Cisco Security Advisory: Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities Advisory ID: cisco-sa-20110914-cusm Revision 1.0 For Public Release 2011 September 14 1600 UTC GMT...

CVE-2011-2738

Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor Ionix ACM 2.3 and earlier,...

CVE-2011-2738

CVE-2011-2738 is a buffer overflow remote code execution vulnerability affecting Cisco Unified Service Monitor and Cisco Unified Operations Manager (and associated EMC Ionix products). Exploitation occurs by sending crafted packets to TCP port 9002, taking advantage of a flaw in handling SMARTS/ ...

Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities

...

Orion Network Performance Monitor 10.1.3 - CustomChart.aspx Cross-Site Scripting

Orion Network Performance Monitor 10.1.3 - CustomChart.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/49614/info Orion Network Performance Monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can explo...

Orion Network Performance Monitor 10.1.3 - 'CustomChart.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49614/info Orion Network Performance Monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code in the browser of an unsuspecting...

WebWatchBot Monitor 5.1.16 - Divide Zero Vulnerability

Document Title: =============== WebWatchBot Monitor 5.1.16 - Divide Zero Vulnerability Release Date: ============= 2011-09-05 Vulnerability Laboratory ID VL-ID: ==================================== 7 Common Vulnerability Scoring System: ==================================== 3.5 Product & Service...

Apache Tomcat 6.0.x < 6.0.33 Multiple Vulnerabilities

Binary data 6018.pasl...

Apache Tomcat 7.0.x < 7.0.20 'jsvc' Information Disclosure

Binary data 6007.pasl...

Sybase Adaptive Server Backup and Monitor Server NULL Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase Adaptive Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the way Sybase Backup and Monitor servers handles certain data in the login...

Sybase Adaptive Server Backup and Monitor Server Translation Array Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase Adaptive Server Enterprise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the way Sybase Backup and Monitor servers handle certain data in the...

Nmap NSE net: ntp-monlist

Obtains and prints an NTP server's monitor data. Monitor data is a list of the most recently used MRU having NTP associations with the target. Each record contains information about the most recent NTP packet sent by a host to the target including the source and destination addresses and the NTP...

[SECURITY] Fedora 13 Update: libcgroup-0.35.1-5.fc13

Control groups infrastructure. The tools and library help manipulate, contr ol, administrate and monitor control groups and the associated controllers...

Apple Plans Update to Address MacDefender Malware

Apple is planning to release an update specifically designed to protect users against the MacDefender malware that has been circulating for the last couple of weeks. The update for Mac OS X will automatically find and remove the malware on an infected machine and also will warn users if another...

Xymon Monitor Unspecified Multiple XSS Vulnerabilities

Xymon Monitor is prone to unspecified multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Xymon Monitor Unspecified Multiple Cross Site Scripting Vulnerabilities

This host is running Xymon Monitor and is prone to unspecified multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodxymonmonitorunspecifiedmultvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Xymon Monitor Unspecified Multiple Cross Site Scripting Vulnerabilities...

OllyDbg 2.01 alpha 3 Released !

OllyDbg 2.01 alpha 3 Released ! A major update with many new features. Here are the most important: - Support for multi-monitor configurations - Hardware breakpoints and fast command emulation now co-operate. That is, run trace rund at full speed up to and exceeding 500000 commands per second...

Apache Tomcat 7.0.x < 7.0.12 Multiple Vulnerabilities

Binary data 5882.pasl...

CVE-2011-1550

The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as...

Default configuration

The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as...