NitroSecurity ESM 8.4.0a - Remote Code Execution

No description provided by source. -- Product description: NitroView ESM is an enterprise-class security information and event management system that identifies, correlates, and remediates threats faster than any other SIEM on the market. -- Problem Description: During research it was found that...

Framework: org.spring.web.util.JavaScriptUtils.javaScriptEscape insufficient escaping of characters

The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which allows remote attackers to conduct cross-site scripting XSS attacks via a 1 line separator or 2 paragraph separator Unicod...

CVE-2013-1939

The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ backslash character...

PT-2014-2519

Name of the Vulnerable Software and Affected Versions SabreDAV versions 1.6.8 and earlier, 1.7.x prior to 1.7.7, 1.8.x prior to 1.8.5 Description The issue arises from the HTMLBrowser plugin in SabreDAV, which does not properly check path separators in the base path when running on Windows. This...

Incorrect values in the properties of objects in SCOM console

Challenge The collection of performance and events works fine, but during investigation of CPU/RAM properties of Hosts, Virtual Machines etc. unexpected values are revealed. For example ESXi host has 345.9 GB of RAM, but the SCOM property field contains 3459 GB. Cause SCOM processes these values...

fingerprint_os

This plugin fingerprints the remote web server and tries to determine the Operating System family Windows, Unix, etc.. The fingerprinting is at this moment really trivial, because it only uses one technique: windows path separator in the URL. For example, if the input URL is...

VM Right-Sizing report fails with error "Query execution failed for dataset ‘AnalysisDS’"

Challenge VM Right-Sizing report fails with the following error: Query execution failed for dataset 'AnalysisDS'. Error converting data type varchar to numeric. Cause The error occurs because of unsupported decimal separator format on the Collector machine. A dot . is expected as the decimal...

The path separator"\"with"/"in the Web of induced vulnerability-vulnerability warning-the black bar safety net

Whether is under windows the path separator""or linux"/", this is not a serious problem, but in the web of the upper surface of the opening will appear a lot of"bugs", if the web Developer did not consider this issue, then may appear very serious bug. In the VC code\ \ \is an escape character,...

SuSE 11 Security Update : Xen (SAT Patch Number 2230)

Collective Xen/201004 Update, containing fixes for the following issues : - pygrub, reiserfs: Fix on-disk structure definition bnc537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc561912 - xend leaks memory bnc564750 - Keyboard Caps Lock key works abnormal under SLES11 xen...

The Windows File System vulnerability-a small vulnerability, big-vulnerability warning-the black bar safety net

Windows useful file to replace the command, to bypass the File Protection Used to replace file replace, even being used of the file can also be replaced. Very invincible. For example: in C:\create a directory, c:\aaa Then copy an mp3 to c:\aaa and named to the c:\aaa\a. mp3 Then copy another...

The Windows File System vulnerability-a small vulnerability, big-vulnerability warning-the black bar safety net

Windows useful file to replace the command, to bypass the File Protection Used to replace file replace, even being used of the file can also be replaced. Very invincible. For example: in C:\create a directory, c:\aaa Then copy an mp3 to c:\aaa and named to the c:\aaa\a. mp3 Then copy another...

DEBIAN-CVE-2009-4500

The processtrap function in trapper/trapper.c in Zabbix Server before 1.6.6 allows remote attackers to cause a denial of service crash via a crafted request with data that lacks an expected : colon separator, which triggers a NULL pointer dereference...

CVE-2009-0229

The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."...

CVE-2009-0229

The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."...

CVE-2009-0229: Exposure of Sensitive Information to an Unauthorized Actor

The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."...

PT-2009-2904 · Microsoft · Windows Printing Service +6

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the patchday that contains the fix for the issue, including: Windows 2000 SP4 Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista Gold, SP1, and SP2 Windows Server 2008 SP2 Description: A local,...

MS09-022: Vulnerabilities in Windows Print Spooler Could Allow Remote Code Execution (961501)

The version of the Print Spooler service on the remote Windows host is affected by one or more of the following vulnerabilities : - A buffer overflow vulnerability could allow an unauthenticated, remote attacker to execute arbitrary code with SYSTEM privileges. CVE-2009-0228 - Using a specially...

Vulnerabilities in Print Spooler Could Allow Remote Code Execution (961501)

This host is missing a critical security update according to Microsoft Bulletin MS09-022. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

HTTP NIDS evasion

This plugin configures OpenVAS for NIDS evasion see the SPDX-FileCopyrightText: 2008 Michel Arboi / Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only The HTTP IDS evasion...

CVE-2008-1145: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash \ path separators or case-insensitive file names, allows remote attackers to access arbitrary files via 1 "..%5c" encoded backslash...