Mario Ballano

A security issue was found in the Moog EXO Series units that support the ONVIF interoperability protocol. The authentication check for certain ONVIF operations can be bypassed, allowing an attacker to execute privileged operations without authentication. This could enable the creation of a new Administrator user.

The administration console of the Moog EXO Series units has a feature that allows spawning a process repeatedly at a certain time interval as 'root'. This feature can be exploited by using special shell variables, such as `${IFS}`, to execute arbitrary commands as 'root' on the units.

The issue concerns a hardcoded credentials vulnerability, which could lead to confidentiality issues when using the FTP, Telnet, or SSH protocols.

The issue concerns several XML External Entity (XXE) vulnerabilities. These vulnerabilities allow remote unauthenticated users to read arbitrary files by using a crafted Document Type Definition (DTD) in an XML request.

The issue concerns a blind SQL injection in the login form, allowing remote attackers to access user credentials, including `username` and `password`. This could potentially lead to unauthorized access to sensitive information.

The issue is related to hard-coded credentials in the AmosConnect Task Manager, allowing remote attackers to gain full administrative privileges. This includes the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges. The exploitation of this issue can enable an attacker to obtain full administrative privileges and execute arbitrary commands on the host platform.

Name of the Vulnerable Software and Affected Versions: Apple Bonjour for Windows versions prior to 1.0.5 Description: The issue allows attackers to cause a denial of service by resolving a crafted .local domain name that contains a long label, resulting in a NULL pointer dereference and application crash. Recommendations: For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Apple QuickTime versions prior to 7.3 Description: The issue is related to a heap-based buffer overflow that occurs when parsing the color table atom (CTAB) in a movie file. This happens due to an invalid color table size, specifically related to the CTAB RGB values, allowing remote attackers to execute arbitrary code. Recommendations: For versions prior to 7.3, update to version 7.3 or later to resolve the issue.

A buffer overflow issue exists in the Macrovision SafeDisc secdrv.sys driver, allowing local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD NEITHER IOCTL.