Symantec Sygate Management Server: SMS Authentication Servlet SQL Injection

SUMMARY A SQL injection vulnerability in Symantec's Sygate Management Server SMS version 4.1, build 1417 and earlier could potentially allow a remote or local attacker to gain administrative privileges to the SMS server. Risk Impact High Remote Access | Yes ---|--- Local Access | Yes Authenticati...

[Full-disclosure] Rockliffe Mailsite User Enumeration Flaw

Synopsis: Rockliffe's Mailsite Mail Management Server User Enumeration Flaw. Product: Rockliffe Mailsite http://www.rockliffe.com Version: Confirmed on Mailsite = 7.0.3.1 Author: Josh Zlatin-Amishav Date: January 4, 2006 Background: Rockliffe MailSite secure email server software and MailSite MP...

iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability

Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability iDefense Security Advisory 12.14.05 www.idefense.com/application/poi/display?id=354&type=vulnerabilities December 14, 2005 I. BACKGROUND Trend Micro Inc.'s ServerProtect provides antivirus scanning with centralized management of...

Microsoft Internet Explorer Unspecified SharePoint Portal Services Log Sink ActiveX Vulnerability

Description Microsoft Internet Explorer is prone to an unspecified vulnerability in the SharePoint Portal Service Log Sink ActiveX control. The vendor has not released any further information about this vulnerability other than to state the "kill bit" has been set on unsupported versions of the...

CVE-2003-0002

Cross-site scripting vulnerability XSS in ManualLogin.asp script for Microsoft Content Management Server MCMS 2001 allows remote attackers to execute arbitrary script via the REASONTXT parameter...

CVE-2002-0396

The web management server for Red-M 1050 Bluetooth Access Point does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session...

CVE-2004-0728

The Remote Control Client service in Microsoft's Systems Management Server SMS 2.50.2726.0 allows remote attackers to cause a denial of service crash via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address...

Microsoft Systems Management Server client memory corruption

Malcrafted data to TCP/2702 port causes memory corruption...

MS SMS DOS Proof-of-concept code and Snort sig

Advisory Name : Microsoft Systems Management Server Remote Denial Of Service Vulnerability Release Date : 22 July, 2004 Application : Microsoft Systems Management Server SMS Author : MacDefender / SRR Project Group of Ready Response [email protected] Overview In response to a remote denial of...

CVE-2004-0728

The Remote Control Client service in Microsoft's Systems Management Server SMS 2.50.2726.0 allows remote attackers to cause a denial of service crash via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address...

CVE-2004-0728

The CVE-2004-0728 entry describes a DoS in Microsoft SMS: the Remote Control Client Service (SMS 2.50.2726.0) can crash when receiving a specially crafted TCP packet to port 2702, causing invalid memory read/write. Documents confirm the component involved (Remote Control Service) and the vulnerab...

[HV-MED] DoS in Microsoft SMS Client

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Denial of Service DoS in Microsoft SMS Client Classification: =============== Level: low-MED-high-crit ID: HEXVIEW200407141 Overview: ========= Microsoft Systems Management Server provides configuration management solution for Windows platform. It is...

Microsoft Systems Management Server 1.22.0 - Remote Denial of Service

Microsoft Systems Management Server 1.22.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/10726/info Reportedly Microsoft Systems Management Server is vulnerable to a remote denial of service vulnerability. This issue is due to a failure of the affected server to handle...

Microsoft Systems Management Server 1.2/2.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10726/info Reportedly Microsoft Systems Management Server is vulnerable to a remote denial of service vulnerability. This issue is due to a failure of the affected server to handle exceptional conditions. Successful exploitation of this issue will allow a...

Dell OpenManage Server Administrator Detection

Dell OpenManage Server Administrator OMSA, a systems management server, is running on the remote host. %NASLMINLEVEL 70300 This script was rewritten by Tenable Network Security include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid12295; scriptversion"1.23";...

HP Web Jetadmin 7.5.2456 - Printer Firmware Update Script Arbitrary File Upload

source: https://www.securityfocus.com/bid/9971/info HP Web Jetadmin is prone to an issue which may permit remote users to upload arbitrary files to the management server. This issue exists in the printer firmware update script. Given the ability to place arbitrary files on the server to an...

Cisco IDS Device Manager Detection

This host is running the Cisco IDS device manager. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11689; scriptversion "1.16"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Cisco IDS Device Manager Detection"; scriptsummaryenglish:"Cisco IDS Management Web Serve...

CVE-2002-0700

Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server MCMS 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL...

CVE-2002-0718

Web authoring command in Microsoft Content Management Server MCMS 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function."...

CVE-2002-0719

SQL injection vulnerability in the function that services for Microsoft Content Management Server MCMS 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files...