EUVD-2012-0315

Malware in sbrugna...

Quest Toad for Oracle Explain Plan Display ActiveX Control (QExplain2.dll 6.6.1.1115) Remote File Creation / Overwrite PoC

No description provided by source. !-- Quest Toad for Oracle Explain Plan Display ActiveX Control QExplain2.dll 6.6.1.1115 Remote File Creation / Overwrite vendor site: http://www.quest.com/ file tested: QuestToad-Development-Suite-for-Oracle110R2.exe CLSID: F7014877-6F5A-4019-A3B2-74077F2AE126...

CVE-2012-0279

Quest Toad for Data Analysts 3.0.1 uses weak permissions Everyone: Full Control for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file...

CVE-2012-0279

Quest Toad for Data Analysts 3.0.1 uses weak permissions Everyone: Full Control for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file...

CVE-2012-0279

CVE-2012-0279 affects Quest Toad for Data Analysts 3.0.1. The vulnerability arises from weak permissions (Everyone: Full Control) on the %COMMONPROGRAMFILES%\Quest Shared directory, enabling local users to place a Trojan horse file and gain privileges. Root cause: overly permissive directory perm...

CVE-2012-0279: Undefined Security Weakness

Quest Toad for Data Analysts 3.0.1 uses weak permissions Everyone: Full Control for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file...

PT-2012-2458

Name of the Vulnerable Software and Affected Versions Quest Toad for Data Analysts version 3.0.1 Description The issue concerns weak permissions set for the %COMMONPROGRAMFILES%Quest Shared directory, where everyone has full control. This weakness allows local users to potentially gain privileges...

Quest Toad for Oracle Explain Plan Display ActiveX Control (QExplain2.dll 6.6.1.1115) Remote File Creation / Overwrite

!-- Quest Toad for Oracle Explain Plan Display ActiveX Control QExplain2.dll 6.6.1.1115 Remote File Creation / Overwrite vendor site: http://www.quest.com/ file tested: QuestToad-Development-Suite-for-Oracle110R2.exe CLSID: F7014877-6F5A-4019-A3B2-74077F2AE126 Progid: QExplain2.ExplainPlanDisplay...

Quest Toad for Oracle ActiveX unauthorized access

It's possible to access files via unsafe methods...

Quest Toad For Oracle Explain Plan Display File Creation / Overwrite

try obj.SaveToFile"c:\windows\win.ini"; catche try obj.SaveToFile"../../../../../../../../../../windows/win.ini"; catche original url: http://retrogod.altervista.org/9sgquesttoadpoc.htm...

Quest Toad for Oracle Explain Plan Display ActiveX Control - QExplain2.dll 6.6.1.1115 Remote File Creation Overwrite

Quest Toad for Oracle Explain Plan Display ActiveX Control - QExplain2.dll 6.6.1.1115 Remote File Creation Overwrite try obj.SaveToFile"c:\windows\win.ini"; catche try obj.SaveToFile"../../../../../../../../../../windows/win.ini"; catche...

Quest Toad for Oracle Explain Plan Display ActiveX Control Remote File Creation

Exploit for windows platform in category remote exploits try obj.SaveToFile"c:\windows\win.ini"; catche try obj.SaveToFile"../../../../../../../../../../windows/win.ini"; catche 0day.today 2018-03-09...

Quest Toad for Oracle Explain Plan Display ActiveX Control - 'QExplain2.dll 6.6.1.1115' Remote File Creation / Overwrite

try obj.SaveToFile"c:\windows\win.ini"; catche try obj.SaveToFile"../../../../../../../../../../windows/win.ini"; catche...