Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

S-287: CA Unicenter DSM ITRM Legends ActiveX Vulnerability

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-287: CA Unicenter DSM ITRM Legends ActiveX Vulnerability
# 1  
Old 05-09-2008
S-287: CA Unicenter DSM ITRM Legends ActiveX Vulnerability
The CA Unicenter DMS ITRM Legends ActiveX control contains an integer overflow vulnerability, which can allow a remote attacker to execute arbitrary code on a vulnerable system. The risk is MEDIUM. By convincing a user to view a specially crafted HTML document (e.g., a web page or an HTML email message or attachment), an attacker may be able to execute arbitrary code with the privileges of the user.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

cfrun

cfengine(8)						      System Manager's Manual						       cfengine(8)

NAME

       cfrun - Execute remote cfagents

SYNOPSIS

       /usr/sbin/cfrun [options]

DESCRIPTION

       cfengine is a language based system specifically designed for testing and configuring unix-like systems attached to a TCP/IP network.

       cfrun is a tool for executing one or more remote agents; it contacts the cfservd daemon running on a remote host, which (in turn) starts an
       authorized agent. Cfrun cannot be used to send instructions to a remote agent, but it can be used to flag certain aspects  to  the  agent's
       existing policy for special attention..

       The  command  line options for cfrun are slightly unusual. They are separated into three sections: options to the cfrun program, options to
       the remote cfagent (with some security restrictions) and finally classes or flags to the remote agent.

EXAMPLES

       cfrun specialhost1 specialhost2 -- --verbose -- solaris

       In this example, we contact hosts specialhost1 specialhost2 by name, and ask them to execute cfagent with the --verbose flag, if the  class
       solaris is not defined.

       cfrun specialhost1 --verbose  --  -- solaris

       In  this  example  the  verbose flag is sent to cfrun rather than to the remote agent.  No options are sent to the remote agents. The class
       specifier is sent to all the agents so that they may determine whether they fulfill the required class membership for execution.

       The default behaviour is to execute cfagent serially on all hosts listed in the cfrun.hosts file.

FILES

       cfrun read a configuration file cfrun.hosts which must contain a list of every potentially contactable host.

AUTHOR

       Mark Burgess, Oslo University College

INFORMATION

       http://www.cfengine.org

							       Maintenance Commands						       cfengine(8)