Solaris 9 (x86) : 138536-01

Service Provisioning System 6.0: N1 SPS Webserver 7 Plug-in Patch. Date this patch was last updated by Sun : Jul/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 138536-01 (deprecated)

Service Provisioning System 6.0: N1 SPS Webserver 7 Plug-in Patch. Date this patch was last updated by Sun : Jul/18/08 This plugin has been deprecated and either replaced with individual 138536 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2008-3425

The vulnerability described in CVE-2008-3425 affects the Sun Java System Web Server 7.0 plugin within Sun N1 Service Provisioning System (SPS) versions 5.2 and 6.0. The issue allows remote authenticated SPS users to gain administrative access to the web server via unspecified attack vectors. The ...

CVE-2008-3425: Improper Authentication

Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System SPS 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors...

Sun Java System Web Server Search Module XSS

The remote host is running Sun Java System Web Server, a Java application for user provisioning and identity auditing in enterprise environments. The version of Sun Java System Web Server installed on the remote host fails to sanitize user-supplied input to its Search module before using it to...

IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) allows buffer overflow via HTTP request

Overview The IBM Tivoli Provisioning Manager for OS Deployment TPMfOSD contains a buffer overflow vulnerability in the web server component. This vulnerability may allow an attacker to execute arbitrary code with SYSTEM privileges or cause a denial of service. Description IBM Tivoli Provisioning...

IBM Tivoli Provisioning Manager OS Deployment < 5.1.0.3 Interim Fix 3 HTTP Server Logging Functionality Remote Overflow

The remote host is running IBM Tivoli Provisioning Manager for OS Deployment, for remote deployment and management of operating systems. There is a buffer overflow vulnerability in the software's HTTP server, in its logging functionality. An unauthenticated, remote attacker may be able to leverag...

IBM Tivoli Provisioning Manager for OS Deployment HTTP Server远程缓冲区溢出漏洞

BUGTRAQ ID: 27387 CVECAN ID: CVE-2008-0401 IBM Tivoli Provisioning Manager for OS Deployment是一款网络引导服务器，方便集中管理联网的工作站。 Tivoli Provisioning Manager for OS Deployment的Web服务器组件中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果远程攻击者向服务器的TCP/443端口提交了恶意的HTTP请求的话，就可能触发这个溢出，导致以系统权限执行任意代码。 IBM Tivoli Provisioning Manager for...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...

Tivoli Provisioning Manager for OS Deployment HTTP server buffer overflow

Added: 01/28/2008 CVE: CVE-2008-0401 BID: 27387 OSVDB: 40481 Background Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management. Problem A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning...

IBM Tivoli Provisioning Manager for OS Deployment buffer overflow

Buffer overflow on oversized HTTP request...

CVE-2008-0401

Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment TPMfOSD before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an HTTP request with a long method...

Buffer overflow

Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment TPMfOSD before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an HTTP request with a long method...

CVE-2008-0401

CVE-2008-0401 affects IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) HTTP server. A boundary error in the HTTP server’s logging functionality allows remote unauthenticated attackers to send crafted HTTPS requests (port 443/tcp) with a long method string, triggering a buffer overflow ...

CVE-2008-0401: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment TPMfOSD before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an HTTP request with a long method...

Tivoli Provisioning Manager < 5.1.0.3 DoS

Binary data 4354.prm...

Sun Java System Identity Manager Multiple XSS

The remote host is running Sun Java System Identity Manager, a Java application for user provisioning and identity auditing in enterprise environments. The version of Identity Manager installed on the remote host fails to sanitize user-supplied input to various JSP scripts before using it to...

PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager

PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager Vulnerability found: 11th June 2007 Vendor informed: 18th June 2007 Severity: Medium Product description: "Identity Manager allows customers to...