Tenable Research

While writing a detection plugin, Tenable discovered an additional vulnerability that allows a remote, unauthenticated attacker to gain admin access to the Universal Management Host (UMH) or the Universal Management Appliance (UMA) interface of a Dell SonicWALL GMS/Analyzer system.

While developing detection plugins for the vulnerabilities disclosed by HP on 2016-03-15, Tenable discovered two issues that could allow remote code execution. #1 - mod_smh_config.so /proxy/SetSMHData admin-group Parameter Handling Remote Stack Buffer Overflow

While working on detection plugins for the Nessus vulnerability scanner, we identified a new issue in Citrix License Server and Flexera Flex License Manager (now FlexNet Publisher).

While developing a plugin to detect PAN-SA-2016-0005, Tenable discovered a different vulnerability in the panUserLogin() function within panmodule.so that could result in an unauthenticated remote DoS. The PAN-OS function calls the glibc strcpy_chk() function to copy a user-supplied username and password to a buffer.

During the development of a detection plugin for a previous HP VTS vulnerability, one of our engineers discovered an additional issue that allows an unauthenticated attacker to delete arbitrary files on the VTS server. This was tested on Performance Center Virtual Table Server, a component of LoadRunner VTS 12.50 running on a 32-bit Windows 2008 Server host.