CVE-2004-1981

Technical details about CVE-2004-1981 are not publicly available in the provided documents. Monitor for updates.

CVE-2001-1464

Crystal Reports vulnerability: when displaying data for a password-protected database via HTML pages, it embeds the username and password in cleartext in the HTML content and in the URL, allowing remote attackers to obtain passwords. Affected: Crystal Reports HTML rendering for password-protected...

CVE-2004-1327

Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension...

CVE-2004-1327

Crystal FTP Client 2.8 is affected by a buffer overflow in the handling of LIST responses containing a file name with a long extension, allowing remote attackers to execute arbitrary code. The vulnerability specifics point to a remote code execution risk via crafted responses. The provided docume...

CVE-2004-2742

Cross-site scripting XSS vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the URL to a report RPT file...

CVE-2004-1327

Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension...

Crystal Enterprise report file crossite scripting

Crossite scripting with report files...

[SA13644] Crystal Enterprise Report File Cross-Site Scripting Vulnerability

TITLE: Crystal Enterprise Report File Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13644 VERIFY ADVISORY: http://secunia.com/advisories/13644/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Crystal Enterprise 9 http://secunia.com/product/3552/ Cryst...

Crystal FTP Pro Client Buffer Overflow

Package: Crystal FTP Pro Auth: http://www.casdk.com/ Version: 2.8 current release and below Vulnerability Type: Arbitrary Command Execution Crystal FTP Pro Description from the Developer: Crystal FTP Pro is a Top awarded FTP client for dummies and experts. The state of the art user-interface used...

Crystal FTP Pro buffer overflow

Buffer overflow on oversized file extension in directory listing...

[SA12772] Crystal Reports JPEG Processing Buffer Overflow Vulnerability

TITLE: Crystal Reports JPEG Processing Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12772 VERIFY ADVISORY: http://secunia.com/advisories/12772/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Crystal Reports 9 http://secunia.com/product/2254/ Crystal Reports 1...

CVE-2004-0204

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers ...

CVE-2004-0204

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers ...

CVE-2004-0204

CVE-2004-0204 describes a directory traversal in Crystal Reports and Crystal Enterprise Web viewers redistributed with Microsoft Visual Studio .NET 2003, Outlook 2003 with Business Contact Manager, and Microsoft Business Solutions CRM 1.2. The vulnerability arises from improper validation of HTTP...

MS04-017: Crystal Reports Web Viewer Could Allow Information Disclosure and DoS (842689) (uncredentialed check)

The remote host is running a version of Crystal Report Web interface that is vulnerable to a remote directory traversal attack. An attacker exploiting this issue would be able to read or delete arbitrary files outside of the web root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if...

Vulnerability: Arbitrary File Access & DoS in Crystal Reports

Dear List, Impervatm's Applidcation Defense Center has recently discovered a vulnerability in Business Objects' Crystal Reports Web Delivery Modules. This vulnerability may lead to arbitrary file access and denial of service. Following are the advisory's details...

Crystal Reports directory traversal

Web service directory traversal...

imperva.crystal2.txt

Dear List, Impervatm's Applidcation Defense Center has recently discovered a vulnerability in Business Objects' Crystal Reports Web Delivery Modules. This vulnerability may lead to arbitrary file access and denial of service. Following are the advisory's details...

Multiple Crystal Reports bugs

Multiple bugs in Web interface...

Crystal Reports Vulnerabilities

Dear List, Impervatm's Application Defense Center has discovered several vulnerabilities in BusinessObject's Crystal Reports' Web Interface. These vulnerabilities allow a potential hacker to retrieve and delete any file from the file system of the server on which it runs, as well as causing a...