< Back to JetLib.com

jetlib.sec » Tags » witness-systems

« Expand/Collapse

5 items tagged "witness systems"

Related tags: vulnerability [+], packet type [+], exe component [+], zero [+], user [+], code execution [+], zdi [+], witness [+], systems [+], safer use [+], equality [+], day [+], code [+]

January 02, 2012
11:39
Witness Systems eQuality Unify Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Witness Systems eQuality Suite.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability equality witness-systems code-execution safer-use

September 06, 2011
9:00
Bugtraq: ZDI-11-279: (0day) Witness Systems eQuality Unify Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ZDI-11-279: (0day) Witness Systems eQuality Unify Remote Code Execution Vulnerability
Tags: systems day witness witness-systems code-execution zdi

September 02, 2011
15:01
Zero Day Initiative Advisory 11-279
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-279 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Witness Systems eQuality Suite. This application is bundled with Nortel Contact Recording and Quality Monitoring Suite. Authentication is not required to exploit this vulnerability. The flaw exists within the Unify2.exe component which listens by default on TCP port 6821. When handling a packet type the process trusts a remaining packet length value provided by the user and blindly copies user supplied data into a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: witness-systems exe-component packet-type

15:01
Zero Day Initiative Advisory 11-279
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-279 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Witness Systems eQuality Suite. This application is bundled with Nortel Contact Recording and Quality Monitoring Suite. Authentication is not required to exploit this vulnerability. The flaw exists within the Unify2.exe component which listens by default on TCP port 6821. When handling a packet type the process trusts a remaining packet length value provided by the user and blindly copies user supplied data into a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: user zero vulnerability witness-systems exe-component packet-type

15:01
Zero Day Initiative Advisory 11-279
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-279 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Witness Systems eQuality Suite. This application is bundled with Nortel Contact Recording and Quality Monitoring Suite. Authentication is not required to exploit this vulnerability. The flaw exists within the Unify2.exe component which listens by default on TCP port 6821. When handling a packet type the process trusts a remaining packet length value provided by the user and blindly copies user supplied data into a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: user zero vulnerability witness-systems exe-component packet-type