CVE-2023-30222

Affected product/implementation: 4D SAS 4D Server Application (4D Server) versions v17, v18, v19 R7 and earlier. Vulnerability summary: An information-disclosure flaw enables an attacker to retrieve password hashes for all users by eavesdropping on affected deployments. Root cause (as stated): In...

CVE-2023-30223

The CVE-2023-30223 entry concerns a broken authentication vulnerability in 4D SAS 4D Server software (versions to v17, v18, v19 R7 and earlier). According to connected sources, an attacker could send crafted TCP packets containing requests to perform arbitrary actions, indicating a remote, networ...

CVE-2023-30222

An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping...

CVE-2023-30223

A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packets containing requests to perform arbitrary actions...

4d-technologie.de Cross Site Scripting vulnerability OBB-3331155

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

4d-design.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-954336 Security Researcher DerCraig Helped patch 24 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting 4d-design.co.uk website and its users. Following...

Speed Parking 4D - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Speed Parking 4D published at the 'play' market has multiple vulnerabilities...

4D WebStar 5.3/5.4 Tomcat Plugin Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13538/info The Tomcat Plugin supplied with the HTTP server is reportedly prone to a remote buffer overflow vulnerability. A successful attack can result in a crash or arbitrary code execution allowing the attacker to gain...

Webserver4D.txt

/ Web server 4D 3.6.0 denial of service / / bug found by badpack3t. / / ftp://ftp.mdgcs.com/demos/WS4D/Win/WS4D3.6.0Full.exe / / / / $ gcc -o fws4d fws4d.c linux version / / $ gcc -o fws4d fws4d.c -DWINDOWS windows version / / / / $ ./fws4d / / / / Federico Fazzi / include include include if...

4D WebStar Tomcat Plugin Remote Buffer Overflow flaw

The remote server is running 4D WebStar Web Server. The remote server is vulnerable to a remote buffer overflow in its Tomcat plugin. A malicious user may be able to crash service or execute arbitrary code on the computer with the privileges of the HTTP server. OpenVAS Vulnerability Test $Id:...

4D WebStar Symbolic Link Vulnerability

The remote server is running 4D WebStar FTP Server. 4D WebStar is reportedly vulnerable to a local symbolic link vulnerability. This issue is due to a design error that causes the application to open files without properly verifying their existence or their absolute location. Successful...

Webserver 4D Cleartext Passwords

The remote host is running Webserver 4D 3.6 or lower. Version 3.6 of this service stores all usernames and passwords in cleartext. File: C:\Program Files\MDG\Web Server 4D 3.6.0\Ws4d.4DD SPDX-FileCopyrightText: 2002 Jason Lidow Some text descriptions might be excerpted from a referenced sources,...

4D WebStar Symbolic Link Vulnerability

4D WebStar is reportedly vulnerable to a local symbolic link vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-3143

Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service crash via IMAP clients on Mac OS X 10.4 Mail 2...

CVE-2005-3143

CVE-2005-3143 affects the Mailbox Server for 4D WebStar prior to 5.3.5. It allows denial-of-service (crash) via IMAP clients on Mac OS X Mail 2. The NVD/Nessus entries document the issue; no exploitation details are provided in the connected documents, and no remediation details are stated here.

CVE-2005-1507

Buffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long URL...

CVE-2005-1507

CVE-2005-1507: Remote buffer overflow in the Tomcat plugin of 4D WebSTAR Web Server (versions 5.33/5.4) can be triggered by a long URL, potentially causing denial of service and arbitrary code execution. Documented in NVD/OpenVAS entries with base score 5.0; no remediation details provided in the...

4D WebSTAR Tomcat Plugin Remote Buffer Overflow

The remote server is running 4D WebSTAR Web Server. According to its banner, the remote version of 4D WebSTAR has a buffer overflow in its Web Server Tomcat plugin, included and activated by default. By sending a malicious packet, an attacker may be able to crash the affected service or possibly...

4D WebStar Tomcat Plugin Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================= 4D WebStar Tomcat Plugin Remote Buffer Overflow Exploit ======================================================= / 4d buffer overflow Braden Thomas the buffer is copied byte by byte...

4d WebSTAR 5.x Web Server Mac OS X Buffer Overflow

4d WebSTAR 5.x Mac OS X Buffer Overflow Author: Braden Thomas Vendor: http://www.4d.com Product: 4d WebSTAR 5.33 and 5.4 Web Server on Mac OS X only trial version tested Risk: Medium, remote root unlikely, DoS likely PoC Exploit code included Description: 4d WebSTAR 5.x 5.33 and 5.4 tested contai...