ZDI-10-112: Novell Access Manager Arbitrary File Upload Remote Code Execution Vulnerability

ZDI-10-112: Novell Access Manager Arbitrary File Upload Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-112 June 21, 2010 -- CVE ID: CVE-2010-0284 -- Affected Vendors: Novell -- Affected Products: Novell Access Manager -- Vulnerability Details: This...

Novell Access Manager Arbitrary File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to upload arbitrary files on vulnerable installations of Novell Access Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PortalModuleInstallManager component of the Novell Management Console which...

Directory traversal

Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console aka Access Management Console in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with...

McAfee UTM Firewall Help Reflected Cross-Site Scripting

Advisory Information Advisory ID: NGENUITY-2010-005 Date published: 6/9/2010 Vulnerability Information Class: Reflected Cross-Site Scripting XSS Software Description McAfee UTM Firewall Firmware 3.0.0 to 4.0.6 formerly SnapGear is the affected product line. More information can be found at...

Abyss Web Server X1 XSRF

Exploit for php platform in category web applications ======================== Abyss Web Server X1 XSRF ======================== Abyss Web Server X1 XSRF A cross-site request forgery vunlerability in the Abyss Web Server X1 management console can be exploited to change both the username and...

Authentication flaw

ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to 1 the JMX Management Console or 2 the Web Console...

JBoss EAP jmx authentication bypass with crafted HTTP request

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET...

Design/Logic Flaw

Unspecified vulnerability in sapstartsrv.exe in the SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and 7.20, as used in SAP NetWeaver 7.x and SAP Web Application Server 6.x and 7.x, allows remote attackers to cause a denial of service Management Console shutdown via a crafted request. NOTE: some of the...

CVE-2009-4603

CVE-2009-4603 affects SAP Kernel components sapstartsrv.exe across versions 6.40, 7.00, 7.01, 7.10, 7.11, 7.20 used in SAP NetWeaver 7.x and SAP Web Application Server 6.x/7.x. The vulnerability allows remote attackers to cause a denial of service (Management Console shutdown) via a crafted reque...

CentOS 4 / 5 : kernel (CESA-2008:0154)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

VMware Server ISAPI Extension Remote Denial Of Service (CVE-2008-3697)

The VMware server is a server virtualization platform that allows a single physical server to run multiple virtual machines simultaneously. The server provides a web-based management interface called VMware Management Console. For VMware server hosted on windows servers, the IIS server is used to...

HP Power Manager Remote Code Execution

Added: 11/06/2009 CVE: CVE-2009-2685 BID: 36933 OSVDB: 59684 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A stack-based buffer overflow in the HP Power Manager management web server allows...

Solaris Update for Solaris Management Console 121309-18

Check for the Version of Solaris Management Console OpenVAS Vulnerability Test Solaris Update for Solaris Management Console 121309-18 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Solaris Update for Solaris Management Console 121308-18

Check for the Version of Solaris Management Console OpenVAS Vulnerability Test Solaris Update for Solaris Management Console 121308-18 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Solaris Update for Solaris Management Console 121308-18

Check for the Version of Solaris Management Console OpenVAS Vulnerability Test Solaris Update for Solaris Management Console 121308-18 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Solaris Update for Solaris Management Console 121309-18

Check for the Version of Solaris Management Console OpenVAS Vulnerability Test Solaris Update for Solaris Management Console 121309-18 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Adobe JRun Management Console Multiple Vulnerabilities

The host is running Adobe JRun and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobejrunmultvulnwin.nasl 7573 2017-10-26 09:18:50Z cfischer $ Adobe JRun Management Console Multiple Vulnerabilities Windows Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

CVE-2008-7032

Web Management Console Cross-site request forgery CSRF vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrators and execute shell commands, as demonstrated using...

CVE-2008-7032

Web Management Console Cross-site request forgery CSRF vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrators and execute shell commands, as demonstrated using...

CVE-2008-7032

Technical details about CVE-2008-7032 are not publicly available in the provided documents. Monitor for updates from vendors and security feeds to obtain affected products/versions, impact, exploit status, and remediation.