T-015: InstallShield / Macrovision / Acresso FLEXnet Connect Vulnerabilities

Tags

Special Forums Cybersecurity Security Advisories (RSS) T-015: InstallShield / Macrovision / Acresso FLEXnet Connect Vulnerabilities

11-13-2008

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

T-015: InstallShield / Macrovision / Acresso FLEXnet Connect Vulnerabilities

Acresso FLEXnet Connect executes scripts that are insecurely retrieved from a remote web server, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. The risk is MEDIUM. By modifying the rule script that is sent to a FLEXnet Connect client, a remote unauthenticated attacker may be able to execute arbitrary code on a vulnerable system.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. HP-UX

installshield....

hi all is it possible to automate installaion process of any software on unix? for eg. we have our front end on windows and we have installshield package that installs everything creating folder structure to creating database. now we are planning to automate our backend installation like...

2. Solaris

some questions on 310-015

hi can any1 pls ans these questions 22. Which two statements about the functionality of the syslogd daemon are true? (Choose two) A. Error messages can only be logged locally in a system log. B. The kernel, daemons, and syslogd each write directly to a system log. C. Syslogd can write...

LEARN ABOUT DEBIAN

genhash

genhash(1)						      General Commands Manual							genhash(1)

NAME

       genhash - md5 hash generation tool for remote web pages

SYNOPSIS

       genhash [options] [-s server-address] [-p port] [-u url]

DESCRIPTION

       genhash	is  a  tool used for generating md5sum hashes of remote web pages.  genhash can use HTTP or HTTPS to connect to the web page.  The
       output by this utility includes the HTTP header, page data, and the md5sum  of  the  data.   This  md5sum  can  then  be  used  within  the
       keepalived(8) program, for monitoring HTTP and HTTPS services.

OPTIONS

       --use-ssl, -S
	      Use SSL to connect to the server.

       --server <host>, -s
	      Specify the ip address to connect to.

       --port <port>, -p
	      Specify the port to connect to.

       --url <url>, -u
	      Specify the path to the file you want to generate the hash of.

       --use-virtualhost <host>, -u
	      Specify the virtual host to send along with the HTTP headers.

       --verbose, -v
	      Be verbose with the output.

       --help, -h
	      Display the program help screen and exit.

       --release, -r
	      Display the release number (version) and exit.

SEE ALSO

       keepalived(8), keepalived.conf(5)

AUTHOR

       genhash was written by Alexandre Cassen <acassen@linux-vs.org>.

       This man page was contributed by Andres Salomon <dilinger@voxel.net> for the Debian GNU/Linux system (but may be used by others).

								     Feb 2004								genhash(1)

Security Advisories (RSS)