PT-2017-11538

Name of the Vulnerable Software and Affected Versions Security Setup Tool affected versions not specified Description The issue is related to an untrusted search path vulnerability. This allows an attacker to potentially gain privileges by using a Trojan horse DLL in an unspecified directory...

Installer and self-extracting archive containing the installer of "Security Setup Tool" may insecurely load Dynamic Link Libraries

Overview The installer and the self-extracting archive containing the installer of "Security Setup Tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of...

JVN#36303528: Installer and self-extracting archive containing the installer of "Security Setup Tool" may insecurely load Dynamic Link Libraries

The installer and the self-extracting archive containing the installer of "Security Setup Tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be...

CVE-2017-6865: Improper Input Validation

A vulnerability has been identified in Primary Setup Tool PST All versions V4.2 HF1, SIMATIC Automation Tool All versions V3.0, SIMATIC NET PC-Software All versions V14 SP1, SIMATIC PCS 7 V8.1 All versions, SIMATIC PCS 7 V8.2 All versions V8.2 SP1, SIMATIC STEP 7 TIA Portal V13 All versions V13...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update G)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...

CVE-2005-4772: Undefined Security Weakness

liby2util in Yet another Setup Tool YaST in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013...

CVE-2005-3013: Undefined Security Weakness

Buffer overflow in liby2util in Yet another Setup Tool YaST for SuSE Linux 9.3 allows local users to execute arbitrary code via a long Loc entry...

CVE-2005-0594

Buffer overflow in the Netinfo Setup Tool NeST allows local users to execute arbitrary code...

CVE-2005-0594

Buffer overflow in the Netinfo Setup Tool NeST allows local users to execute arbitrary code...

CVE-2005-0594: Undefined Security Weakness

Buffer overflow in the Netinfo Setup Tool NeST allows local users to execute arbitrary code...