T-015: InstallShield / Macrovision / Acresso FLEXnet Connect Vulnerabilities


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) T-015: InstallShield / Macrovision / Acresso FLEXnet Connect Vulnerabilities
# 1  
Old 11-13-2008
T-015: InstallShield / Macrovision / Acresso FLEXnet Connect Vulnerabilities

Acresso FLEXnet Connect executes scripts that are insecurely retrieved from a remote web server, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. The risk is MEDIUM. By modifying the rule script that is sent to a FLEXnet Connect client, a remote unauthenticated attacker may be able to execute arbitrary code on a vulnerable system.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. HP-UX

installshield....

hi all is it possible to automate installaion process of any software on unix? for eg. we have our front end on windows and we have installshield package that installs everything creating folder structure to creating database. now we are planning to automate our backend installation like... (0 Replies)
Discussion started by: zedex
0 Replies

2. Solaris

some questions on 310-015

hi can any1 pls ans these questions 22. Which two statements about the functionality of the syslogd daemon are true? (Choose two) A. Error messages can only be logged locally in a system log. B. The kernel, daemons, and syslogd each write directly to a system log. C. Syslogd can write... (1 Reply)
Discussion started by: azeem_3001
1 Replies
Login or Register to Ask a Question
TFTP(1) 							   User's Manual							   TFTP(1)

NAME
tftp - IPv4 Trivial File Transfer Protocol client SYNOPSIS
tftp [ options... ] [host [port]] [-c command] DESCRIPTION
tftp is a client for the Trivial file Transfer Protocol, which can be used to transfer files to and from remote machines, including some very minimalistic, usually embedded, systems. The remote host may be specified on the command line, in which case tftp uses host as the default host for future transfers (see the connect command below.) OPTIONS
-4 Connect with IPv4 only, even if IPv6 support was compiled in. -6 Connect with IPv6 only, if compiled in. -c command Execute command as if it had been entered on the tftp prompt. Must be specified last on the command line. -l Default to literal mode. Used to avoid special processing of ':' in a file name. -m mode Set the default transfer mode to mode. This is usually used with -c. -R port:port Force the originating port number to be in the specified range of port numbers. -v Default to verbose mode. -V Print the version number and configuration to standard output, then exit gracefully. COMMANDS
Once tftp is running, it issues the prompt tftp> and recognizes the following commands: ? command-name... help command-name... Print help information ascii Shorthand for mode ascii. binary Shorthand for mode binary. connect host [port] Set the host (and optionally port) for transfers. Note that the TFTP protocol, unlike the FTP protocol, does not maintain connec- tions between transfers; thus, the connect command does not actually create a connection, but merely remembers what host is to be used for transfers. You do not have to use the connect command; the remote host can be specified as part of the get or put com- mands. get file get remotefile localfile get file1 file2 file3... Get a file or set of files from the specified sources. A remote filename can be in one of two forms: a plain filename on the remote host, if the host has already been specified, or a string of the form host:filename to specify both a host and filename at the same time. If the latter form is used, the last hostname specified becomes the default for future transfers. Enable literal mode to prevent special treatment of the ':' character (e.g. C:dirfile). literal Toggle literal mode. When set, this mode prevents special treatment of ':' in filenames. mode transfer-mode Specify the mode for transfers; transfer-mode may be one of ascii (or netascii) or binary (or octet.) The default is ascii. put file put localfile remotefile put file1 file2 file3... remote-directory Put a file or set of files to the specified remote file or directory. The destination can be in one of two forms: a filename on the remote host, if the host has already been specified, or a string of the form host:filename to specify both a host and filename at the same time. If the latter form is used, the hostname specified becomes the default for future transfers. If the remote-direc- tory form is used, the remote host is assumed to be a UNIX system or another system using / as directory separator. Enable literal mode to prevent special treatment of the ':' character (e.g. C:dirfile). quit Exit tftp. End-of-file will also exit. rexmt retransmission-timeout Set the per-packet retransmission timeout, in seconds. status Show current status. timeout total-transmission-timeout Set the total transmission timeout, in seconds. trace Toggle packet tracing (a debugging feature.) verbose Toggle verbose mode. NOTES
The TFTP protocol provides no provisions for authentication or security. Therefore, the remote server will probably implement some kinds of access restriction or firewalling. These access restrictions are likely to be site- and server-specific. AUTHOR
This version of tftp is maintained by H. Peter Anvin <hpa@zytor.com>. It was derived from, but has substantially diverged from, an OpenBSD source base, with added patches by Markus Gutschke and Gero Kulhman. SEE ALSO
tftpd(8). tftp-hpa 5.2 23 July 2008 TFTP(1)