3585 matches found
CVE-2011-1310
CVE-2011-1310 affects IBM WebSphere Application Server (WAS) 6.1.x (before 6.1.0.35) and 7.x (before 7.0.0.15). When tracing is enabled, the Administrative Scripting Tools (wsadmin) command parameters are written to wsadmin.traceout and to trace.log, enabling local users to read potentially sensi...
OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...
OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...
CVE-2010-3079
CVE-2010-3079 affects the Linux kernel up to version 2.6.35.4, specifically in kernel/trace/ftrace.c when debugfs is enabled. The issue arises from interaction between mutex possession and llseek, causing a NULL pointer dereference and outage of all ftrace-related files, leading to a local DoS. A...
CVE-2010-3079
kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which allows local users to cause a denial of service NULL pointer dereference and outage of all function tracing files via an...
IBM WebSphere Application Server 6.1 < 6.1.0.33 Multiple Vulnerabilities
IBM WebSphere Application Server 6.1 before Fix Pack 33 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - An unspecified cross-site scripting vulnerability exists in the Administration Console. PM09250, PM11778 - An unspecified error exis...
Microsoft Windows Tracing Feature Privilege Elevation Vulnerabilities (982799)
This host is missing a critical security update according to Microsoft Bulletin MS10-059. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Tracing Feature Privilege Elevation Vulnerabilities (982799)
This host is missing a critical security update according to Microsoft Bulletin MS10-059. OpenVAS Vulnerability Test $Id: secpodms10-059.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows Tracing Feature Privilege Elevation Vulnerabilities 982799 Authors: Antu Sanadi Copyright: Copyright c 20...
Microsoft Windows Tracing功能注册表ACL不安全权限漏洞（MS10-059）
BUGTRAQ ID: 42269 CVECAN ID: CVE-2010-2554 Microsoft Windows是微软发布的非常流行的操作系统。 一些Windows应用中使用了Tracing功能记录调试信息。该功能不是默认启用的，如果要启用必须编辑 HKEYLOCALMACHINE\SOFTWARE\Microsoft\Tracing键下的注册表值。使用了这个Tracing功能的 Windows进程会持续监控相关子键的变化，一旦注册表值发生了变化就会立即读取该值。其中的一个注册表值为FileDirectory，包含有 Windows目录名。在Local...
CVE-2010-2555
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service memory corruption via vectors...
Security feature bypass
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL...
Memory corruption
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service memory corruption via vectors...
CVE-2010-2555
CVE-2010-2555 relates to the Tracing Feature for Services in Windows (Vista SP1/SP2, Server 2008 SP2+R2, Windows 7). The vulnerability stems from how memory is allocated/strings are processed when reading registry data, leading to memory corruption and potential privilege escalation. Microsoft’s ...
CVE-2010-2554
The Tracing Feature for Services in Microsoft Windows (Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7) is susceptible to a local privilege escalation vulnerability, known as the Tracing Registry Key ACL Vulnerability . The root cause is incorrect ACLs on specific registry keys, which allow...
CVE-2010-2554
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL...
CVE-2010-2554: Undefined Security Weakness
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL...
PT-2010-4103 · Microsoft · Windows Vista +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 and R2 Microsoft Windows 7 affected versions not specified Description: The issue arises from the Tracing Feature for Services not proper...
PT-2010-4102 · Microsoft · Windows Vista +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 and R2 Microsoft Windows 7 affected versions not specified Description: The issue arises from incorrect access control lists ACLs on the...
CVE-2010-2555: Undefined Security Weakness
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the length of strings in the registry, which allows local users to gain privileges or cause a denial of service memory corruption via vectors...
Microsoft Security Bulletin MS10-059 - Important Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege (982799)
Microsoft Security Bulletin MS10-059 - Important Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege 982799 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed vulnerability and one...