component which listens by default on TCP port 40078. When handling the...

Cisco ICM Setup Manager Agent.exe AgentUpgrade Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Unified ICM. Authentication is not required to exploit this vulnerability. The flaw exists within the Agent.exe component which listens by default on TCP port 40078. When handling the...

Cisco ICM Setup Manager Agent.exe HandleQueryNodeInfoReq Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco ICM. Authentication is not required to exploit this vulnerability. The flaw exists within the Agent.exe component which listens by default on TCP port 40078. When handling the...

Cisco ICM Setup Manager Agent.exe HandleUpgradeAll Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco ICM. Authentication is not required to exploit this vulnerability. The flaw exists within the Agent.exe component which listens by default on TCP port 40078. When processing the...

Microsoft Windows Image Color Management System Code Execution Vulnerability (952954)

This host is missing a critical security update according to Microsoft Bulletin MS08-046. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2007-3615

Internet Communication Manager aka ICMAN.exe or ICM in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service process crash via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web...

CVE-2007-3615

SAP NetWeaver Application Server’s Internet Communication Manager (ICM/ICMAN.exe) in 6.x–7.x (Windows possibly) is vulnerable to a denial-of-service via a long URI containing sap-isc-key, related to web cache configuration. The connected documents do not provide additional technical details, expl...

Internet Communication Manager Denial Of Service Attack

======= Summary ======= Name: Internet Communication Manager Denial Of Service Attack Release Date: 5 July 2007 Reference: NGS00484 Discover: Mark Litchfield [email protected] Vendor: SAP Vendor Reference: SECRES-287 Systems Affected: Confirmed on Windows unconfirmed on NIX Risk: High Status:...

Cross site scripting

Cross-site scripting XSS vulnerability in index.cfm in Goss Intelligent Content Management iCM 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2006-2804

Cross-site scripting XSS vulnerability in index.cfm in Goss Intelligent Content Management iCM 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2006-2804

Cross-site scripting XSS vulnerability in index.cfm in Goss Intelligent Content Management iCM 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2006-2804

CVE-2006-2804 is a cross-site scripting (XSS) vulnerability in index.cfm of Goss Intelligent Content Management (iCM) 7.0 and earlier. The issue stems from input via the keyword parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected product: Goss iCM (versions 7.0 a...

[SA20372] Goss iCM "keyword" Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

ISS Protection Brief: Microsoft ICM Image Compromise

-----BEGIN PGP SIGNED MESSAGE----- nternet Security Systems Protection Brief July 12, 2005 Microsoft ICM Image Compromise Summary: ISS X-Force is tracking a flaw in Microsoft's Image Color Management ICM library. ICM is used to obtain predictable colors from one device to another, and is used in...