CVE-2009-3178

Unspecified vulnerability in mm.exe in Symantec Altiris Deployment Solution 6.9 allows remote attackers to cause a denial of service via unknown attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.18, "Symantec Altiris Deployment Solution 6.9 DoS." NOTE: as of...

Code injection

Unspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, 1 "Kaspersky Online Antivirus Scanner 7.0 exploit Linux" and 2 "Kaspersky Online Antivirus Scanner 7.0 exploit Windows." NOTE: a...

Code injection

Multiple unspecified vulnerabilities in Symantec Altiris Deployment Solution 6.9 might allow remote attackers to execute arbitrary code via unknown client-side attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.17, as identified by 1 "Symantec Altiris Deployment...

Code injection

Unspecified vulnerability in mm.exe in Symantec Altiris Deployment Solution 6.9 allows remote attackers to cause a denial of service via unknown attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.18, "Symantec Altiris Deployment Solution 6.9 DoS." NOTE: as of...

CVE-2009-3178

Technical details about CVE-2009-3178 are not publicly available in the provided documents. The materials only reference an unspecified DoS claim for Symantec Altiris Deployment Solution 6.9; monitor for updates.

CVE-2009-3179

Multiple unspecified vulnerabilities in Symantec Altiris Deployment Solution 6.9 might allow remote attackers to execute arbitrary code via unknown client-side attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.17, as identified by 1 "Symantec Altiris Deployment...

CVE-2009-3179

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2009-3177

Unspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, 1 "Kaspersky Online Antivirus Scanner 7.0 exploit Linux" and 2 "Kaspersky Online Antivirus Scanner 7.0 exploit Windows." NOTE: a...

Ipswitch WS_FTP 12 Professional Remote Format String PoC

No description provided by source. !/usr/bin/perl nocoolnameforawsftppoc.pl AKA Ipswitch WSFTP 12 Professional Remote Format String 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 I really hate releasing proof of concepts. ASCII gets itchy after a few...

CVE-2009-3152

Multiple cross-site scripting XSS vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professional allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 btcode, and 3 bno parameters in a board view action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professional allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 btcode, and 3 bno parameters in a board view action...

CVE-2009-3152

CVE-2009-3152 affects NTSOFT BBS E-Market Professional (becommunity/community/index.php) with XSS vulnerabilities. The vulnerable vector involves user-controllable parameters in a board view action: page, bt_code, and b_no, allowing remote attackers to inject arbitrary script/HTML. The available ...

CVE-2009-3152

Multiple cross-site scripting XSS vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professional allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 btcode, and 3 bno parameters in a board view action...

CVE-2009-3111

The raddecode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service radiusd crash via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11. NOTE: this is a regression error related to...

CVE-2009-3111

The raddecode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service radiusd crash via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11. NOTE: this is a regression error related to...

Heap overflow

Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server TDS 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger heap corruption, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this...

Authorization

The modproxyftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pa...

Design/Logic Flaw

Multiple unspecified vulnerabilities in HP Performance Insight 5.3 allow remote attackers to have an unknown impact, related to 1 a "Remote exploit" on Windows platforms, and 2 a "Remote preauthentication exploit" on the Windows Server 2003 SP2 platform, as demonstrated by certain modules in...

Design/Logic Flaw

Multiple unspecified vulnerabilities in HP Performance Insight 5.3 on Windows allow attackers to obtain sensitive information via unknown vectors, as demonstrated by certain modules in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However,...

CVE-2009-3088

Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server TDS 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger heap corruption, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this...