EMC RepliStor Server Service DoASOCommand Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC RepliStor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DoRcvRpcCall RPC function exposed via the repsrv.exe process which listens by defaul...

Ubuntu Update for dovecot vulnerability USN-487-1

Ubuntu Update for Linux kernel vulnerabilities USN-487-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4871.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for dovecot vulnerability USN-487-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

GLSA-200902-01 : sudo: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200902-01 sudo: Privilege escalation Harald Koenig discovered that sudo incorrectly handles group specifications in RunasAlias and related entries when a group is specified in the list using %group syntax, to allow a user to run...

sudo: Privilege escalation

Background sudo allows a system administrator to give users the ability to run commands as other users. Description Harald Koenig discovered that sudo incorrectly handles group specifications in RunasAlias and related entries when a group is specified in the list using %group syntax, to allow a...

EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC AutoStart. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Backbone service ftbackbone.exe which listens by default on TCP port...

RealNetworks Helix Server NTLM Authentication Malformed Base64 Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of RealNetworks Helix Server. Authentication is not required to exploit this vulnerability. The specific flaw exists during NTLM negotiation. The function responsible for decoding Base64...

RealNetworks Helix DNA Server RTSP DESCRIBE Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks Helix Server. User interaction is not required to exploit this vulnerability. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rmserver.exe...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. EZ Publish: privilege escalation from user to CMS Administrator + Privilege escalation from CMS Administrator to system user...

EMC Control Center SST_CTGTRANS Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC Control Center. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Master Agent service msragent.exe which listens by default on TCP port...

ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability

ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-064 October 8, 2008 -- CVE ID: CVE-2008-4479 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection:...

Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. Authentication is not required to exploit this vulnerability. The specific flaw resides in the web console running on TCP ports 8028 and 8030. The server exposes a web interface and...

EMC ApplicationXtender Workflow Server Admin Agent Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC ApplicationXtender Workflow Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Admin Agent service awstmxn.exe which listens by...

EMC ApplicationXtender Workflow Server Admin Agent Arbitrary File Upload Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC ApplicationXtender Workflow Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Admin Agent service awstmxn.exe which listens by...

Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability

This vulnerability allows an attacker to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation. User interaction is not required to exploit this vulnerability. Authentication is not required to exploit this vulnerability. The specific flaw exists in the...

Leopard Server Remote Path Traversal

Advisory ID Internal CORE-2008-0123 Advisory Information Title: Leopard Server Remote Path Traversal Advisory ID: CORE-2008-0123 Date published: 2008-03-18 Date of last update: 2008-03-18 Vendors contacted: Apple Inc. Release mode: Coordinated release Vulnerability Information Class: Remote Path...

ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability

ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-007.html February 20, 2008 -- CVE ID: CVE-2008-0638 -- Affected Vendor: Symantec -- Affected Products: Veritas Storage Foundation 5.0 --...

Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Symantec VERITAS Storage Foundation. Authentication is not required to exploit this vulnerability. The specific flaw resides in the Administrator service, vxsvc.exe, which listens by default on UDP port...

ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability

ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-005.html February 11, 2008 -- CVE ID: CVE-2008-0639 -- Affected Vendor: Novell -- Affected Products: Novell Netware Client -- TippingPointTM IPS Customer Protection:...

Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the Novell Netware Client. Authentication is not required to exploit this vulnerability. The specific flaw exists in nwspool.dll which is responsible for handling RPC requests through...

IBM Tivoli Storage Manager Express Backup Server Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Express. Authentication is not required to exploit this vulnerability. The specific flaw resides in the TSM Express Backup Server service, dsmsvc.exe, which listens by default o...