PT-2011-3738

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 10 Description The issue affects confidentiality, integrity, and availability. It is related to the Installer component, but the specific vectors are unknown. Recommendations For Oracle Solaris version 10, at the moment,...

CVE-2011-2285: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Installer...

CVE-2011-2285

CVE-2011-2285 affects Oracle Solaris 10 (x86 and SPARC). The vulnerability is described as an unspecified local issue related to the Installer that could affect confidentiality, integrity, and availability via unknown vectors. Public documentation in connected sources references Solaris patching:...

Buffer overflow

Unspecified vulnerability in the Oracle Universal Installer component in Oracle Database Server 10.1.0.5 allows local users to affect confidentiality via unknown vectors...

CVE-2011-2240

CVE-2011-2240 affects Oracle Database Server 10.1.0.5, specifically the Oracle Universal Installer component. The vulnerability is described as unspecified and allows local users to affect confidentiality via unknown vectors; no exploit details are provided in the documents. Public references poi...

Oracle Database Multiple Vulnerabilities (July 2011 CPU)

The remote Oracle database server is missing the July 2011 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Core RDBMS CVE-2011-0832, CVE-2011-0835, CVE-2011-0838, CVE-2011-0880, CVE-2011-2230, CVE-2011-2239, CVE-2011-2243,...

CVE-2011-2240: Undefined Security Weakness

Unspecified vulnerability in the Oracle Universal Installer component in Oracle Database Server 10.1.0.5 allows local users to affect confidentiality via unknown vectors...

Code injection

The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and VMware ESX 4.x before 4.1 Update 1 does not have a digital signature, which might make it easier for remote attackers to...

CVE-2011-1789

The CVE-2011-1789 entry describes an unsigned self-extracting installer in the vSphere Client Installer for VMware vCenter 4.0 (before Update 3) and 4.1 (before Update 1), as well as VMware ESXi 4.x (before 4.1 Update 1) and ESX 4.x (before 4.1 Update 1). The root cause is the lack of a digital s...

CVE-2011-1789: Undefined Security Weakness

The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and VMware ESX 4.x before 4.1 Update 1 does not have a digital signature, which might make it easier for remote attackers to...

PT-2011-3370

Name of the Vulnerable Software and Affected Versions VMware vCenter versions 4.0 through 4.0 Update 2 VMware vCenter versions 4.1 through 4.1 Update 0 VMware ESXi versions 4.x through 4.1 Update 0 VMware ESX versions 4.x through 4.1 Update 0 Description The issue is related to the self-extractin...

PacketManipulator 0.3 released - including Windows Installer !

PacketManipulator 0.3 released - including Windows Installer ! PacketManipulator is a network scanning frontend. PacketManipulator is developed in the Python programming language, and its interface is built with the GTK Toolkit. The project goal is to develop a frontend that is really useful for...

USN-1126-1: PHP vulnerabilities

Stephane Chazelas discovered that the /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/. CVE-2011-0441 Raphael Geisert and Dan Rosenberg discovered that the PEAR installer allows local users to overwrite...

DirectoryScanner - Free Directory Server fingerprinting tool !

DirectoryScanner - Free Directory Server fingerprinting tool ! DirectoryScanner is the FREE Directory Server fingerprinting tool. It can help you to remotely detect the type of Directory servers such as Microsoft Active Directory, Novell eDirectory etc running on the local network as well as...

RealNetworks RealGames StubbyUtil.ShellCtl.1 ActiveX Control (InstallerDlg.dll v2.6.0.445) Multiple Remote Commands Execution and Code Execution Vulnerabilities

RealNetworks RealGames StubbyUtil.ShellCtl.1 ActiveX Control InstallerDlg.dll v2.6.0.445 Multiple Remote Commands Execution and Code Execution Vulnerabilities tested against Internet Explorer 9, Vista sp2 download url: http://www.gamehouse.com/ background: When choosing to play with theese online...

RealNetworks RealGames StubbyUtil.ProcessMgr.1 ActiveX Control (InstallerDlg.dll v2.6.0.445) Multiple Remote Commands Execution Vulnerabilities

RealNetworks RealGames StubbyUtil.ProcessMgr.1 ActiveX Control InstallerDlg.dll v2.6.0.445 Multiple Remote Commands Execution Vulnerabilities tested against Internet Explorer 9, Vista sp2 download url: http://www.gamehouse.com/ background: When choosing to play with theese online games ex. the ga...

RealNetworks RealGames StubbyUtil.ProcessMgr.1 - ActiveX Control Multiple Remote Command Executions

RealNetworks RealGames StubbyUtil.ProcessMgr.1 - ActiveX Control Multiple Remote Command Executions RealNetworks RealGames StubbyUtil.ProcessMgr.1 ActiveX Control InstallerDlg.dll v2.6.0.445 Multiple Remote Commands Execution Vulnerabilities tested against Internet Explorer 9, Vista sp2 download...

RealNetworks RealGames StubbyUtil.ShellCtl.1 - ActiveX Control Multiple Remote Command Executions

RealNetworks RealGames StubbyUtil.ShellCtl.1 ActiveX Control InstallerDlg.dll v2.6.0.445 Multiple Remote Commands Execution and Code Execution Vulnerabilities tested against Internet Explorer 9, Vista sp2 download url: http://www.gamehouse.com/ background: When choosing to play with theese online...

CVE-2011-0190

Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server...

CVE-2011-0190

CVE-2011-0190 affects Mac OS X installations prior to 10.6.7, where Install Helper in Installer mishandles an unspecified URL. This may enable a remote attacker to track user logins by logging network traffic from an agent intended to contact an Apple server. Remediation is provided by Apple’s Se...