NetIQ Security Solutions for ISeries SafeShellExecute Stack Buffer Overflow (CVE-2015-0795)

A vulnerability has been reported in NetIQ Security Solutions for ISeries. The vulnerability is due to a stack buffer overflow in the NetIQExecObject.NetIQExec ActiveX Control when processing parameters to the SafeShellExecute function. A remote attacker can exploit this vulnerability by enticing...

Micro Focus NetIQ Security Solutions for iSeries Stack Buffer Overflow Vulnerability

NetIQ Security Solutions for NetIQ, Inc. Micro Focus NetIQ Security Solutions for iSeries version 8.1 The NetIQExec.dll file in the NetIQExecObject.NetIQExec.1 ActiveX control's ' SafeShellExecute' method in the NetIQExecObject.NetIQExec.1 ActiveX control in the NetIQExec.dll file contains a...

CVE-2015-0795

Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699...

Stack overflow

Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699...

CVE-2015-0795

CVE-2015-0795 affects NetIQ Security Solutions for ISeries. The NetIQExecObject.NetIQExec.1 ActiveX Control’s SafeShellExecute method in NetIQExec.dll contains a stack-based buffer overflow when processing long parameters, enabling remote code execution in affected installations of version 8.1. T...

NetIQ Security Solutions for ISeries NetIQExecObject.NetIQExec.1 SafeShellExecute Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetIQ Security Solutions for ISeries. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kernel-iseries-2.4.18 package of the Red Hat Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

IBM iSeries AS400 LDAP Server Remote Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12991/info A remote information disclosure issue affects IBM iSeries AS400 LDAP Server. This issue is due to a failure of the application to properly secure sensitive information. An authenticated attacker may leverage th...

CentOS 4 : wireshark (CESA-2007:0709)

New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...

Scientific Linux Security Update : wireshark on SL5.x i386/x86_64

Several denial of service bugs were found in Wireshark's HTTP, iSeries, DCP ETSI, SSL, MMS, DHCP and BOOTP protocol dissectors. It was possible for Wireshark to crash or stop responding if it read a malformed packet off the network. CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392,...

IBM iSeries FTP Service Detection

Binary data 6335.prm...

IBM iSeries Compliance Checks

Binary data iseriescompliancecheck.nbin...

IBM iSeries Credentials

This script just sets global variables iSeries login and password and does not perform any security check. TRUSTED...

IBM iSeries Server Detection

Binary data ibmidetect.nbin...

IBM iSeries Default Password

Binary data ibmidefaultpassword.nbin...

IBM iSeries Cached Passwords

Binary data ibmicachedpassword.nbin...

Wireshark crashes when inspecting iSeries traffic

Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of service crash via crafted iSeries capture files that trigger a SIGTRAP...

wireshark SSL and OS/400 trace flaws

Multiple buffer overflows in Wireshark formerly Ethereal 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 the SSL dissector or 2 the iSeries OS/400 Communication trace file parser...

[SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1414-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 27, 2007 http://www.debian.org/security/faq -...

wireshark security and bug fix update

0.99.6-EL4.1.0.1 - Add oracle-ocfs2-network.patch 0.99.6-1 - upgrade to 0.99.6 - Wireshark could crash when dissecting an HTTP chunked response - Wireshark could crash while reading iSeries capture files - Wireshark could exhaust system memory while reading a malformed DCP ETSI packet - Wireshark...