216 matches found
Ubuntu Update for openjdk-6 vulnerabilities USN-1079-1
Ubuntu Update for Linux kernel vulnerabilities USN-1079-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10791.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for openjdk-6 vulnerabilities USN-1079-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...
CVE-2011-0706
The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."...
Authentication flaw
The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."...
CVE-2011-0706
The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."...
CVE-2011-0706
CVE-2011-0706 affects the JNLPClassLoader in IcedTea-Web (used with OpenJDK Runtime Environment 1.6.0). The issue allows remote attackers to gain privileges via vectors related to handling multiple signers and the assignment of an inappropriate security descriptor. The vulnerability is tied to Ic...
CVE-2011-0706
The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."...
PT-2011-2572 · Icedtea +1 · Icedtea-Web +1
Name of the Vulnerable Software and Affected Versions: IcedTea-Web versions prior to 1.0.1 OpenJDK Runtime Environment version 1.6.0 Description: The issue allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of an inappropriate security...
Microsoft Windows - nt!SeObjectCreateSaclAccessBits() Missed ACE Bounds Checks (MS10-047)
Microsoft Windows - nt!SeObjectCreateSaclAccessBits Missed ACE Bounds Checks MS10-047 Microsoft Windows nt!SeObjectCreateSaclAccessBits missed ACE bounds checks ---------------------------------------------------------------------------- CVE-2010-1890 An ACE is an Access Control Entry, of which...
Microsoft Windows - nt!SeObjectCreateSaclAccessBits() Missed ACE Bounds Checks (MS10-047)
Microsoft Windows nt!SeObjectCreateSaclAccessBits missed ACE bounds checks ---------------------------------------------------------------------------- CVE-2010-1890 An ACE is an Access Control Entry, of which many may be attached to an ACL Access Control List. On Windows, an ACL can be of type...
WebDrive缺少安全描述符本地权限提升漏洞
BUGTRAQ ID: 37955 CVE ID: CVE-2009-4606 WebDrive是Windows化的文件传输软件,可将FTP服务器设置为硬盘盘符。 WebDrive所安装的WebDrive服务没有设置安全描述符,本地用户可以通过stop命令终止服务、使用config命令修改binPath变量并执行任意命令,或通过start命令重启服务。 South River Technologies WebDrive 9.02 厂商补丁: South River Technologies ------------------------...
South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation
South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Due to an empty security descriptor, a local attacker can gain elevated privileges. Tested on South River...
Command injection
South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart the...
CVE-2009-4606
South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart the...
CVE-2009-4606
South River Technologies WebDrive 9.02 build 2232 is vulnerable to a local privilege escalation due to the WebDrive Service being installed without a security descriptor. An attacker with local access can stop the service, modify the binPath via config to execute arbitrary commands as SYSTEM, or ...
CVE-2009-4606
South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart the...
South River Technologies Privilege Escalation
South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location: http://www.webdrive.com/download/index.html Tested against: South Rive...
South River Technologies WebDrive Service privilege escalation
No description provided by source. South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location:...
South River Technologies WebDrive Service privilege escalation
Exploit for unknown platform in category local exploits ============================================================== South River Technologies WebDrive Service privilege escalation ============================================================== Title: South River Technologies WebDrive Service...
South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges
South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location: http://www.webdrive.com/download/index.html Tested against: South Rive...
South River Technologies WebDrive 9.02 build 2232 - Local Privilege Escalation
South River Technologies WebDrive 9.02 build 2232 - Local Privilege Escalation South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download...