Design/Logic Flaw

Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote authenticated malicious user with root privileges may potentially use a support tool to decrypt encrypted passwords stored locally on the system to use it to...

CVE-2019-3736

Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote authenticated malicious user with root privileges may potentially use a support tool to decrypt encrypted passwords stored locally on the system to use it to...

Remote Support Tool Untrusted Search Path Vulnerability

Remote Support Tool Enkaku Support Tool is an Enkaku support tool from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan. An untrustworthy search path vulnerability exists in versions of Remote Support Tool prior to August 10, 2017 . An attacker can exploit this vulnerability to gain privileges with the...

Design/Logic Flaw

Untrusted search path vulnerability in Remote Support Tool Enkaku Support Tool All versions distributed through the website till 2017 August 10 allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10829

Untrusted search path vulnerability in Remote Support Tool Enkaku Support Tool All versions distributed through the website till 2017 August 10 allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10829

CVE-2017-10829 refers to an untrusted search path vulnerability in the Remote Support Tool (Enkaku Support Tool) installer from NTT East/West. The issue (CWE-427) arises from insecure DLL loading via the DLL search path, potentially allowing arbitrary code execution with the privileges of the use...

CVE-2017-10829

Untrusted search path vulnerability in Remote Support Tool Enkaku Support Tool All versions distributed through the website till 2017 August 10 allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Installer of "Remote Support Tool (Enkaku Support Tool)" may insecurely load Dynamic Link Libraries

Overview Installer of "Remote Support Tool Enkaku Support Tool" provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION and NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili...

JVN#26115441: Installer of ”Remote Support Tool (Enkaku Support Tool)” may insecurely load Dynamic Link Libraries

Installer of ”Remote Support Tool Enkaku Support Tool” provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION and NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary...

"Certifi-Gate" Android Vulnerability Lets Hackers Take Complete Control of Your Device

Android users are busy fighting with Stagefright vulnerability while the popular mobile operating system faces another critical security vulnerability, dubbed as “Certifi-Gate”. Millions of Android devices could be hacked exploiting a plugin that comes pre-installed on your Android devices by the...

certifi-gate

Certifi-gate is a set of vulnerabilities in the authorization methods between mobile Remote Support Tool mRST apps and system-level plugs on a device. mRSTs allow remote personnel to offer customers personalized technical support for their devices by replicating a device’s screen and by simulatin...

CVE-2008-0312

Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute...

CVE-2008-0312

CVE-2008-0312 is a stack-based buffer overflow in the AutoFix Support Tool ActiveX control SYMADATA.DLL v2.7.0.1, used by Norton products (e.g., Norton 360 1.0, AntiVirus/Internet Security/System Works 2006–2008). The overflow occurs via a long argument to GetEventLogInfo and could allow remote c...

CVE-2008-0312

Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute...

HP-UX Security Patch : PHSS_34835

Support Tool Manager September 2005 Patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26845; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

HP-UX Security Patch : PHSS_23332

Support Tool Manager Patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26595; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...

HP-UX Security Patch : PHSS_23655

, Support Tool Manager Patch A.24.00 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26599; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

HP-UX PHSS_23269 : HP-UX Running Support Tools Manager, Local Denial of Service (DoS) (HPSBUX00137 SSRT071336 rev.4)

s700800 11.00 Support Tool Manager A.22.00 Patch : HP9000 series 700/800 Support Tools Manager xstm,cstm,stm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS23269. The text itself is copyright C...