Integer overflow

Integer overflow in the JAR unpacking utility unpack200 in the unpack library unpack.dll in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JA...

Default credentials

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain 1 user and 2 database passwords by using a password revealer utility on a field containing a series of asterisks...

CVE-2008-5326

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain 1 user and 2 database passwords by using a password revealer utility on a field containing a series of asterisks...

Directory traversal

Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2008-5315

Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2008-5315

CVE-2008-5315: Apple iPhone Configuration Web Utility 1.0 for Windows is affected by a directory traversal vulnerability in its web interface that allows remote attackers to read arbitrary files via unspecified vectors. The issue is tied to the web service component and is documented with CVSS v2...

CVE-2008-5315

Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows remote attackers to read arbitrary files via unspecified vectors...

Apple iPhone Web Utility Detection

Binary data 4769.prm...

Apple iPhone Configuration Web Utility目录遍历漏洞

BUGTRAQ ID: 32412 iPhone Configuration Web Utility允许用户使用web浏览器创建、签名和发布配置文件。 Windows平台版本的iPhone Configuration Web Utility的Web接口存在目录遍历漏洞，远程攻击者可以通过向该接口提交恶意请求读取web root之外的任意只读文件。 Apple iPhone Configuration Web Utility 1.0 for Windows Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Apple iPhone Configuration Web Utility directory traversal

ACcess outside web root is possible...

DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal

Title ----- DDIVRT-DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal Severity -------- High Date Discovered --------------- October 2, 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Corey LeBleu and r@b13$ Vulnerability...

Modify the Exploit to experience a local elevation of Privilege fun-vulnerability warning-the black bar safety net

Vulnerability is like 8 months of rain like a short month, it cropped up several! Each of the security sites are constantly in the headlines reported in the latest vulnerability message, the heat as much as the Olympics. But these loopholes, really can for newbies service is few and far between!...

Symantec Veritas Storage Foundation unauthorized access

qioadmin utility allows local files read access. qiomkfile allows memory content reading...

[SECURITY] Fedora 8 Update: rubygem-activesupport-2.1.1-1.fc8

Utility library which carries commonly used classes and goodies from the Rails framework...

ASG-Sentry File Check Utility /snmx-cgi/fcheck.exe Arbitrary File Overwrite

The File Check Utility fcheck.exe included with the version of ASG-Sentry installed on the remote host fails to sanitize input before creating index files with filenames and checksums. An unauthenticated remote attacker can leverage this issue to overwrite existing files with either no data or a...

[SECURITY] Fedora 9 Update: rubygem-activesupport-2.1.1-1.fc9

Utility library which carries commonly used classes and goodies from the Rails framework...

Gentoo Security Advisory GLSA 200504-06 (sharutils)

The remote host is missing updates announced in advisory GLSA 200504-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200312-05 (GnuPG)

The remote host is missing updates announced in advisory GLSA 200312-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200606-25 (hashcash)

The remote host is missing updates announced in advisory GLSA 200606-25. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200410-07 (ed)

The remote host is missing updates announced in advisory GLSA 200410-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...