CVE-2004-1327: Undefined Security Weakness

Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension...

CVE-2004-1327

Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension...

CVE-2004-2742

Cross-site scripting XSS vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the URL to a report RPT file...

[SA13644] Crystal Enterprise Report File Cross-Site Scripting Vulnerability

TITLE: Crystal Enterprise Report File Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13644 VERIFY ADVISORY: http://secunia.com/advisories/13644/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Crystal Enterprise 9 http://secunia.com/product/3552/ Cryst...

Crystal Enterprise report file crossite scripting

Crossite scripting with report files...

Crystal FTP Pro Client Buffer Overflow

Package: Crystal FTP Pro Auth: http://www.casdk.com/ Version: 2.8 current release and below Vulnerability Type: Arbitrary Command Execution Crystal FTP Pro Description from the Developer: Crystal FTP Pro is a Top awarded FTP client for dummies and experts. The state of the art user-interface used...

Crystal FTP Pro buffer overflow

Buffer overflow on oversized file extension in directory listing...

[SA12772] Crystal Reports JPEG Processing Buffer Overflow Vulnerability

TITLE: Crystal Reports JPEG Processing Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12772 VERIFY ADVISORY: http://secunia.com/advisories/12772/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Crystal Reports 9 http://secunia.com/product/2254/ Crystal Reports 1...

CVE-2004-0204

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers ...

CVE-2004-0204

CVE-2004-0204 describes a directory traversal in Crystal Reports and Crystal Enterprise Web viewers redistributed with Microsoft Visual Studio .NET 2003, Outlook 2003 with Business Contact Manager, and Microsoft Business Solutions CRM 1.2. The vulnerability arises from improper validation of HTTP...

CVE-2004-0204

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers ...

CVE-2004-0204: Undefined Security Weakness

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers ...

MS04-017: Crystal Reports Web Viewer Could Allow Information Disclosure and DoS (842689) (uncredentialed check)

The remote host is running a version of Crystal Report Web interface that is vulnerable to a remote directory traversal attack. An attacker exploiting this issue would be able to read or delete arbitrary files outside of the web root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if...

imperva.crystal2.txt

Dear List, Impervatm's Applidcation Defense Center has recently discovered a vulnerability in Business Objects' Crystal Reports Web Delivery Modules. This vulnerability may lead to arbitrary file access and denial of service. Following are the advisory's details...

Crystal Reports directory traversal

Web service directory traversal...

Vulnerability: Arbitrary File Access & DoS in Crystal Reports

Dear List, Impervatm's Applidcation Defense Center has recently discovered a vulnerability in Business Objects' Crystal Reports Web Delivery Modules. This vulnerability may lead to arbitrary file access and denial of service. Following are the advisory's details...

Business Objects Crystal Reports 910 Web Form Viewer - Directory Traversal

Business Objects Crystal Reports 910 Web Form Viewer - Directory Traversal source: https://www.securityfocus.com/bid/10260/info Crystal Reports and Crystal Enterprise Web Form Viewer is prone to a directory traversal vulnerability. This issue can allow an attacker to retrieve and delete files,...

Multiple Crystal Reports bugs

Multiple bugs in Web interface...

Crystal Reports Vulnerabilities

Dear List, Impervatm's Application Defense Center has discovered several vulnerabilities in BusinessObject's Crystal Reports' Web Interface. These vulnerabilities allow a potential hacker to retrieve and delete any file from the file system of the server on which it runs, as well as causing a...

Business Objects Crystal Reports 9/10 Web Form Viewer - Directory Traversal

source: https://www.securityfocus.com/bid/10260/info Crystal Reports and Crystal Enterprise Web Form Viewer is prone to a directory traversal vulnerability. This issue can allow an attacker to retrieve and delete files, allowing for information disclosure and denial of service attacks. An attacke...