CVE-2013-3748

Oracle Solaris 11 is affected by CVE-2013-3748 in the Driver/IDM (iSCSI Data Mover) component. The vulnerability is exploitable over the network and can cause complete denial of service (OS hang/crash) per the NVD entry, with a CVSSv2 base score of 7.8. Related Nessus data indicates the issue is ...

CVE-2013-1083

Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager aka IDM Roles Based Provisioning Module 4.0.2 before Field Patch C has unknown impact and attack vectors...

CVE-2013-1083

Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager aka IDM Roles Based Provisioning Module 4.0.2 before Field Patch C has unknown impact and attack vectors...

CVE-2013-1083

CVE-2013-1083 affects Novell Identity Manager RBPM 4.0.2 before Field Patch C in the Reporting Module’s login functionality. The provided descriptions state an unspecified vulnerability with unknown impact and attack vectors; no concrete root cause, exploit details, or fixed version are given in ...

Internet Download Manager - Local Stack Buffer Overflow

!/usr/bin/perl 1 ========================================== 1 0 I'm Dark-Puzzle From Inj3ct0r TEAM 0 0 1 1 dark-puzzleatliveatfr 0 0 ========================================== 1 1 White Hat 1 0 Independant Pentester 0 1 exploit coder/bug researcher 0...

Internet Download Manager Buffer Overflow

!/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website:...

CVE-2011-3543

Technical details for CVE-2011-3543 are not publicly available in the provided documents; no affected products, components, versions, or remediation are detailed here. Monitor for updates.

CVE-2011-2227

CVE-2011-2227 describes a cross-site scripting (XSS) vulnerability in Novell Identity Manager (IDM) User Application (versions 3.5.0–4.0.0) and Identity Manager Roles Based Provisioning Module (versions 3.6.0–4.0.0). The flaw arises from accepting user-controlled input in the apwaDetail (aka apwa...

CVE-2011-1696

CVE-2011-1696 affects Novell Identity Manager (IDM) User Application versions 3.5.0–4.0.0 and Identity Manager Roles Based Provisioning Module 3.6.0–4.0.0. The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary web script or HTML via the apwaDetail (apwaDeta...

Cross site scripting

Cross-site scripting XSS vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager aka IDM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4324

CVE-2010-4324 concerns a Cross-site scripting (XSS) vulnerability in the Approval Form of the User Application in the Roles Based Provisioning Module of Novell Identity Manager. Affected software is IDM with RBPM module version 3.7.0 before 370D. The vulnerability allows remote attackers to injec...

CVE-2010-3546

Unspecified vulnerability in the Sun Java System Identity Manager component in Oracle Sun Products Suite 8.1 allows remote attackers to affect confidentiality and integrity via unknown vectors...

Design/Logic Flaw

Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same...

CVE-2010-3402

CVE-2010-3402 affects IDM Computer Solutions UltraEdit (notably v16.20.0.1009 and v16.10.0.1036). The vulnerability stems from an untrusted search path that enables DLL hijacking via a Trojan horse dwmapi.dll placed in the same folder as a bin, cpp, css, c, dat, hpp, html, h, ini, java, log, mak,...

CVE-2010-3402

Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same...

CVE-2010-3264

The engine installer in Novell Identity Manager aka IDM 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file...

CVE-2010-3264

The CVE-2010-3264 entry affects Novell Identity Manager (IDM) 3.6.1: the engine installer writes admin tree credentials to /tmp/idmInstall.log, exposing sensitive information to any local user who reads that file. This is a local-privilege-exposure issue rooted in the installer’s handling of cred...

CVE-2010-3264

The engine installer in Novell Identity Manager aka IDM 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file...

Stack overflow

Stack-based buffer overflow in Internet Download Manager IDM before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server...

CVE-2010-0995

The CVE-2010-0995 entry concerns Internet Download Manager (IDM) prior to 5.19. The vulnerability is a stack-based buffer overflow triggered while IDM processes certain FTP URIs, by sending crafted test sequences from client to server, allowing remote code execution. Public sources in the connect...