Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Vuln-Dev
[Top] [All Lists]

Vulnerability in IBM access

Subject: Vulnerability in IBM access
Date: 26 Jul 2005 09:46:44 -0000
Hello, 

I would like to make to Bugtraq knowledge the existence of a security 
vulnerability in IBM access software. IBM access is vulnerable to a Shared 
Section vulnerability. The processes QCWLICON.exe and QCTRAY.exe have the 
section \BaseNamedObjects\QCONDB with invalid rights which allows everyone to 
read the configuration of all connections and to write arbitrary data to create 
a dos against the application. 
This could be shown with the Process Explorer tool by sysinternal and used by 
the ListSS, DumpSS and TestSS tools written by C Cerrudo. 
Regards, 

Sylvain ROGER
Security Consultant
http://www.solucom.fr

<Prev in Thread] Current Thread [Next in Thread>
  • Vulnerability in IBM access, sylvain . roger <=