Citrix Provisioning Services StreamProcess.exe 0x40020010 Packet Handling RCE

The version of the StreamProcess.exe component included with the Citrix Provisioning Services installation running on the remote Windows host fails to validate user-supplied input in a packet type of 0x40020010 before copying it into a fixed length buffer on the stack. An unauthenticated, remote...

Citrix Provisioning Services Detection

The remote host is running Citrix Provisioning Services, a virtualization application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid51663; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptxrefname:"IAVT",...

Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow

This module exploits a stack buffer overflow in Citrix Provisioning Services 5.6. By sending a specially crafted packet to the Provisioning Services server, a fixed length buffer on the stack can be overflowed and arbitrary code can be executed. Module Options msf use...

Citrix Provisioning Services streamprocess.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The specific flaw exists within the streamprocess.exe component which listens by default on UDP port 6095...

CVE-2010-4324

Cross-site scripting XSS vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager aka IDM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager aka IDM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4324

CVE-2010-4324 concerns a Cross-site scripting (XSS) vulnerability in the Approval Form of the User Application in the Roles Based Provisioning Module of Novell Identity Manager. Affected software is IDM with RBPM module version 3.7.0 before 370D. The vulnerability allows remote attackers to injec...

CVE-2010-4324

Cross-site scripting XSS vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager aka IDM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4324: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager aka IDM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

HP Systems Insight Dynamics Detection

HP Systems Insight Dynamics is a infrastructure life cycle management suite that allows you to adjust, provision, and modify many different aspects of infrastructure. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50540; scriptversion"1.9"; scriptcvsdate"Date:...

CVE-2010-4121

The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020. NOTE: the vendor disputes this issue, stating that the...

CVE-2010-4121

The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020. NOTE: the vendor disputes this issue, stating that the...

CVE-2010-4121

The CVE-2010-4121 issue affects IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3: the TCP-to-ODBC gateway allows unauthenticated SQL statements, enabling remote modification, creation, or reading of database records via a session on TCP port 2020. The vulnerability is corroborated by mul...

CVE-2010-4121: Improper Authentication

The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020. NOTE: the vendor disputes this issue, stating that the...

PT-2010-5313 · Ibm +1 · Ibm Tivoli Provisioning Manager For Os Deployment +1

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Provisioning Manager for OS Deployment version 7.1.1.3 Description: The TCP-to-ODBC gateway does not require authentication for SQL statements, allowing remote attackers to modify, create, or read database records via a session on...

IBM Tivoli Provisioning Manager for OS Deployment TCP to ODBC Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary SQL queries on vulnerable installations of Tivoli Provisioning Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the TCP to ODBC gateway component which listens by default on TCP...

IBM TPM for OS Deployment 5.1.0.x - 'rembo.exe' Remote Buffer Overflow (Metasploit)

$Id: ibmtpmfosdoverflow.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Comptel Provisioning and Activation - index.jsp?error_msg_parameter Cross-Site Scripting

Comptel Provisioning and Activation - index.jsp?errormsgparameter Cross-Site Scripting source: https://www.securityfocus.com/bid/38534/info Comptel Provisioning and Activation is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. ...

Comptel Provisioning and Activation - 'index.jsp?error_msg_parameter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38534/info Comptel Provisioning and Activation is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

Comptel InstantLink Cross Site Scripting

-------------------------------------------------------------------- Exploit Title: Comptel InstantLink" XSS vulnerability Date: 24 Feb 2010 Author: thebluegenius Software Link: http://www.comptel.com/ProvisioningActivation/ Version: All CVE : NA --------------------------------------------------...