2420 matches found
CVE-2009-0344
Unspecified vulnerability in the Embedded Lights Out Manager ELOM on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor SP commands via unknown vectors, aka Bug ID...
[security bulletin] HPSBOV02364 SSRT080078 rev.1 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01539423 Version: 1 HPSBOV02364 SSRT080078 rev.1 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access NOTICE: The information in this Security Bulletin should be...
[security bulletin] HPSBUX02356 SSRT080051 rev.1 - HP-UX Running ftpd, Remote Privileged Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01525562 Version: 1 HPSBUX02356 SSRT080051 rev.1 - HP-UX Running ftpd, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release...
HP-UX ftpd PAM Authentication Configuration Weakness Authentication Bypass
According to its banner, the version of the HP-UX FTP server running on the remote host is at a patch level before PHNE38458. Such versions reportedly contain a vulnerability that in certain account configurations could be exploited by an anonymous remote attacker to gain privileged access. Note...
Apple Mac OS X AppleScript ARDAgent Shell Local Privilege Escalation Vulnerability
Description Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code with superuser privileges, completely compromising the affected computer. This issue is confirmed to affect Mac ...
CVE-2008-0706
Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password...
Design/Logic Flaw
ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to gain privileges by accessing administrative URIs, as demonstrated by rpSysAdmin.html...
FreeBSD : e2fsprogs -- heap buffer overflow (299e3f81-aee7-11dc-b781-0016179b2dd5)
Theodore Y. Ts'o reports : Fix a potential security vulnerability where an untrusted filesystem can be corrupted in such a way that a program using libext2fs will allocate a buffer which is far too small. This can lead to either a crash or potentially a heap-based buffer overflow crash. No known...
HPSBGN2301 SSRT071508 rev.1 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01311918 Version: 1 HPSBGN2301 SSRT071508 rev.1 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access NOTICE: The information in this Security Bullet...
[security bulletin] HPSBGN02298 SSRT071502 rev.1 - HP Quick Launch Button (QLB) Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01300486 Version: 1 HPSBGN02298 SSRT071502 rev.1 - HP Quick Launch Button QLB Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access NOTICE: The information in this Securi...
HP-UX PHNE_35483 : s700_800 11.00 sendmail(1M) 8.9.3 patch
s700800 11.00 sendmail1M 8.9.3 patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability may be exploited remotely to gain unauthorized access and create a Denial of Service...
MkPortal <= 1.1.1 reviews / gallery modules SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= MkPortal = 1.1.1 reviews / gallery modules SQL Injection Exploit ================================================================= ?php / i MkPortal "reviews" and "gallery"...
[security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage (SMH) for Linux, Remote Privileged Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01072894 Version: 1 HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage SMH for Linux, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as...
Microsoft Windows Ndistapi本地拒绝服务漏洞
Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的NDISTAPI.sys驱动实现机制上存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。 Windows的NDISTAPI.sys驱动是内核态组件，但允许非特权用户的访问，因此任意用户态应用程序都可以向这个设备写入数据： Ndistapi.sys Windows XP SP2 ; stdcall NdisTapiDispatchx, x .text:000115E8 NdisTapiDispatch@8 proc near ; DATA XREF:...
CA BrightStor ARCserve Tape Engine Buffer Overflow
This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup r11.1 - r11.5. By sending a specially crafted DCERPC request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current...
CVE-2007-0139
Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 for OpenVMS VAX, allows attackers to obtain "unintended privileged access to data and system resources" via unspecified vectors, related to 1...
USN-338-1: MySQL vulnerabilities
Dmitri Lenev discovered that arguments of setuid SQL functions were evaluated in the security context of the functions' definer instead of its caller. An authenticated user with the privilege to call such a function could exploit this to execute arbitrary statements with the privileges of the...
CVE-2006-4370
Affected software / component: Alt-N WebAdmin (versions 3.2.3–3.2.4 with MDaemon 9.0.5; possibly earlier). Root cause / vulnerability: A flaw in WebAdmin’s handling of authentication/authorization via the userlist.wdm mechanism allows a remote authenticated domain administrator to change a global...
CVE-2006-2580
Multiple unspecified vulnerabilities in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, and 7.50 allow remote attackers to gain privileged access, execute arbitrary commands, or create arbitrary files via unknown vectors...
CVE-2006-2580
Technical details about CVE-2006-2580 are not publicly available in the provided documents; no specific affected product versions, root cause, or exploit information are disclosed here. Monitor for updates.