CVE-2007-2344

The CVE-2007-2344 entry concerns the BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1 (and possibly earlier) running on Windows. A remote attacker can cause a denial-of-service (daemon crash) by sending a UDP packet with an invalid “packet type” field. The ava...

CVE-2007-2344: Undefined Security Weakness

The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service daemon crash via a UDP packet that contains an invalid "packet type" field...

CVE-2007-2343: Undefined Security Weakness

Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names...

Trend Micro ServerProtect Detection

The remote host is running Trend Micro ServerProtect for Windows / NetWare, an antivirus / antispyware for Windows and NetWare servers. C Tenable Network Security include"compat.inc"; if description scriptid24679; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2006-5943

Multiple SQL injection vulnerabilities in inventory/display/imager.asp in Website Designs for Less Inventory Manager allow remote attackers to execute arbitrary SQL commands via the 1 pictable, 2 picfield, or 3 where parameter...

CVE-2006-5942

Cross-site scripting XSS vulnerability in inventory/display/displayresults.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter...

CVE-2006-5942

Cross-site scripting XSS vulnerability in inventory/display/displayresults.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter...

CVE-2006-5943

Multiple SQL injection vulnerabilities in inventory/display/imager.asp in Website Designs for Less Inventory Manager allow remote attackers to execute arbitrary SQL commands via the 1 pictable, 2 picfield, or 3 where parameter...

CVE-2006-5943: Undefined Security Weakness

Multiple SQL injection vulnerabilities in inventory/display/imager.asp in Website Designs for Less Inventory Manager allow remote attackers to execute arbitrary SQL commands via the 1 pictable, 2 picfield, or 3 where parameter...

CVE-2006-5942

CVE-2006-5942 describes a Cross-site scripting (XSS) vulnerability in the Inventory Manager component of Website Designs For Less. The flaw occurs in inventory/display/display_results.asp, exploitable via the category parameter to inject arbitrary script/HTML. Affected: Inventory Manager; Impact:...

CVE-2006-5943

CVE-2006-5943 describes multiple SQL injection vulnerabilities in inventory/display/imager.asp of Website Designs for Less Inventory Manager. The flaw allows remote attackers to inject SQL via the pictable, picfield, or where parameters, potentially leading to arbitrary SQL execution. The affecte...

CVE-2006-5942: Undefined Security Weakness

Cross-site scripting XSS vulnerability in inventory/display/displayresults.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter...

inventorymanager.txt

vendor site:http://www.websitedesignsforless.com/ product:Inventory Manager bug:injection sql & xss get risk:medium injection sql : http://site.com/inventory/inventory/display/imager.asp?pictable='sql http://site.com/inventory/inventory/display/imager.asp?pictable=inventory&picfield=sql...

Inventory Manager [injection sql & xss (get)]

vendor site:http://www.websitedesignsforless.com/ product:Inventory Manager bug:injection sql & xss get risk:medium injection sql : http://site.com/inventory/inventory/display/imager.asp?pictable='sql http://site.com/inventory/inventory/display/imager.asp?pictable=inventory&picfield=sql...

IBM AIX Inventory Scout本地任意文件覆盖漏洞

IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX的invscoutClientVPDSurvey在执行重要产品数据库调查时存在错误，可能允许本地攻击者覆盖任意文件的内容从而导致拒绝服务。 IBM AIX 5.3 IBM AIX 5.2 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 删除invscoutClientVPDSurvey的setuid位： chmod 555 /opt/IBMinvscout/bin/invscoutClientVPDSurvey 厂商补丁： IBM ---...

IBM AIX utilities multiple security vulnerabilities

Xclock buffer overflow; utape, cfgmgr, rdist, uucp, snappd, named8 and mkvg privilege escalation; slip.login and Inventory Scout arbitrary file overwrite...

CVE-2006-5002

Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 invscoutClientVPDSurvey allows attackers to overwrite arbitrary files via unspecified vectors...

CVE-2006-5002

Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 invscoutClientVPDSurvey allows attackers to overwrite arbitrary files via unspecified vectors...

CVE-2006-5002

CVE-2006-5002 affects IBM Inventory Scout for AIX 2.2.0.0–2.2.0.9 (invscoutClient_VPD_Survey). The vulnerability description states an unspecified flaw that allows attackers to overwrite arbitrary files via unspecified vectors, with partial integrity impact reported in CVSS data. Connected source...

CVE-2006-5002: Undefined Security Weakness

Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 invscoutClientVPDSurvey allows attackers to overwrite arbitrary files via unspecified vectors...