SAP Management Console Get Logfile

This module simply attempts to download available logfiles and developer tracefiles through the SAP Management Console SOAP Interface. Please use the sapmgmtconlistlogfiles extension to view a list of available files. This module requires Metasploit: https://metasploit.com/download Current source...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager Advisory ID: cisco-sa-20110223-telepresence-ctsman Revision 1.0 For Public Release 2011 February 23 +----------------------------------------------------- Summary ======...

CVE-2011-0377

Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service service crash via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug ID CSCth03605...

CVE-2011-0380

Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562...

Authentication flaw

Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562...

CVE-2011-0377

Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service service crash via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug ID CSCth03605...

CVE-2011-0377

Cisco TelePresence endpoint devices running software 1.2.x–1.6.x are affected by CVE-2011-0377 due to a malformed SOAP request combined with a spoofed TelePresence Manager that provides an invalid IP address, causing a denial of service (service crash). The linked Cisco PSIRT advisory details tha...

CVE-2011-0380

CVE-2011-0380 affects Cisco TelePresence Manager versions 1.2.x–1.6.x. The issue is a SOAP authentication bypass: a malformed SOAP request can allow a remote, unauthenticated attacker to invoke arbitrary SOAP methods, potentially compromising the device. The Cisco advisory notes three related vul...

CVE-2011-0380

Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562...

PT-2011-2299

Name of the Vulnerable Software and Affected Versions Cisco TelePresence endpoint devices versions 1.2.x through 1.6.x Description The issue allows remote attackers to cause a denial of service, resulting in a service crash, via a malformed SOAP request. This can occur in conjunction with a spoof...

CVE-2011-0380: Improper Authentication

Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562...

PT-2011-2302

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Manager versions 1.2.x through 1.6.x Description The issue allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request. Recommendations For versions 1.2.x through 1.6.x, update ...

CVE-2011-0377: Undefined Security Weakness

Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service service crash via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug ID CSCth03605...

CVE-2010-4416

Unspecified vulnerability in the Oracle GoldenGate Veridata component in Oracle Fusion Middleware 3.0.0.4 allows remote attackers to affect availability via unknown vectors related to Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims...

Buffer overflow

Unspecified vulnerability in the Oracle GoldenGate Veridata component in Oracle Fusion Middleware 3.0.0.4 allows remote attackers to affect availability via unknown vectors related to Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims...

CVE-2010-4416

CVE-2010-4416 concerns Oracle GoldenGate Veridata Server (Oracle Fusion Middleware 3.0.0.4). The connected advisories describe a buffer/boundary overflow in the server when parsing XML SOAP requests containing an overly long tag string. This flaw can allow a remote attacker to execute arbitrary c...

CVE-2010-4416: Undefined Security Weakness

Unspecified vulnerability in the Oracle GoldenGate Veridata component in Oracle Fusion Middleware 3.0.0.4 allows remote attackers to affect availability via unknown vectors related to Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims...

Oracle GoldenGate Veridata Server XML SOAP Request Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle GoldenGate Veridata. Authentication is not required to exploit this vulnerability. The specific flaw exists within the way the application parses an XML soap request used for authorization t...

PT-2011-1520

Name of the Vulnerable Software and Affected Versions Oracle GoldenGate Veridata version 3.0.0.4 Description The issue affects the availability of the system. It is reportedly related to the parsing of XML SOAP requests by the Server component. A reliable third-party researcher claims this could ...

CVE-2010-3984

Buffer overflow in mngcorecom.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability RHA r15.0 SP1 allows remote...