8295 matches found
Adobe Photoshop Elements 8.0 - Active File Monitor Privilege Escalation
Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Tested on Microsoft Windows XP SP3 The "Adobe Active File Monitor V8" service is installed with an improper securi...
[SECURITY] Fedora 10 Update: kdebase-workspace-4.3.1-1.fc10
The KDE Workspace consists of what is the desktop of the KDE Desktop Environment. This package contains: khotkeys a hotkey daemon klipper a cut & paste history utility kmenuedit the menu editor krandrtray resize and rotate X screens krunner a command run interface ksysguard a performance monitor...
Epson Status Monitor weak permissions
Weak permissions for EPSONEBRPCV401 and EPSONPMRPCV401 servicse executables...
EPSON Status Monitor 3 - Local Privilege Escalation
EPSON Status Monitor 3 - Local Privilege Escalation ------- EPSON Status Monitor 3 local privilege escalation vulnerability -------- by Nine:Situations:Group::bruiser site: http://retrogod.altervista.org/ -------------------------------------------------------------------------------- After that...
EPSON Status Monitor 3 Local Privilege Escalation Vulnerability
No description provided by source. ------- EPSON Status Monitor 3 local privilege escalation vulnerability -------- by Nine:Situations:Group::bruiser site: http://retrogod.altervista.org/ -------------------------------------------------------------------------------- After that pyrokinesis found...
EPSON Status Monitor 3 - Local Privilege Escalation
------- EPSON Status Monitor 3 local privilege escalation vulnerability -------- by Nine:Situations:Group::bruiser site: http://retrogod.altervista.org/ -------------------------------------------------------------------------------- After that pyrokinesis found:...
EPSON Status Monitor 3 Local Privilege Escalation Vulnerability
Exploit for unknown platform in category local exploits =============================================================== EPSON Status Monitor 3 Local Privilege Escalation Vulnerability =============================================================== ------- EPSON Status Monitor 3 local privilege...
EPSON Status Monitor 3 Privilege Escalation
------- EPSON Status Monitor 3 local privilege escalation vulnerability -------- by Nine:Situations:Group::bruiser site: http://retrogod.altervista.org/ -------------------------------------------------------------------------------- After that pyrokinesis found:...
openSUSE Security Update : ganglia-monitor-core (ganglia-monitor-core-894)
A stack-based buffer overflow in ganglia's buffer processpath function has been fixed. CVE-2009-0241 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE Security Update : ganglia-monitor-core (ganglia-monitor-core-894)
A stack-based buffer overflow in ganglia's buffer processpath function has been fixed. CVE-2009-0241 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
Microsoft Virtual PC和Virtual Server本地权限提升漏洞(MS09-033)
BUGTRAQ ID: 35601 CVECAN ID: CVE-2009-1542 Microsoft Virtual PC和Virtual Server都是流行的虚拟机工具,允许在同一台计算机上运行多个操作系统。 Virtual PC和Virtual Server在Virtual Machine Monitor中执行特定指令时没有正确地验证权限级别,可能允许攻击者在承载的Guest操作系统中以提升的权限执行代码。攻击者可随后安装程序;查看、更改或删除数据;或者创建拥有完全用户权限的新帐户。 Microsoft Virtual PC 2007 SP1 Microsoft Virtual...
CVE-2009-1542
The Virtual Machine Monitor VMM in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges...
PRTG Traffic Grapher Monitor_Bandwidth函数跨站脚本漏洞
BUGTRAQ ID: 35128 CVECAN ID: CVE-2009-1849 PRTG Traffic Grapher是一个使用方便的Windows软件,能够对网络带宽的使用进行监控和分类。 PRTG Traffic Grapher没有正确地验证对MonitorBandwidth函数所提交的输入参数,如果用户受骗跟随了包含有恶意脚本的链接的话,就会导致在用户浏览器会话中执行跨站脚本。 Paessler PRTG Traffic Grapher 6.2.2.977 厂商补丁: Paessler -------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
PRTG Traffic Grapher 'Monitor_Bandwidth' Cross Site Scripting Vulnerability
PRTG Traffic Grapher is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...
openSUSE 10 Security Update : ganglia-monitor-core (ganglia-monitor-core-6259)
A stack-based buffer overflow in ganglia's buffer processpath function has been fixed. CVE-2009-0241 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
CVE-2009-1161
CVE-2009-1161 describes a directory traversal vulnerability in CiscoWorks Common Services (CWCS) 3.0.x–3.2.x on Windows when the TFTP service is enabled. An unauthenticated remote attacker could access arbitrary files via CWCS TFTP, affecting multiple Cisco products that rely on CWCS (e.g., Unifi...
Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability Advisory ID: cisco-sa-20090520-cw http://www.cisco.com/warp/public/707/cisco-sa-20090520-cw.shtml Revision 1.0 For Public Release 2009 May 20 1600 UTC GMT Summary =======...
MDVA-2008:040 : monitor-edid
This update adds support for getting EDID information from a different DDC port and uses it by default to also get port 1. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...
CentOS 3 / 4 : openssh (CESA-2006:0738)
Updated openssh packages that fix an authentication flaw are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the...
MDVA-2008:059 : drakx-kbd-mouse-x11
An updated XFdrake is available that corrects a number of bugs: - never write a ModeLine when using the fglrx driver bug 30934 - if the EDID gives a valid EISAID, a valid 16/10 preferred resolution, but no HorizSync/VertRefresh, use a generic flat panel HorizSync/VertRefresh needed for...