ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability

ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-058.html October 16, 2007 -- CVE ID: CVE-2007-5766 -- Affected Vendor: Oracle -- Affected Products: E-Business Suite 11 E-Business Suite 12 -- TippingPointTM IPS Customer Protection:...

CVE-2002-2300

CVE-2002-2300: Buffer overflow in VxWorks ftpd (5.4) on 3Com NBX, affecting NBX 4.0.17 and 4.1.4 with CEL command; remote attacker can crash the FTP server (DoS). Root cause: overflow triggered by a long CEL command. Affected products/components: VxWorks ftpd, 3Com NBX NBX 4.x; exploit details an...

CVE-2002-2300

Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service crash via a long CEL command...

CVE-2007-5420

The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attackers to obtain information about the router's existence and product details...

CVE-2007-5419

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

Design/Logic Flaw

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

Design/Logic Flaw

The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attackers to obtain information about the router's existence and product details...

CVE-2007-5420

The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attackers to obtain information about the router's existence and product details...

CVE-2007-5419

The CVE-2007-5419 entry concerns a 3Com 3CRWER100-75 router with 1.2.10ww software. When an optional virtual server is enabled, the device configures the server to accept all source IP addresses on the external interface unless other options are chosen, potentially exposing the router to remote a...

CVE-2007-5419

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

CVE-2007-5420

The CVE-2007-5420 entry concerns the 3Com 3CRWER100-75 router with firmware 1.2.10ww. When remote management is disabled but a web server is configured, it serves a page to external clients, potentially allowing remote attackers to determine the router’s existence and obtain product details. The ...

3Com WIFI router remote administration vulnerability.

3Com 3CRWER100-75 is a wireless cable/DSL router widely used here, in israel. The router has a web management interface in it's port 80 available from inside the network. When the administrator assign a virtual server to port 80 In the management web filled under the firewall tab and the line is...

CVE-2004-2691

Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service device reset via a crafted request to the web management interface. NOTE: the provenance of this information is unknown; details are obtained from...

CVE-2004-2691

CVE-2004-2691 applies to 3Com SuperStack 3 4400 switches with firmware before 3.31. The vulnerability allows a remote attacker to cause a denial of service by sending a crafted request to the web management interface. Reports vary: some state the device resets, others describe a temporary unrespo...

ZDI-07-051: Trend Micro ServerProtect TMregChange() Stack Overflow Vulnerability

ZDI-07-051: Trend Micro ServerProtect TMregChange Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-051.html September 7, 2007 -- CVE ID: CVE-2007-4731 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection...

ZDI-07-049: EMC Legato Networker Remote Exec Service Stack Overflow Vulnerabilities

ZDI-07-049: EMC Legato Networker Remote Exec Service Stack Overflow Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-07-049.html August 20, 2007 -- CVE ID: CVE-2007-3618 -- Affected Vendor: EMC Software -- Affected Products: Networker 7.x.x -- TippingPointTM IPS Customer Protection...

[Full-disclosure] ZDI-07-046: Microsoft Windows Media Player Skin Parsing Size Mismatch Heap Overflow Vulnerability

ZDI-07-046: Microsoft Windows Media Player Skin Parsing Size Mismatch Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-046.html August 14, 2007 -- CVE ID: CVE-2007-3037 -- Affected Vendor: Microsoft -- Affected Products: Windows Media Player 7.1 Windows Media Player ...

[Full-disclosure] ZDI-07-047: Microsoft Windows Media Player Malformed Skin Header Code Execution Vulnerability

ZDI-07-047: Microsoft Windows Media Player Malformed Skin Header Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-047.html August 14, 2007 -- CVE ID: CVE-2007-3035 -- Affected Vendor: Microsoft -- Affected Products: Windows Media Player 7.1 Windows Media Player 9...

3COM Tippingpoint multiple protection bypass ways

Invalid fragmented IP reassembly, some attacks against IIS may pass undetected...

Design/Logic Flaw

The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service reboot and reporting outage via a loopback packet with zero in the length field...