The vulnerability of the Windows operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the Remote Procedure Call LRPC of Microsoft allows attackers to circumvent security restrictions. This vulnerability relates to the leakage of messages sent by the LRPC server to clients, if those messages contain data that is not intended for such messages. RPC considers suc...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub41162C” at address “0x00411688”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x13 “0x0040C95C”. This vulnerability allows a malicious attacker to execute arbitrary code with...

The vulnerability of the Linter Bastion database management system allows a malicious individual to trigger a service failure.

In the “sub416B78” procedure, there is no check for the correctness of input data. This may lead to buffer overflows when processing the RPC call with the number 0x10 “0x0040C284”, resulting in corrupted data that is necessary for the proper functioning of the application. This vulnerability allo...

The vulnerability of the Linter Bastion database management system allows a malicious individual to cause errors in the program’s operation or execute arbitrary code.

The design of the RPC server linstmgr.exe is based on the assumption that client applications will always send valid data and behave as expected. Sending invalid data may cause errors in the program’s operation or may execute arbitrary code...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub40FF03” at address “0x004100E0”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of RPC calls numbered 0x11 “0x0040C4CB”. This vulnerability allows a malicious attacker to execute arbitrary code with...

The vulnerability of the Linter Bastion database management system allows a malicious individual to control any service on a remote computer.

The RPC call with number 0x0A "0x0040AF25" allows a malicious individual to control any Windows service on a remote computer where linstmgr.exe is running, even though they have no authority to do so. This could enable the malicious individual to interfere with the normal operation of the service...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub0040F059” at address “0x0040F092”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x15 “0x0040CD91”. This vulnerability allows a malicious attacker to execute arbitrary code wi...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges or to disrupt the operation of the program.

In the procedure “sub410855” for addresses “0x00410C32”, “0x00410D0C”, “0x00410D4B”, “0x00410DCF”, “0x00410EB1”, “0x00410F98”, “0x00410FEC”, “0x00411141”, there is no verification of the correctness of the input data. This may lead to buffer overflows during the processing of RPC calls with numbe...

The vulnerability of the Linter Bastion database management system allows a malicious individual to disrupt the normal operation of the database management system.

The RPC call with number 0x12 "0x0040C73C" allows a malicious individual to alter the configuration of the kernel startup file of the Linter Bastion database management system, thereby potentially disrupting the normal operation of the database management system...

The vulnerability of the Linter Bastion database management system allows a malicious individual to replace and execute the executable file.

If the database management system Linter Bastion was installed without the “loltp.exe” module being installed, a malicious individual can place any executable file named “loltp.exe” in a directory that will be scanned by the executable file loader. Then, using RPC calls with numbers 0x1A...

The vulnerability of the Linter Bastion database management system allows a malicious individual to increase their privileges.

The vulnerability in the RPC server linstmgr.exe was due to an erroneous assumption that only users with administrative privileges have access to connect to the server. This oversight, combined with the fact that the RPC server operates with the “SYSTEM” user account, allows for an increase in...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary services on a remote computer.

RPC call of number 0x08 "0x0040AB4E" allows a malicious individual to execute an arbitrary Windows service on a remote computer where linstmgr.exe is running, without having the necessary permissions. As a result, a service with vulnerabilities can be executed by the malicious individual, and tho...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub40FBE6” at address “0x0040FC0A”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x1A “0x0040DB0F”. This vulnerability allows a malicious attacker to execute arbitrary code with...

The vulnerability of the Linter Bastion database management system allows a malicious individual to disrupt the normal operation of the database management system.

The RPC call with number 0x19 "0x0040D8F0" allows a malicious individual to alter the configuration of the kernel startup file of the Linter Bastion database management system, thereby potentially disrupting the normal operation of the database management system...

Six Apart Movable Type Pro and Advanced SQL Injection Vulnerabilities

Six Apart Movable Type MT is a blogging system from Six Apart Inc. in the U.S. Pro and Advanced are the professional and advanced versions of the system, respectively. A SQL injection vulnerability exists in Six Apart MT Pro and Advanced. The vulnerability can be exploited to execute arbitrary SQ...

CVE-2016-1543

The RPC API in the RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure...

CVE-2016-1542

The RPC API in RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure...

SOL26738102 - BIG-IP APM SSO vulnerability CVE-2016-3687

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

Cisco Application Policy Infrastructure Controller Binary Files Privilege Escalation Vulnerability

A vulnerability in the installation procedure for Cisco Application Policy Infrastructure Controller APIC devices could allow an authenticated, local attacker to gain root-level privileges. The vulnerability is due to the use of incorrect installation and permissions settings for binary files...

EMC Isilon OneFS and EMC IsilonSD Man-in-the-Middle Attack Vulnerabilities

EMC Isilon OneFS and EMC IsilonSD Edge are both products from EMC Corporation USA. The former is a distributed file system that supports EMC Isilon a horizontally scalable storage system, and the latter is a data management solution for simplifying data management in remote offices or edge...