jetlib.sec » Tags » reporter-engine

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

5 items tagged "reporter engine"

Related tags: code execution [+], vulnerability [+], novell [+], file [+], zero day [+], zero [+], record [+], memcpy [+], day [+], safer use [+], code [+], arbitrary code [+]

• December 12, 2011
• 10:29

  Novell File Reporter Engine RECORD Tag Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Engine.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  novell code file reporter-engine code-execution safer-use arbitrary-code  

• July 21, 2011
• 0:00

  Vuln: Novell File Reporter Engine 'RECORD' Tag Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Novell File Reporter Engine 'RECORD' Tag Remote Code Execution Vulnerability

  Tags:  novell file record reporter-engine code-execution vulnerability  

• June 28, 2011
• 0:00

  Vuln: Novell File Reporter Engine 'RECORD' Tag Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Novell File Reporter Engine 'RECORD' Tag Remote Code Execution Vulnerability

  Tags:  novell file record reporter-engine code-execution vulnerability  

• June 27, 2011
• 16:11

  Zero Day Initiative Advisory 11-227

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-227 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Engine. Authentication is not required to exploit this vulnerability. The specific flaw exists within NFREngine.exe which communicates with the Agent component over HTTPS on TCP port 3035. When parsing tags inside the element, the application lacks a size check before pushing strings to a memcpy. An attacker can leverage this to corrupt the thread's stack. This vulnerability can result in remote code execution under the context of the SYSTEM account.

  Tags:  day zero vulnerability reporter-engine code-execution zero-day memcpy  

• 16:11

  Zero Day Initiative Advisory 11-227

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-227 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Engine. Authentication is not required to exploit this vulnerability. The specific flaw exists within NFREngine.exe which communicates with the Agent component over HTTPS on TCP port 3035. When parsing tags inside the element, the application lacks a size check before pushing strings to a memcpy. An attacker can leverage this to corrupt the thread's stack. This vulnerability can result in remote code execution under the context of the SYSTEM account.

  Tags:  day zero vulnerability reporter-engine code-execution zero-day memcpy