CVE-2008-0962

Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted request to the RPC interface...

CVE-2008-0962: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted request to the RPC interface...

IBM AIX WebSM Remote Client For Linux本地不安全文件权限漏洞

BUGTRAQ ID: 27433 IBM AIX是一款商业性质的UNIX操作系统。 Web-based System Manager（WebSM）Remote Client for Linux在安装文件时设置了不正确的访问权限，本地攻击者可能利用此漏洞执行权限提升。 Web-based System Manager（WebSM）Remote Client for Linux允许远程管理AIX系统。当在Linux系统上安装WebSM Remote Client时，一些安装的文件错误地分配了完全可写的权限，因此Linux系统上的任意用户都可以写入这些文件。 IBM AIX 5.3 IBM...

IBM Web-based System Manager未明拒绝服务漏洞

IBM AIX是一款商业性质的操作系统。 IBM AIX基于WEB的系统管理器存在未明问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 IBM AIX 5.3 IBM AIX 5.2 补丁下载： IBM AIX 5.2 IBM websmifix.tar.Z ftp://aix.software.ibm.com/aix/efixes/security/websmifix.tar.Z IBM AIX 5.3 IBM websmifix.tar.Z...

In the benefits letter news system application file upload vulnerability-vulnerability warning-the black bar safety net

Recently everyone for dvbbs file upload vulnerability excited, thinking about other inside the system can not be used on? I will for the benefit of the letter of information systems to the topic! System environment: benefits letter press system 3. 1, Windows2000+sp4. Look at this line of code: |...

Solaris 10 (sparc) : 121161-01 (deprecated)

System Manager 1.1: Common Core Patch. Date this patch was last updated by Sun : May/15/06 This plugin has been deprecated and either replaced with individual 121161 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

Canon ImageRunner reveals SMB, IPX, and FTP username/passwords

The Canon ImageRunner multi-function device’s Remote UI web interface software will reveal username and password pairs contained in address book entries when the address book is exported. These address book entries are used for scanning to SMB, FTP, or IPX shares. In addition, passwords for...

CVE-2006-2614

Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts 1 /cr/hdjobsdb.sh, 2 /cr/hdplancheckin.sh, and 3 /cr/oracleplancheckin.sh, which allows local users to obtain System Manager passwords...

CVE-2006-2614

The CVE-2006-2614 entry concerns Sun N1 System Manager 1.1 running on Solaris 10 before patch 121161-01. The flaw arises because /cr/hd_jobs_db.sh, /cr/hd_plan_checkin.sh, and /cr/oracle_plan_checkin.sh store System Manager passwords in world-readable scripts, enabling local users to obtain passw...

CVE-2006-2614

Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts 1 /cr/hdjobsdb.sh, 2 /cr/hdplancheckin.sh, and 3 /cr/oracleplancheckin.sh, which allows local users to obtain System Manager passwords...

CVE-2006-2614: Undefined Security Weakness

Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts 1 /cr/hdjobsdb.sh, 2 /cr/hdplancheckin.sh, and 3 /cr/oracleplancheckin.sh, which allows local users to obtain System Manager passwords...

Sun N1 System Manager information leak

Password disclosure...

[SA20127] Sun N1 System Manager Password Disclosure Vulnerability

TITLE: Sun N1 System Manager Password Disclosure Vulnerability SECUNIA ADVISORY ID: SA20127 VERIFY ADVISORY: http://secunia.com/advisories/20127/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Sun N1 System Manager 1.x...

CVE-1999-1183

System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse 1 runtask or 2 runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type...

CVE-1999-1183: Undefined Security Weakness

System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse 1 runtask or 2 runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type...

CVE-1999-1183

System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse 1 runtask or 2 runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type...