jetlib.sec » Tags » micro-control

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

22 items tagged "micro control"

Related tags: manager. authentication [+], zero day [+], trent micro [+], initiative [+], security [+], secunia [+], advisory [+], vulnerability [+], security advisory [+], control [+], code execution [+], trend [+], tcp port 443 [+], string [+], stack buffer [+], micro [+], manager. user [+], backend database [+], arbitrary code [+], trend micro [+], manager caslogdirectinserthandler [+], zdi [+], safer use [+], manager casprocessor [+], malicious users [+], cs code [+], cross site scripting [+], code [+], zero [+], day [+]

• February 24, 2012
• 0:00

  Vuln: Trend Micro Control Manager 'CmdProcessor.exe' Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Trend Micro Control Manager 'CmdProcessor.exe' Remote Code Execution Vulnerability

  Tags:  control trend micro code-execution micro-control trend-micro  

• December 16, 2011
• 11:34

  Trend Micro Control Manager CasLogDirectInsertHandler.cs Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  control trend micro manager-caslogdirectinserthandler micro-control code-execution cs-code  

• 11:34

  TrendMicro Control Manager CASProcessor.exe BLOB Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  control code vulnerability manager-casprocessor code-execution micro-control safer-use  

• December 08, 2011
• 22:58

  Secunia Security Advisory 47114

   » ‎ Packet Storm Security Advisories
  Secunia Security Advisory - A vulnerability has been reported in Trend Micro Control Manager, which can be exploited by malicious people to compromise a vulnerable system.

  Tags:  advisory secunia security micro-control security-advisory  

• December 07, 2011
• 20:11

  Zero Day Initiative Advisory 11-345

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-345 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trent Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within CmdProcessor.exe service running on TCP port 20101. The vulnerable function is the CGenericScheduler::AddTask function of cmdHandlerRedAlertController.dll. When processing a specially crafted IPC packet, controlled data is copied into a 256-byte stack buffer. This can be exploited to execute remote code under the context of the user

  Tags:  day zero initiative manager.-authentication trent-micro stack-buffer micro-control  

• 20:11

  Zero Day Initiative Advisory 11-345

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-345 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trent Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within CmdProcessor.exe service running on TCP port 20101. The vulnerable function is the CGenericScheduler::AddTask function of cmdHandlerRedAlertController.dll. When processing a specially crafted IPC packet, controlled data is copied into a 256-byte stack buffer. This can be exploited to execute remote code under the context of the user

  Tags:  day zero initiative manager.-authentication trent-micro stack-buffer micro-control  

• 20:11

  Zero Day Initiative Advisory 11-345

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-345 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trent Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within CmdProcessor.exe service running on TCP port 20101. The vulnerable function is the CGenericScheduler::AddTask function of cmdHandlerRedAlertController.dll. When processing a specially crafted IPC packet, controlled data is copied into a 256-byte stack buffer. This can be exploited to execute remote code under the context of the user

  Tags:  day zero initiative manager.-authentication trent-micro stack-buffer micro-control  

• July 13, 2011
• 23:06

  Secunia Security Advisory 45200

   » ‎ Packet Storm Security Advisories
  Secunia Security Advisory - A vulnerability has been reported in Trend Micro Control Manager, which can be exploited by malicious people to compromise a vulnerable system.

  Tags:  advisory secunia security micro-control security-advisory  

• July 12, 2011
• 20:49

  Secunia Security Advisory 44970

   » ‎ Packet Storm Security Advisories
  Secunia Security Advisory - Sow Ching Shiong has discovered a vulnerability in Trend Micro Control Manager, which can be exploited by malicious users to disclose sensitive information.

  Tags:  advisory secunia security micro-control malicious-users  

• 17:58

  Zero Day Initiative Advisory 11-235

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-235 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within En_Utility.dll. A module called from CASProcessor.exe running on TCP port 20801. A specially crafted packet with malformed BLOB encrypted data, is handled by HandleMcpRequest(), and contains instructions that will allow for an integer wrap, leading to a heap overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of the SYSTEM.

  Tags:  day zero vulnerability manager.-authentication micro-control zero-day arbitrary-code  

• 17:58

  Zero Day Initiative Advisory 11-235

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-235 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within En_Utility.dll. A module called from CASProcessor.exe running on TCP port 20801. A specially crafted packet with malformed BLOB encrypted data, is handled by HandleMcpRequest(), and contains instructions that will allow for an integer wrap, leading to a heap overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of the SYSTEM.

  Tags:  day zero vulnerability manager.-authentication micro-control zero-day arbitrary-code  

• 17:58

  Zero Day Initiative Advisory 11-235

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-235 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within En_Utility.dll. A module called from CASProcessor.exe running on TCP port 20801. A specially crafted packet with malformed BLOB encrypted data, is handled by HandleMcpRequest(), and contains instructions that will allow for an integer wrap, leading to a heap overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of the SYSTEM.

  Tags:  day zero vulnerability manager.-authentication micro-control zero-day arbitrary-code  

• July 11, 2011
• 20:50

  Secunia Security Advisory 45176

   » ‎ Packet Storm Security Advisories
  Secunia Security Advisory - A vulnerability has been reported in Trend Micro Control Manager, which can be exploited by malicious people to manipulate certain data.

  Tags:  advisory secunia security micro-control security-advisory  

• 14:00

  Bugtraq: ZDI-11-234: Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-11-234: Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability

  Tags:  control trend micro manager-caslogdirectinserthandler code-execution micro-control zdi  

• 12:30

  Zero Day Initiative Advisory 11-234

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-234 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the Cas_LogDirectInsert.aspx http handler, which listens by default on TCP port 443. A specially crafted POST request allows remote attackers to supply XML and schema information which is used within queries to the backend database. By supplying malicious values, an attacker can inject themselves a user account which can be used to execute code via the management console on the service.

  Tags:  day zero initiative manager.-user tcp-port-443 micro-control backend-database  

• 12:30

  Zero Day Initiative Advisory 11-234

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-234 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the Cas_LogDirectInsert.aspx http handler, which listens by default on TCP port 443. A specially crafted POST request allows remote attackers to supply XML and schema information which is used within queries to the backend database. By supplying malicious values, an attacker can inject themselves a user account which can be used to execute code via the management console on the service.

  Tags:  day zero initiative manager.-user tcp-port-443 micro-control backend-database  

• 12:30

  Zero Day Initiative Advisory 11-234

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-234 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the Cas_LogDirectInsert.aspx http handler, which listens by default on TCP port 443. A specially crafted POST request allows remote attackers to supply XML and schema information which is used within queries to the backend database. By supplying malicious values, an attacker can inject themselves a user account which can be used to execute code via the management console on the service.

  Tags:  day zero initiative manager.-user tcp-port-443 micro-control backend-database  

• June 16, 2011
• 21:43

  Secunia Security Advisory 44134

   » ‎ Packet Storm Security Advisories
  Secunia Security Advisory - Sow Ching Shiong has discovered a vulnerability in Trend Micro Control Manager, which can be exploited by malicious people to conduct cross-site scripting attacks.

  Tags:  advisory secunia security micro-control security-advisory  

• 0:00

  Vuln: Trend Micro Control Manager 'ApHost' Parameter Cross Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Trend Micro Control Manager 'ApHost' Parameter Cross Site Scripting Vulnerability

  Tags:  micro-control cross-site-scripting trend-micro  

• January 18, 2011
• 13:41

  Zero Day Initiative Advisory 10-301

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-301 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trent Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within how the mrf.exe component composes a string used to display an error message. The application will build the string using a buffer located on the stack using a sprintf call. As attacker controlled data is used to construct the string, this can lead to code execution under the context of the application.

  Tags:  day zero string manager.-authentication trent-micro micro-control zero-day  

• 13:41

  Zero Day Initiative Advisory 10-301

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-301 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trent Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within how the mrf.exe component composes a string used to display an error message. The application will build the string using a buffer located on the stack using a sprintf call. As attacker controlled data is used to construct the string, this can lead to code execution under the context of the application.

  Tags:  day zero string manager.-authentication trent-micro micro-control zero-day  

• 13:41

  Zero Day Initiative Advisory 10-301

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 10-301 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trent Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within how the mrf.exe component composes a string used to display an error message. The application will build the string using a buffer located on the stack using a sprintf call. As attacker controlled data is used to construct the string, this can lead to code execution under the context of the application.

  Tags:  day zero string manager.-authentication trent-micro micro-control zero-day