Page 12 of 62 results (0.003 seconds)

CVSS: 5.0EPSS: 1%CPEs: 1EXPL: 0

BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names. BMC Remedy Action Request System 5.01.02 Patch 1267 genera diversos mensajes de error para las tentativas falladas de conexión con un username válido que para éstos con un username inválido, lo que permite que los atacantes remotos que determinen nombres de usuario válidos. • http://osvdb.org/31658 http://secunia.com/advisories/23775 http://securityreason.com/securityalert/2162 http://securitytracker.com/id?1017515 http://www.alighieri.org/advisories/advisory-remedy50102.txt http://www.securityfocus.com/archive/1/456949/100/0/threaded http://www.securityfocus.com/archive/1/457078/100/0/threaded http://www.securityfocus.com/bid/22066 http://www.vupen.com/english/advisories/2007/0204 https://exchange.xforce.ibmcloud.com/vulnerabilities/31527 •

CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0

BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files. • http://marc.info/?l=bugtraq&m=113018286105811&w=2 http://secunia.com/advisories/17294 http://securitytracker.com/id?1015096 http://www.securityfocus.com/bid/15167 •

CVSS: 7.2EPSS: 0%CPEs: 4EXPL: 2

BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program. • https://www.exploit-db.com/exploits/19422 http://marc.info/?l=bugtraq&m=93198293132463&w=2 http://marc.info/?l=bugtraq&m=93372579004129&w=2 http://www.securityfocus.com/bid/525 •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

BMC Patrol allows remote attackers to gain access to an agent by spoofing frames. • http://www.iss.net/security_center/static/2075.php http://www.securityfocus.com/archive/1/13204 •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password. • http://www.securityfocus.com/archive/1/13204 •