CVE-2008-1592

MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels."...

Design/Logic Flaw

MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels."...

CVE-2008-1592

MQSeries 5.1 in IBM WebSphere MQ 5.1–5.3.1 on HP NonStop and Tandem NSK allows local users to bypass access restrictions for administrative tasks via runmqsc, without requiring mqm group membership (Pathway panels). Impact is partial confidentiality, integrity, and availability. No explicit remed...

CVE-2008-1592

MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels."...

IBM WebSphere MQ for HP NonStop缺少访问认证漏洞

BUGTRAQ ID: 28235 IBM WebSphere MQ用于在企业中提供消息传输服务。 WebSphere MQ处理访问验证时存在漏洞，在MQSeries for NonStop V5.1中，非mqm组的用户可以使用Pathway面板和runmqsc启动和停止信道，或执行其他管理任务， IBM WebSphere MQ for HP NonStop 5.3.1 IBM WebSphere MQ for HP NonStop 5.3 IBM WebSphere MQ for HP NonStop 5.1 厂商补丁： IBM ---...

IBM WebSphere MQ Listener Detection

The remote service is an IBM WebSphere MQ Listener, responsible for detecting connections from incoming MQ channels and routing them to a queue manager. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid31411;...

CVE-2007-6705

The WebSphere MQ XA 5.3 before FP13 and 6.0.x before 6.0.2.1 client for Windows, when running in an MTS or a COM+ environment, grants the PROCESSDUPHANDLE privilege to the Everyone group upon connection to a queue manager, which allows local users to duplicate an arbitrary handle and possibly...

Privilege escalation

The WebSphere MQ XA 5.3 before FP13 and 6.0.x before 6.0.2.1 client for Windows, when running in an MTS or a COM+ environment, grants the PROCESSDUPHANDLE privilege to the Everyone group upon connection to a queue manager, which allows local users to duplicate an arbitrary handle and possibly...

CVE-2007-6705

The WebSphere MQ XA 5.3 before FP13 and 6.0.x before 6.0.2.1 client for Windows, when running in an MTS or a COM+ environment, grants the PROCESSDUPHANDLE privilege to the Everyone group upon connection to a queue manager, which allows local users to duplicate an arbitrary handle and possibly...

CVE-2007-6705

The WebSphere MQ XA 5.3 before FP13 and 6.0.x before 6.0.2.1 client for Windows, when running in an MTS or a COM+ environment, grants the PROCESSDUPHANDLE privilege to the Everyone group upon connection to a queue manager, which allows local users to duplicate an arbitrary handle and possibly...

CVE-2007-6705

The CVE-2007-6705 issue affects WebSphere MQ XA clients: WebSphere MQ XA 5.3 (pre-FP13) and 6.0.x (pre-6.0.2.1) for Windows. When running in an MTS or COM+ environment, the process grants the PROCESS_DUP_HANDLE privilege to the Everyone group upon connection to a queue manager, enabling local use...

CVE-2008-1130

Unspecified vulnerability in IBM WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 allows attackers to bypass access restrictions for a queue manager via a SVRCONN MQ client channel...

Design/Logic Flaw

Unspecified vulnerability in IBM WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 allows attackers to bypass access restrictions for a queue manager via a SVRCONN MQ client channel...

WebSphere MQ Server Detection

Binary data 4410.prm...

CVE-2008-1130

Unspecified vulnerability in IBM WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 allows attackers to bypass access restrictions for a queue manager via a SVRCONN MQ client channel...

WebSphere MQ Server Detection

Binary data 4409.prm...

CVE-2008-1130

IBM WebSphere MQ vulnerable to authentication bypass on queue-manager access via an SVRCONN (MQ client) channel. Affected: WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 (also described as 5.1–5.3 and 6.0). Root cause: error in authentication check for a security exit/connection han...

myphp30-sql.txt

================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date: 03/01/2008 dd,mm,yyyy...

Memory corruption

Multiple unspecified vulnerabilities in IBM WebSphere MQ 6.0 have unknown impact and remote attack vectors involving "memory corruption." NOTE: as of 20071116, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is bein...

CVE-2007-6044

Multiple unspecified vulnerabilities in IBM WebSphere MQ 6.0 have unknown impact and remote attack vectors involving "memory corruption." NOTE: as of 20071116, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is bein...