TPTI-07-05: IBM Tivoli Provisioning Manager for OS Deployment Multiple Stack Overflow Vulnerabilities

TPTI-07-05: IBM Tivoli Provisioning Manager for OS Deployment Multiple Stack Overflow Vulnerabilities http://dvlabs.tippingpoint.com/advisory/TPTI-07-05 May 2, 2007 -- CVE ID: CVE-2007-1868 -- Affected Vendor: IBM -- Affected Products: Tivoli Provisioning Manager for OS Deployment -- Vulnerabilit...

Design/Logic Flaw

Unspecified vulnerability in InterVations NaviCOPA Web Server 2.01 20070323 allows remote attackers to cause a denial of service daemon crash via crafted HTTP requests, as demonstrated by long requests containing '\A' characters, probably a different issue than CVE-2006-5112 and CVE-2007-1733...

CVE-2007-2336

Unspecified vulnerability in InterVations NaviCOPA Web Server 2.01 20070323 allows remote attackers to cause a denial of service daemon crash via crafted HTTP requests, as demonstrated by long requests containing '\A' characters, probably a different issue than CVE-2006-5112 and CVE-2007-1733...

CVE-2007-2336

Unspecified vulnerability in InterVations NaviCOPA Web Server 2.01 20070323 allows remote attackers to cause a denial of service daemon crash via crafted HTTP requests, as demonstrated by long requests containing '\A' characters, probably a different issue than CVE-2006-5112 and CVE-2007-1733...

CVE-2007-2336: Undefined Security Weakness

Unspecified vulnerability in InterVations NaviCOPA Web Server 2.01 20070323 allows remote attackers to cause a denial of service daemon crash via crafted HTTP requests, as demonstrated by long requests containing '\A' characters, probably a different issue than CVE-2006-5112 and CVE-2007-1733...

Code injection

Trend Micro ServerProtect for Linux SPLX 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx2376info cookie to the web interface port 14942/tcp...

CVE-2007-1168: Undefined Security Weakness

Trend Micro ServerProtect for Linux SPLX 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx2376info cookie to the web interface port 14942/tcp...

[Full-disclosure] Web 2.0 backdoors made easy with MSIE & XMLHttpRequest

As you probably know, the famous "web 2.0" XMLHttpRequest object allows client-side web scripts to send nearly arbitrary HTTP requests, and then freely analyze and manipulate the returned response, including HTTP headers. This gives an unprecedented level of control over your browser to the autho...

CVE-2007-0420

BEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote attackers to obtain sensitive information via malformed HTTP requests, which reveal data from previous requests...

Code injection

BEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote attackers to obtain sensitive information via malformed HTTP requests, which reveal data from previous requests...

CVE-2007-0420

BEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote attackers to obtain sensitive information via malformed HTTP requests, which reveal data from previous requests...

CVE-2007-0420

BEA WebLogic Server 9.0, 9.1, and 9.2 Gold are affected by a vulnerability in which remote attackers can obtain sensitive information through malformed HTTP requests that reveal data from prior requests. The issue centers on information disclosure and is scored as medium (CVSS base 5.0, Network a...

CVE-2007-0420: Undefined Security Weakness

BEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote attackers to obtain sensitive information via malformed HTTP requests, which reveal data from previous requests...

Input validation

Acunetix Web Vulnerability Scanner WVS 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service application crash via multiple HTTP requests containing invalid Content-Length values...

CVE-2007-0120

Acunetix Web Vulnerability Scanner WVS 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service application crash via multiple HTTP requests containing invalid Content-Length values...

CVE-2007-0120

Acunetix Web Vulnerability Scanner WVS 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service application crash via multiple HTTP requests containing invalid Content-Length values...

CVE-2007-0120

CVE-2007-0120 affects Acunetix Web Vulnerability Scanner (WVS) version 4.0 Build 20060717 and earlier. The vulnerability is a denial of service caused by remote attackers sending multiple HTTP requests with invalid Content-Length values, leading to an application crash. Public details in the conn...

[SA23537] SPINE Cross-Site Request Forgery Vulnerability

TITLE: SPINE Cross-Site Request Forgery Vulnerability SECUNIA ADVISORY ID: SA23537 VERIFY ADVISORY: http://secunia.com/advisories/23537/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: SPINE 1.x http://secunia.com/product/13145/ DESCRIPTION:...

Trac: Cross-site request forgery

Background Trac is a wiki and issue tracking system for software development projects. Description Trac allows users to perform certain tasks via HTTP requests without performing correct validation on those requests. Impact An attacker could entice an authenticated user to browse to a specially...

CVE-2006-6303

The readmultipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service infinite loop via crafted HTTP requests, a different issue than CVE-2006-5467...