CVE-2009-0216

GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module...

CVE-2009-0345

CVE-2009-0345 affects Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM). The vulnerability lies in ELOM prior to SP/BMC firmware 3.20, enabling remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor (SP) commands via unknown vectors. The iss...

CVE-2009-0344

The CVE-2009-0344 entry concerns an unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM). Affected firmware is SP/BMC before version 3.20. The issue allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor (SP)...

CVE-2009-0344

Unspecified vulnerability in the Embedded Lights Out Manager ELOM on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor SP commands via unknown vectors, aka Bug ID...

CVE-2009-0344: Undefined Security Weakness

Unspecified vulnerability in the Embedded Lights Out Manager ELOM on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor SP commands via unknown vectors, aka Bug ID...

CVE-2009-0345: Undefined Security Weakness

Unspecified vulnerability in the Embedded Lights Out Manager ELOM on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor SP commands via unknown vectors, aka Bug ID...

[security bulletin] HPSBOV02364 SSRT080078 rev.1 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01539423 Version: 1 HPSBOV02364 SSRT080078 rev.1 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access NOTICE: The information in this Security Bulletin should be...

[security bulletin] HPSBUX02356 SSRT080051 rev.1 - HP-UX Running ftpd, Remote Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01525562 Version: 1 HPSBUX02356 SSRT080051 rev.1 - HP-UX Running ftpd, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release...

HP-UX ftpd PAM Authentication Configuration Weakness Authentication Bypass

According to its banner, the version of the HP-UX FTP server running on the remote host is at a patch level before PHNE38458. Such versions reportedly contain a vulnerability that in certain account configurations could be exploited by an anonymous remote attacker to gain privileged access. Note...

Apple Mac OS X AppleScript ARDAgent Shell Local Privilege Escalation Vulnerability

Description Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code with superuser privileges, completely compromising the affected computer. This issue is confirmed to affect Mac ...

CVE-2008-0706

Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password...

Design/Logic Flaw

ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to gain privileges by accessing administrative URIs, as demonstrated by rpSysAdmin.html...

FreeBSD : e2fsprogs -- heap buffer overflow (299e3f81-aee7-11dc-b781-0016179b2dd5)

Theodore Y. Ts'o reports : Fix a potential security vulnerability where an untrusted filesystem can be corrupted in such a way that a program using libext2fs will allocate a buffer which is far too small. This can lead to either a crash or potentially a heap-based buffer overflow crash. No known...

HPSBGN2301 SSRT071508 rev.1 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01311918 Version: 1 HPSBGN2301 SSRT071508 rev.1 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access NOTICE: The information in this Security Bullet...

[security bulletin] HPSBGN02298 SSRT071502 rev.1 - HP Quick Launch Button (QLB) Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01300486 Version: 1 HPSBGN02298 SSRT071502 rev.1 - HP Quick Launch Button QLB Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access NOTICE: The information in this Securi...

HP-UX PHNE_35483 : s700_800 11.00 sendmail(1M) 8.9.3 patch

s700800 11.00 sendmail1M 8.9.3 patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability may be exploited remotely to gain unauthorized access and create a Denial of Service...

MkPortal <= 1.1.1 reviews / gallery modules SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= MkPortal = 1.1.1 reviews / gallery modules SQL Injection Exploit ================================================================= ?php / i MkPortal "reviews" and "gallery"...

[security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage &#40;SMH&#41; for Linux, Remote Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01072894 Version: 1 HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage SMH for Linux, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as...

CVE-2007-1727: Undefined Security Weakness

Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, 7.50, and 7.51 allows remote authenticated users to access certain privileged "facilities" via unspecified vectors...

Microsoft Windows Ndistapi本地拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的NDISTAPI.sys驱动实现机制上存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。 Windows的NDISTAPI.sys驱动是内核态组件，但允许非特权用户的访问，因此任意用户态应用程序都可以向这个设备写入数据： Ndistapi.sys Windows XP SP2 ; stdcall NdisTapiDispatchx, x .text:000115E8 NdisTapiDispatch@8 proc near ; DATA XREF:...