VRDAフィード：脆弱性脅威分析用情報の定型データ配信

CVE-2010-4628:mybb: member.php in MyBB (aka MyBulletinBoard) before 1.4...

2010-12-30T00:00:00+09:00

member.php in MyBB (aka MyBulletinBoard) before 1.4.12 makes a certain superfluous call to the SQL COUNT function, which allows remote attackers to cause a denial of service (resource consumption) by making requests to member.php that trigger scans of the entire users table.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4630:wp-survey-and-quiz-tool: Cross-site scripting (XSS) vulnerability in pages/a...

2010-12-30T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in pages/admin/surveys/create.php in the WP Survey And Quiz Tool plugin 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4629:mybb: MyBB (aka MyBulletinBoard) before 1.4.12 does not p...

2010-12-30T00:00:00+09:00

MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service (resource consumption) by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4627:mybb: Cross-site request forgery (CSRF) vulnerability in ...

2010-12-30T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard) before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4642:xwiki: Cross-site scripting (XSS) vulnerability in XWiki E...

2010-12-30T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4641:xwiki: SQL injection vulnerability in XWiki Enterprise bef...

2010-12-30T00:00:00+09:00

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4640:xwiki_watch: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-30T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to (1) bin/viewrev/Main/WebHome and (2) bin/view/Blog, and the (3) register_first_name and (4) register_last_name parameters to bin/register/XWiki/Register. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4639:mysource_matrix: SQL injection vulnerability in index.php in MySourc...

2010-12-30T00:00:00+09:00

SQL injection vulnerability in index.php in MySource Matrix allows remote attackers to execute arbitrary SQL commands via the id parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4635:vacation_rental_listings: SQL injection vulnerability in detail.asp in Site2N...

2010-12-30T00:00:00+09:00

SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental (VRBO) Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4634:osticket: DISPUTED Directory traversal vulnerability i...

2010-12-30T00:00:00+09:00

** DISPUTED ** Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to module.php, a different vector than CVE-2005-1439. NOTE: this issue has been disputed by a reliable third party.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4265:jboss_enterprise_application_platform, jboss_enterprise_web_platform, jboss_remoting: The org.jboss.remoting.transport.bisocket.BisocketS...

2010-12-30T00:00:00+09:00

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09 allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data, related to a missing CVE-2010-3862 patch. NOTE: this can ...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4633:digishop: SQL injection vulnerability in cart.php in digiSHOP...

2010-12-30T00:00:00+09:00

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4522:mybb: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-30T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) editpost.php, (2) member.php, and (3) newreply.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4625:mybb: MyBB (aka MyBulletinBoard) before 1.4.12 does not p...

2010-12-30T00:00:00+09:00

MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4626:mybb: The my_rand function in functions.php in MyBB (aka ...

2010-12-30T00:00:00+09:00

The my_rand function in functions.php in MyBB (aka MyBulletinBoard) before 1.4.12 does not properly use the PHP mt_rand function, which makes it easier for remote attackers to obtain access to an arbitrary account by requesting a reset of the account's password, and then conducting a brute-force attack.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4636:business_e-listings: SQL injection vulnerability in detail.asp in Site2N...

2010-12-30T00:00:00+09:00

SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3862:jboss_enterprise_application_platform, jboss_enterprise_web_platform, jboss_remoting: The org.jboss.remoting.transport.bisocket.BisocketS...

2010-12-30T00:00:00+09:00

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4624:mybb: MyBB (aka MyBulletinBoard) before 1.4.12 allows rem...

2010-12-30T00:00:00+09:00

MyBB (aka MyBulletinBoard) before 1.4.12 allows remote authenticated users to bypass intended restrictions on the number of [img] MyCodes by editing a post after it has been created.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4631:pilot_cart: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-30T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) countrycode parameter to contact.asp, USERNAME parameter to (2) gateway.asp and (3) cart.asp, and the specific parameter to (4) quote.asp and (5) buyitnow.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4632:pilot_cart: Multiple SQL injection vulnerabilities in ASPilot P...

2010-12-30T00:00:00+09:00

Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the (1) article parameter to kb.asp, (2) specific parameter to cart.asp, (3) countrycode parameter to contact.asp, and the (4) srch parameter to search.asp. NOTE: the article parameter to pilot.asp is already covered by CVE-2008-2688.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4637:feedlist: Cross-site scripting (XSS) vulnerability in feedlis...

2010-12-30T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in feedlist/handler_image.php in the FeedList plugin 2.61.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4638:com_jquarks4s: SQL injection vulnerability in the submitSurvey fun...

2010-12-30T00:00:00+09:00

SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the q parameter in a submitSurvey action to index.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4616:impresscms: Cross-site scripting (XSS) vulnerability in modules...

2010-12-29T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4617:com_jotloader: Directory traversal vulnerability in the JotLoader ...

2010-12-29T00:00:00+09:00

Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4619:mafya_oyun_scrpti: SQL injection vulnerability in profil.php in Mafya ...

2010-12-29T00:00:00+09:00

SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execute arbitrary SQL commands via the id parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3850:kernel: The ec_dev_ioctl function in net/econet/af_econet.c...

2010-12-30T00:00:00+09:00

The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4614:ero_auktion: SQL injection vulnerability in item.php in Ero Aukt...

2010-12-29T00:00:00+09:00

SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010-0723.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4615:oto_galeri_sistemi: Multiple SQL injection vulnerabilities in Oto Galer...

2010-12-29T00:00:00+09:00

Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) arac parameter to carsdetail.asp and the (2) marka parameter to twohandscars.asp.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3878:jboss_enterprise_application_platform: Cross-site request forgery (CSRF) vulnerability in ...

2010-12-30T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3862:jboss_remoting: The org.jboss.remoting.transport.bisocket.BisocketS...

2010-12-30T00:00:00+09:00

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4342:kernel: The aun_incoming function in net/econet/af_econet.c...

2010-12-30T00:00:00+09:00

The aun_incoming function in net/econet/af_econet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending an Acorn Universal Networking (AUN) packet over UDP.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4608:habari: Habari 0.6.5 allows remote attackers to obtain sens...

2010-12-29T00:00:00+09:00

Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments_items.php in system/admin/, which reveals the installation path in an error message.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4321:iprint_client: Stack-based buffer overflow in an ActiveX control i...

2010-12-30T00:00:00+09:00

Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to execute arbitrary code via vectors related to the GetDriverSettings method.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4276:livezilla: Cross-site scripting (XSS) vulnerability in the lz_...

2010-12-30T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla parameter in a track action to server.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4623:tivoli_access_manager_for_e-business: WebSEAL in IBM Tivoli Access Manager for e-business...

2010-12-30T00:00:00+09:00

WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service (worker thread consumption) via shift-reload actions.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3708:jboss_enterprise_application_platform, jboss_enterprise_soa_platform: The serialization implementation in JBoss Drools in...

2010-12-30T00:00:00+09:00

The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4258:kernel: The do_exit function in kernel/exit.c in the Linux ...

2010-12-30T00:00:00+09:00

The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a (1) BUG, (2) NULL pointer dereference, or (3) page fault, as demonstrated by vectors involving the clear_child_tid feature and the splice system call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4507:ispot, ispot_firmware, clearspot, clearspot_firmware: Multiple cross-site request forgery (CSRF) vulnerab...

2010-12-30T00:00:00+09:00

Multiple cross-site request forgery (CSRF) vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary commands via the cmd parameter in an act_cmd_result action to webmain.cgi, (2) enable remote management via an enable_remote_access act_network_set action to webmain.cgi, (3) enable the TELNET service via an ENABLE_TELNET act_set_wimax...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4622:tivoli_access_manager_for_e-business: Directory traversal vulnerability in WebSEAL in IBM...

2010-12-30T00:00:00+09:00

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e (encoded dot dot) in a URI.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4607:habari: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-29T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) additem_form parameter to system/admin/dash_additem.php and the (2) status_data[] parameter to system/admin/dash_status.php. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4606:tivoli_storage_manager: Unspecified vulnerability in the Space Management c...

2010-12-29T00:00:00+09:00

Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows remote attackers to execute arbitrary commands via unknown vectors, related to a "script execution vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4161:enterprise_linux, linux_kernel: The udp_queue_rcv_skb function in net/ipv4/udp.c in...

2010-12-30T00:00:00+09:00

The udp_queue_rcv_skb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (deadlock and system hang) by sending UDP traffic to a socket that has a crafted socket filter, a related issue to CVE-2010-4158.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4605:tivoli_storage_manager: Unspecified vulnerability in the backup-archive cli...

2010-12-29T00:00:00+09:00

Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3923:attachecase: Untrusted search path vulnerability in AttacheCase ...

2010-12-30T00:00:00+09:00

Untrusted search path vulnerability in AttacheCase before 2.70 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4612:cms: Multiple SQL injection vulnerabilities in index.php...

2010-12-29T00:00:00+09:00

Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) usr_email parameters to user/1/hregister.html, (3) usr_email parameter to user/1/hlogin.html, (4) useremail parameter to user/1/forgotpass.html, and the (5) q parameter to search/1.html. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3848:kernel: Stack-based buffer overflow in the econet_sendmsg f...

2010-12-30T00:00:00+09:00

Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3849:kernel: The econet_sendmsg function in net/econet/af_econet...

2010-12-30T00:00:00+09:00

The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4610:cms: Cross-site scripting (XSS) vulnerability in index.p...

2010-12-29T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary web script or HTML via the error parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4158:kernel: The sk_run_filter function in net/core/filter.c in ...

2010-12-30T00:00:00+09:00

The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensitive information from kernel stack memory via a crafted socket filter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4352:dbus: Stack consumption vulnerability in D-Bus (aka DBus)...

2010-12-30T00:00:00+09:00

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4618:aicontactsafe: Cross-site scripting (XSS) vulnerability in the Alg...

2010-12-29T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the Algis Info aiContactSafe component before 2.0.14 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4609:cms: SQL injection vulnerability in index.php in Html-ed...

2010-12-29T00:00:00+09:00

SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser parameter in a registrate action.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4613:hycus_cms: Multiple directory traversal vulnerabilities in Hyc...

2010-12-29T00:00:00+09:00

Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the site parameter to (1) index.php and (2) admin.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3874:kernel: Heap-based buffer overflow in the bcm_connect funct...

2010-12-29T00:00:00+09:00

Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service (memory corruption) via a connect operation.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3859:kernel: Multiple integer signedness errors in the TIPC impl...

2010-12-29T00:00:00+09:00

Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer overflow, related to the tipc_msg_build function in net/tipc/msg.c and the verify_iovec function in net/core/iovec.c.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4604:tivoli_storage_manager: Stack-based buffer overflow in the GeneratePassword...

2010-12-29T00:00:00+09:00

Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows local users to gain privileges by specifying a long LANG environment variable, and then sending a request over a pipe.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4602:rational_clearquest: The Web client in IBM Rational ClearQuest 7.1.1.x b...

2010-12-29T00:00:00+09:00

The Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1 allows remote authenticated users to bypass "restricted user" limitations, and read arbitrary records, via a modified record number in the URL for a RECORD action, as demonstrated by a modified bookmark.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4601:rational_clearquest: Multiple unspecified vulnerabilities in IBM Rationa...

2010-12-29T00:00:00+09:00

Multiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 allow attackers to have an unknown impact via vectors related to third-party .ocx files.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4343:kernel: drivers/scsi/bfa/bfa_core.c in the Linux kernel bef...

2010-12-29T00:00:00+09:00

drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to cause a denial of service (system crash) via read operations on an fc_host statistics file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4600:dojo_toolkit, rational_clearquest: Dojo Toolkit, as used in the Web client in IBM Rati...

2010-12-29T00:00:00+09:00

Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1, allows remote attackers to read cookies by navigating to a Dojo file, related to an "open direct" issue.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4565:kernel: The bcm_connect function in net/can/bcm.c (aka the ...

2010-12-29T00:00:00+09:00

The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensitive information about kernel memory use by listing this filename.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002563:複数の VMware 製品の VMware-Tools アップデート機能における権限昇格の脆弱性

2010-12-27T15:40:47+09:00

複数の VMware 製品の VMware-Tools アップデート機能には、ゲスト OS 上の権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002562:複数の VMware 製品の vmware-mount における権限昇格の脆弱性

2010-12-27T15:38:13+09:00

複数の VMware 製品の vmware-mount には、共有オブジェクトファイルに関する処理に不備があり、ライブラリを適切にロードしないため、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002561:複数の VMware 製品の vmware-mount における権限昇格の脆弱性

2010-12-27T15:36:22+09:00

複数の VMware 製品の vmware-mount には、一時ファイルに関する処理に不備があるため、競合状態となり、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002560:複数の VMware 製品の VMnc メディアコーデック内にあるフレーム復元機能における任意のコードを実行される脆弱性

2010-12-27T15:33:27+09:00

複数の VMware 製品の VMnc メディアコーデック内にあるフレーム復元機能には、不特定のサイズフィールドを適切に検証しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002559:Apple QuickTime における整数オーバーフローの脆弱性

2010-12-27T15:09:17+09:00

Apple QuickTime には、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002558:Windows 上で稼働する Apple QuickTime における重要な情報を取得される脆弱性

2010-12-27T15:07:31+09:00

Windows 上で稼働する Apple QuickTime には、ユーザプロファイルの “Apple Computer” ディレクトリに対するパーミッションに関して不備があるため、重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002557:Windows 上で稼働する Apple QuickTime におけるヒープベースのバッファオーバーフローの脆弱性

2010-12-27T15:06:01+09:00

Windows 上で稼働する Apple QuickTime には、ヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002556:Apple QuickTime における整数符号エラーの脆弱性

2010-12-27T15:03:30+09:00

Apple QuickTime には、整数符号エラーの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002555:Apple QuickTime における任意のコードを実行される脆弱性

2010-12-27T15:02:14+09:00

Apple QuickTime には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002554:Apple QuickTime における任意のコードを実行される脆弱性

2010-12-27T14:59:05+09:00

JVNDB-2010-002553:CA PSFormX および CA WebScan ActiveX コントロールにおける任意のコードを実行される脆弱性

2010-12-27T11:49:20+09:00

CA PSFormX および CA WebScan ActiveX コントロールには、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002552:CA eHealth Performance Manager におけるクロスサイトスクリプティングの脆弱性

2010-12-27T11:44:39+09:00

CA eHealth Performance Manager には、悪質な HTML 検出を無効に設定している場合、リクエストに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002631:CA eTrust PestPatrol の PestPatrol ActiveX コントロールにおけるスタックペースのバッファオーバーフローの脆弱性

2010-12-27T11:41:53+09:00

CA eTrust PestPatrol の PestPatrol ActiveX コントロール (ppctl.dll) には、スタックペースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002630:CA Service Desk の Web インターフェイスにおけるクロスサイトスクリプティングの脆弱性

2010-12-27T11:38:57+09:00

CA Service Desk の Web インターフェイスには、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002629:複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントおけるサービス運用妨害 (DoS) の脆弱性

2010-12-27T11:36:03+09:00

複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントには、RAR アーカイブファイルに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2009-3587 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002628:複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントにおける任意のコードを実行される脆弱性

2010-12-27T11:32:27+09:00

複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントには、RAR アーカイブファイルに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。本脆弱性は、CVE-2009-3588 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002627:CA Host-Based Intrusion Prevention System の kmxIds.sys におけるサービス運用妨害 (DoS) の脆弱性

2010-12-27T11:24:00+09:00

CA Host-Based Intrusion Prevention System (HIPS) の kmxIds.sys には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002626:CA SiteMinder における J2EE アプリケーションのクロスサイトスクリプティングに対する保護を回避される脆弱性

2010-12-27T11:19:48+09:00

CA SiteMinder には、J2EE アプリケーションのクロスサイトスクリプティングに対する保護を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002625:CA SiteMinder における J2EE アプリケーションのクロスサイトスクリプティングに対する保護を回避される脆弱性

2010-12-27T10:47:36+09:00

JVNDB-2009-002624:複数の CA 製品の Data Transport Services におけるスタックベースのバッファオーバーフローの脆弱性

2010-12-27T10:45:26+09:00

複数の CA 製品の Data Transport Services 内にある dtscore library の token searching 機能には、スタックベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002623:CA ARCserve Backup のメッセージエンジンにおけるサービス運用妨害 (DoS) の脆弱性

2010-12-27T10:41:31+09:00

CA ARCserve Backup のメッセージエンジンは、ASCORE モジュールを適切に処理しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002622:CA Internet Security Suite の vetmonnt.sys におけるサービス運用妨害 (DoS) の脆弱性

2010-12-27T10:36:47+09:00

CA Internet Security Suite の vetmonnt.sys は、IOCTL コールを適切に検証しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002621:CA Service Metric Analysis および Service Level Management の smmsnmpd サービスにおける任意のコマンドを実行される脆弱性

2010-12-27T10:34:21+09:00

CA Service Metric Analysis および Service Level Management の smmsnmpd サービスは、アクセスを適切に制限しないため、任意のコマンドを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002620:複数の CA 製品の Arclib library におけるウィルス検知を回避される脆弱性

2010-12-27T10:30:20+09:00

複数の CA 製品の CA Anti-Virus エンジン内にある Arclib library (arclib.dll) には、ウィルス検知を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002551:Quagga の bgpd におけるサービス運用妨害 (DoS) の脆弱性

2010-12-24T16:19:05+09:00

Quagga の bgpd は、AS パスを適切に構文解析しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002550:Adobe Illustrator における任意のコードを実行される脆弱性

2010-12-24T16:16:35+09:00

Adobe Illustrator には、DLL ハイジャック攻撃を誘導され、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002549:OpenSSL における共有秘密鍵の認証要求を回避される脆弱性

2010-12-24T16:13:54+09:00

OpenSSL は、J-PAKE が有効な際、J-PAKE プロトコル内のパブリックパラメータを適切に認証しないため、共有秘密鍵の認証要求を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002548:OpenSSL における暗号スイートのダウングレードに関する脆弱性

2010-12-24T16:11:18+09:00

OpenSSL は、SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG が有効な際、セッションキャッシュ内にある暗号スイートへの変更を適切に制限しないため、意図しない暗号スイートのダウングレードを強制的に実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002547:AWStats に脆弱性

2010-12-24T16:06:42+09:00

AWStats には、設定ファイルディレクトリを指定する際に、"\\" の処理に起因する脆弱性が存在します。これにより、攻撃者はネットワーク上に存在する任意の設定ファイルを指定することが可能です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002546:PHP にサービス運用妨害 (DoS) の脆弱性

2010-12-24T16:04:08+09:00

PHP の getSymbol 関数には、脆弱性が存在します。 PHP の getSymbol 関数には、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002545:ISC BIND named の allow-query の処理における脆弱性

2010-12-24T16:01:41+09:00

Internet Systems Consortium (ISC) が提供する BIND には、allow-query のアクセスコントロールの処理に脆弱性が存在します。 ISC から以下の脆弱性情報が公開されています。 When named is running as an authoritative server for a zone and receives a query for that zone data, it first checks for allow-query acls in the zone statement, then in that view, then in global options. If none of these exist, it defaults to allowing any query (allow-query {“any”};). With this bug, if the allow-query is not set in the zone statement, it failed to check in view or global options and fell back to the default of allowing any query. This means that queries that the zone owner did not wish to allow were incorrectly allowed. This bug doesn't affect allow-recursion or allow-query-cache acls, since they are not relevant to a zone for which the server is authoritative. ISC によると、9.6ESV-R2 は本脆弱性の影響をうけないとされています。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002544:ISC BIND named validator に脆弱性

2010-12-24T15:36:01+09:00

Internet Systems Consortium (ISC) が提供する BIND named には、特定の状況下で、ゾーンデータの状態を insecure としてしまう脆弱性が存在します。 ISC から以下の脆弱性情報が公開されています。 ISC named, acting as a DNSSEC validator, was determining if an NS RRset is insecure based on a value that could mean either that the RRset is actually insecure or that there wasn't a matching key for the RRSIG in the DNSKEY RRset when resuming from validating the DNSKEY RRset. This can happen when in the middle of a DNSKEY algorithm rollover, when two different algorithms were used to sign a zone but only the new set of keys are in the zone DNSKEY RRset.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002543:ISC BIND におけるサービス運用妨害 (DoS) の脆弱性

2010-12-24T15:19:06+09:00

Internet Systems Consortium (ISC) が提供する BIND ネームサーバには、サービス運用妨害 (DoS) 攻撃の脆弱性が存在します。 ISC から、以下の脆弱性情報が公開されています。 Adding certain types of signed negative responses to cache doesn't clear any matching RRSIG records already in cache. A subsequent lookup of the cached data can cause named to crash (INSIST).

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002506:CA eTrust Antivirus における HTML ドキュメント内のマルウェアの検出を回避される脆弱性

2010-12-24T11:50:50+09:00

CA eTrust Antivirus には、Internet Explorer 6 または 7 を使用している際、HTML ドキュメント内のマルウェアの検出を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002505:Windows 上で稼働する CA ARCserve Backup の LDBserver サービスにおける任意のコードを実行される脆弱性

2010-12-24T11:50:24+09:00

Windows 上で稼働する CA ARCserve Backup のサーバ内にある LDBserver サービスには、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002504:CA ARCserve Backup の asdbapi.dll におけるサービス運用妨害 (DoS) の脆弱性

2010-12-24T11:48:33+09:00

CA ARCserve Backup の asdbapi.dll には、検証に関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002503:CA ARCserve Backup の asdbapi.dll のデータベースエンジンサービスにおけるサービス運用妨害 (DoS) の脆弱性

2010-12-24T11:48:11+09:00

CA ARCserve Backup の asdbapi.dll のデータベースエンジンサービスには、検証に関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002502:CA ARCserve Backup の asdbapi.dll のテープエンジンサービスにおけるサービス運用妨害 (DoS) の脆弱性

2010-12-24T11:47:53+09:00

CA ARCserve Backup の asdbapi.dll のテープエンジンサービスには、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002501:CA ARCserve Backup の RPC インターフェイスにおけるディレクトリトラバーサルの脆弱性

2010-12-24T11:47:29+09:00

CA ARCserve Backup の RPC インターフェイス (asdbapi.dll) には、ディレクトリトラバーサルの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002500:CA Service Desk および CMDB におけるクロスサイトスクリプティングの脆弱性

2010-12-24T11:43:21+09:00

CA Service Desk および CMDB には、複数の Web フォームに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002499:CA ARCserve Backup for Laptops and Desktops の LGServer サービスにおける整数オーバーフローの脆弱性

2010-12-24T11:42:55+09:00

CA ARCserve Backup for Laptops and Desktops のサーバ内の LGServer サービスの rxRPC.dll には、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002498:CA Host-Based Intrusion Prevention System の kmxfw.sys ドライバにおける権限を取得される脆弱性

2010-12-24T11:42:26+09:00

複数の CA 製品などで利用される CA Host-Based Intrusion Prevention System (HIPS) の kmxfw.sys ドライバは、IOCTL リクエストを適切に検証しないため、サービス運用妨害 (DoS) 状態となる、または権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002497:CA eTrust Secure Content Manager の HTTP Gateway Service におけるスタックベースのバッファオーバーフローの脆弱性

2010-12-24T11:41:58+09:00

CA eTrust Secure Content Manager の HTTP Gateway Service (icihttp.exe) には、以下に関する処理において不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 (1) LIST コマンド内にあるファイルの "月" フィールド (2) PASV コマンド (3) LIST コマンド内にあるディレクトリ、ファイルおよびリンク

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002496:CA Internet Security Suite の UmxEventCli.dll におけるディレクトリトラバーサルの脆弱性

2010-12-24T11:41:32+09:00

CA Internet Security Suite の UmxEventCli.dll 内にある UmxEventCli.CachedAuditDataList.1 (UmxEventCliLib) ActiveX コントロールには、ディレクトリトラバーサルの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002495:CA BrightStor ARCServe Backup のサーバ内の xdr 関数におけるバッファオーバーフローの脆弱性

2010-12-24T11:41:05+09:00

CA BrightStor ARCServe Backup のサーバ内の xdr 関数には、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002494:CA BrightStor ARCServe Backup の caloggerd におけるディレクトリトラバーサルの脆弱性

2010-12-24T11:40:39+09:00

CA BrightStor ARCServe Backup の caloggerd には、ディレクトリトラバーサルの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002493:CA Secure Content Manager の eTrust Common Services Daemon におけるサービス運用妨害 (DoS) の脆弱性

2010-12-24T11:40:07+09:00

CA Secure Content Manager の eTrust Common Services (Transport) Daemon (eCSqdmn) には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002492:複数の CA 製品の NetBackup サービスにおける任意のコマンドを実行される脆弱性

2010-12-24T11:39:42+09:00

複数の CA 製品の NetBackup サービスには、ファイルのアップロードの検証に関する処理に不備があるため、任意のコマンドを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002491:複数の CA 製品の LGServer サービスにおけるバッファオーバーフローの脆弱性

2010-12-24T11:39:11+09:00

複数の CA 製品の LGServer サービスには、コマンドの引数に関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4597:integraxor: Stack-based buffer overflow in the save method in t...

2010-12-23T00:00:00+09:00

Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface (HMI) before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4599:integraxor: Untrusted search path vulnerability in Ecava Integr...

2010-12-23T00:00:00+09:00

Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4598:integraxor: Directory traversal vulnerability in Ecava IntegraX...

2010-12-23T00:00:00+09:00

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file_name parameter in an open request.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3972:iis: The TELNET_STREAM_CONTEXT::OnSendData function in t...

2010-12-23T00:00:00+09:00

The TELNET_STREAM_CONTEXT::OnSendData function in the FTP protocol handler (ftpsvc.dll) for Microsoft Internet Information Services (IIS) 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted FTP request that triggers memory corruption. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3973:wmi_administrative_tools: The WBEMSingleView.ocx ActiveX control 1.50.1131.0 ...

2010-12-23T00:00:00+09:00

The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4347:kernel: The ACPI subsystem in the Linux kernel before 2.6.3...

2010-12-22T00:00:00+09:00

The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4113:power_manager: Unspecified vulnerability in HP Power Manager (HPPM...

2010-12-22T00:00:00+09:00

Unspecified vulnerability in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3268:antivirus, intel_alert_management_system, endpoint_protection: The GetStringAMSHandler function in prgxhndl.dll in...

2010-12-22T00:00:00+09:00

The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4594:lotus_mobile_connect: The Connection Manager in IBM Lotus Mobile Connect ...

2010-12-22T00:00:00+09:00

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly process TCP connection requests, which allows remote attackers to cause a denial of service (memory consumption and HTTP-AS hang) by making many connection requests that trigger "queue size delta errors," related to a "timing hole" issue.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4519:views: Multiple cross-site request forgery (CSRF) vulnerab...

2010-12-23T00:00:00+09:00

Multiple cross-site request forgery (CSRF) vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable all Views or (2) disable all Views.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4277:embedded-video: Cross-site scripting (XSS) vulnerability in lembedd...

2010-12-22T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3905:eucalyptus: The password reset feature in the administrator int...

2010-12-22T00:00:00+09:00

The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4112:insight_management_agents: HP Insight Management Agents before 8.6 allows remo...

2010-12-22T00:00:00+09:00

HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified request that triggers disclosure of the full path.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3970:windows: Unspecified vulnerability in Microsoft Windows has ...

2010-12-22T00:00:00+09:00

Unspecified vulnerability in Microsoft Windows has unknown impact and attack vectors, as reported by Moti and Xu Hao.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3971:ie: Use-after-free vulnerability in the CSharedStyleShe...

2010-12-22T00:00:00+09:00

Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 7 and 8 and possibly other products, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via multiple @import calls in a crafted document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4111:insight_diagnostics: Cross-site scripting (XSS) vulnerability in HP Insi...

2010-12-22T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4110:openvms: Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H...

2010-12-22T00:00:00+09:00

Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or cause a denial of service via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4595:lotus_mobile_connect: The Connection Manager in IBM Lotus Mobile Connect ...

2010-12-22T00:00:00+09:00

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functionality for HTTP Access Services (HTTP-AS), which allows remote attackers to bypass intended access restrictions via an HTTP request that contains a disallowed User-Agent header.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4346:kernel: The install_special_mapping function in mm/mmap.c i...

2010-12-22T00:00:00+09:00

The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4590:lotus_mobile_connect: Cross-site scripting (XSS) vulnerability in HTTP Ac...

2010-12-22T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4573:esxi: The Update Installer in VMware ESXi 4.1, when a mod...

2010-12-22T00:00:00+09:00

The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows remote attackers to obtain access via an arbitrary username and password.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4591:lotus_mobile_connect: The Connection Manager in IBM Lotus Mobile Connect ...

2010-12-22T00:00:00+09:00

The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete LTPA tokens in response to use of the iNotes Logoff button, which might allow physically proximate attackers to obtain access via an unattended client, related to a cookie domain mismatch.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4593:lotus_mobile_connect: The Connection Manager in IBM Lotus Mobile Connect ...

2010-12-22T00:00:00+09:00

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, which allows remote authenticated users to cause a denial of service (IP address exhaustion) by making invalid attempts to establish sessions with the same VPN ID from multiple devices.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4114:discovery&dependency_mapping_inventory: Cross-site scripting (XSS) vulnerability in HP Disc...

2010-12-22T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.6x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

VRDAフィード：脆弱性脅威分析用情報の定型データ配信

CVE-2010-4628:mybb: member.php in MyBB (aka MyBulletinBoard) before 1.4...

CVE-2010-4630:wp-survey-and-quiz-tool: Cross-site scripting (XSS) vulnerability in pages/a...

CVE-2010-4629:mybb: MyBB (aka MyBulletinBoard) before 1.4.12 does not p...

CVE-2010-4627:mybb: Cross-site request forgery (CSRF) vulnerability in ...

CVE-2010-4642:xwiki: Cross-site scripting (XSS) vulnerability in XWiki E...

CVE-2010-4641:xwiki: SQL injection vulnerability in XWiki Enterprise bef...

CVE-2010-4640:xwiki_watch: Multiple cross-site scripting (XSS) vulnerabilities...

CVE-2010-4639:mysource_matrix: SQL injection vulnerability in index.php in MySourc...

CVE-2010-4635:vacation_rental_listings: SQL injection vulnerability in detail.asp in Site2N...

CVE-2010-4634:osticket: ** DISPUTED ** Directory traversal vulnerability i...

CVE-2010-4265:jboss_enterprise_application_platform, jboss_enterprise_web_platform, jboss_remoting: The org.jboss.remoting.transport.bisocket.BisocketS...

CVE-2010-4633:digishop: SQL injection vulnerability in cart.php in digiSHOP...

CVE-2010-4522:mybb: Multiple cross-site scripting (XSS) vulnerabilities...

CVE-2010-4625:mybb: MyBB (aka MyBulletinBoard) before 1.4.12 does not p...

CVE-2010-4626:mybb: The my_rand function in functions.php in MyBB (aka ...

CVE-2010-4636:business_e-listings: SQL injection vulnerability in detail.asp in Site2N...

[Update]CVE-2010-3862:jboss_enterprise_application_platform, jboss_enterprise_web_platform, jboss_remoting: The org.jboss.remoting.transport.bisocket.BisocketS...

CVE-2010-4624:mybb: MyBB (aka MyBulletinBoard) before 1.4.12 allows rem...

CVE-2010-4631:pilot_cart: Multiple cross-site scripting (XSS) vulnerabilities...

CVE-2010-4632:pilot_cart: Multiple SQL injection vulnerabilities in ASPilot P...

CVE-2010-4637:feedlist: Cross-site scripting (XSS) vulnerability in feedlis...

CVE-2010-4638:com_jquarks4s: SQL injection vulnerability in the submitSurvey fun...

CVE-2010-4616:impresscms: Cross-site scripting (XSS) vulnerability in modules...

CVE-2010-4617:com_jotloader: Directory traversal vulnerability in the JotLoader ...

CVE-2010-4619:mafya_oyun_scrpti: SQL injection vulnerability in profil.php in Mafya ...

CVE-2010-3850:kernel: The ec_dev_ioctl function in net/econet/af_econet.c...

CVE-2010-4614:ero_auktion: SQL injection vulnerability in item.php in Ero Aukt...

CVE-2010-4615:oto_galeri_sistemi: Multiple SQL injection vulnerabilities in Oto Galer...

CVE-2010-3878:jboss_enterprise_application_platform: Cross-site request forgery (CSRF) vulnerability in ...

CVE-2010-3862:jboss_remoting: The org.jboss.remoting.transport.bisocket.BisocketS...

CVE-2010-4342:kernel: The aun_incoming function in net/econet/af_econet.c...

CVE-2010-4608:habari: Habari 0.6.5 allows remote attackers to obtain sens...

CVE-2010-4321:iprint_client: Stack-based buffer overflow in an ActiveX control i...

CVE-2010-4276:livezilla: Cross-site scripting (XSS) vulnerability in the lz_...

CVE-2010-4623:tivoli_access_manager_for_e-business: WebSEAL in IBM Tivoli Access Manager for e-business...

CVE-2010-3708:jboss_enterprise_application_platform, jboss_enterprise_soa_platform: The serialization implementation in JBoss Drools in...

CVE-2010-4258:kernel: The do_exit function in kernel/exit.c in the Linux ...

CVE-2010-4507:ispot, ispot_firmware, clearspot, clearspot_firmware: Multiple cross-site request forgery (CSRF) vulnerab...

CVE-2010-4622:tivoli_access_manager_for_e-business: Directory traversal vulnerability in WebSEAL in IBM...

CVE-2010-4607:habari: Multiple cross-site scripting (XSS) vulnerabilities...

CVE-2010-4606:tivoli_storage_manager: Unspecified vulnerability in the Space Management c...

CVE-2010-4161:enterprise_linux, linux_kernel: The udp_queue_rcv_skb function in net/ipv4/udp.c in...

CVE-2010-4605:tivoli_storage_manager: Unspecified vulnerability in the backup-archive cli...

CVE-2010-3923:attachecase: Untrusted search path vulnerability in AttacheCase ...

CVE-2010-4612:cms: Multiple SQL injection vulnerabilities in index.php...

CVE-2010-3848:kernel: Stack-based buffer overflow in the econet_sendmsg f...

CVE-2010-3849:kernel: The econet_sendmsg function in net/econet/af_econet...

CVE-2010-4610:cms: Cross-site scripting (XSS) vulnerability in index.p...

CVE-2010-4158:kernel: The sk_run_filter function in net/core/filter.c in ...

CVE-2010-4352:dbus: Stack consumption vulnerability in D-Bus (aka DBus)...

CVE-2010-4618:aicontactsafe: Cross-site scripting (XSS) vulnerability in the Alg...

CVE-2010-4609:cms: SQL injection vulnerability in index.php in Html-ed...

CVE-2010-4613:hycus_cms: Multiple directory traversal vulnerabilities in Hyc...

CVE-2010-3874:kernel: Heap-based buffer overflow in the bcm_connect funct...

CVE-2010-3859:kernel: Multiple integer signedness errors in the TIPC impl...

CVE-2010-4604:tivoli_storage_manager: Stack-based buffer overflow in the GeneratePassword...

CVE-2010-4602:rational_clearquest: The Web client in IBM Rational ClearQuest 7.1.1.x b...

CVE-2010-4601:rational_clearquest: Multiple unspecified vulnerabilities in IBM Rationa...

CVE-2010-4343:kernel: drivers/scsi/bfa/bfa_core.c in the Linux kernel bef...

CVE-2010-4600:dojo_toolkit, rational_clearquest: Dojo Toolkit, as used in the Web client in IBM Rati...

CVE-2010-4565:kernel: The bcm_connect function in net/can/bcm.c (aka the ...

JVNDB-2010-002563:複数の VMware 製品の VMware-Tools アップデート機能における権限昇格の脆弱性

JVNDB-2010-002562:複数の VMware 製品の vmware-mount における権限昇格の脆弱性

JVNDB-2010-002561:複数の VMware 製品の vmware-mount における権限昇格の脆弱性

JVNDB-2010-002560:複数の VMware 製品の VMnc メディアコーデック内にあるフレーム復元機能における任意のコードを実行される脆弱性

JVNDB-2010-002559:Apple QuickTime における整数オーバーフローの脆弱性

JVNDB-2010-002558:Windows 上で稼働する Apple QuickTime における重要な情報を取得される脆弱性

JVNDB-2010-002557:Windows 上で稼働する Apple QuickTime におけるヒープベースのバッファオーバーフローの脆弱性

JVNDB-2010-002556:Apple QuickTime における整数符号エラーの脆弱性

JVNDB-2010-002555:Apple QuickTime における任意のコードを実行される脆弱性

JVNDB-2010-002554:Apple QuickTime における任意のコードを実行される脆弱性

JVNDB-2010-002553:CA PSFormX および CA WebScan ActiveX コントロールにおける任意のコードを実行される脆弱性

JVNDB-2010-002552:CA eHealth Performance Manager におけるクロスサイトスクリプティングの脆弱性

JVNDB-2009-002631:CA eTrust PestPatrol の PestPatrol ActiveX コントロールにおけるスタックペースのバッファオーバーフローの脆弱性

JVNDB-2009-002630:CA Service Desk の Web インターフェイスにおけるクロスサイトスクリプティングの脆弱性

JVNDB-2009-002629:複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントおけるサービス運用妨害 (DoS) の脆弱性

JVNDB-2009-002628:複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントにおける任意のコードを実行される脆弱性

JVNDB-2009-002627:CA Host-Based Intrusion Prevention System の kmxIds.sys におけるサービス運用妨害 (DoS) の脆弱性

JVNDB-2009-002626:CA SiteMinder における J2EE アプリケーションのクロスサイトスクリプティングに対する保護を回避される脆弱性

CVE-2010-4634:osticket: DISPUTED Directory traversal vulnerability i...