6534 matches found
CVE-2007-3614
Multiple stack-based buffer overflows in waHTTP.exe aka the SAP DB Web Server in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via 1 a certain cookie value; 2 a certain additional parameter, related to sapdbwaGetQueryString; and other unspecified vectors relat...
CVE-2007-3614: Undefined Security Weakness
Multiple stack-based buffer overflows in waHTTP.exe aka the SAP DB Web Server in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via 1 a certain cookie value; 2 a certain additional parameter, related to sapdbwaGetQueryString; and other unspecified vectors relat...
SAP DB 7.x Web Server - WAHTTP.exe Multiple Buffer Overflow Vulnerabilities
SAP DB 7.x Web Server - WAHTTP.exe Multiple Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/24773/info SAP DB Web Server is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an...
SAP DB Web Server Stack Overflow
======= Summary ======= Name: SAP DB Web Server Stack Overflow Release Date: 5 July 2007 Reference: NGS00486 Discover: Mark Litchfield [email protected] Vendor: SAP Vendor Reference: SECRES-291 Systems Affected: All Versions Risk: Critical Status: Fixed ======== TimeLine ======== Discovered: 3...
SAP DB 7.4 WebTools Buffer Overflow
This module exploits a stack buffer overflow in SAP DB 7.4 WebTools. By sending an overly long GET request, it may be possible for an attacker to execute arbitrary code. Module Options msf use exploit/windows/http/sapdb/webtools msf undefinedwebtools show actions ...actions... msf undefinedwebtoo...
SAP DB 7.x Web Server - 'WAHTTP.exe' Multiple Buffer Overflow Vulnerabilities
// source: https://www.securityfocus.com/bid/24773/info SAP DB Web Server is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer. Successfully exploiting these issues will allow an...
Intel CORE 2处理器多个本地拒绝服务漏洞
Intel CORE 2是非常流行的双核处理器。 CORE 2处理器中存在多个拒绝服务漏洞： 如果温度达到了无效的温度，则即使已经超过了设置的阀值，CPU仍不会生成Thermal中断； 在执行一系列REP存储指令期间，存储可能会在完成指令之前便试图分派内存，导致处理器锁定和/或系统挂起； 如果一个逻辑处理器写入非脏页面（dirty page），另一个逻辑处理器写入相同的非脏页面或在相关的页面表项中明确的设置脏位，则内部处理器行为的复杂交互会导致不可预测的系统行为并挂起； 如果从Core 1请求数据导致L1缓存丢失，就会将请求发送给L2缓存。如果这个请求遇到了Core...
csc-sqlxss.txt
--- Comersus Shop Cart 7.07 SQL Injection & XSS Comersus is an active server pages asp software for running shopping stores, integrated with the rest of your web site. Comersus ASP Cart is free and IT CAN BE used for commercial purposes. An attacker may leverage this issue to have arbitrary scrip...
Fedora Core 5 : iscsi-initiator-utils-5.2.0.865-0.0.fc5 (2007-589)
This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release includes two security fixes which are described here https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=243719 bug fixes and new features. The tools in this release use a different db format...
Fedora Core 6 : iscsi-initiator-utils-6.2.0.865-0.0.fc6 (2007-590)
This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release includes two security fixes, which are described here, https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=243719 bug fixes and new features. The tools in this release use a different db...
CVE-2007-2452
Heap-based buffer overflow in the visitoldformat function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036...
CVE-2007-2944: Undefined Security Weakness
WabCMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/wabcmsn.mdb. NOTE: this issue was originally reported for "webCMS," but this was an error by an unreliable researcher...
dewizardx-overwrite.txt
2007/05/15 ----------------------------------------------------------------------------------- DB Software Laboratory DeWizardX DEWizardAX.ocx Remote Arbitrary File Overwrite url: http://www.dbsoftlab.com price: $100 author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.o...
CVE-2007-2725
The DB Software Laboratory DeWizardX DEWizardAX.ocx ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function...
Design/Logic Flaw
The DB Software Laboratory DeWizardX DEWizardAX.ocx ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function...
CVE-2007-2725
The DB Software Laboratory DeWizardX DEWizardAX.ocx ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function...
CVE-2007-2725
CVE-2007-2725 affects the DB Software Laboratory’s DeWizardX (DEWizardAX.ocx) ActiveX control. The vulnerability lets remote attackers overwrite arbitrary files via the SaveToFile function. According to NVD, it has a network attack vector, no authentication, and partial confidentiality/integrity/...
DeWizardX (DEWizardAX.ocx) Arbitrary File Overwrite Exploit
Exploit for unknown platform in category remote exploits =========================================================== DeWizardX DEWizardAX.ocx Arbitrary File Overwrite Exploit =========================================================== 2007/05/15...
DeWizardX (DEWizardAX.ocx) Arbitrary File Overwrite Exploit
No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/15/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------- bDB Software Laboratory DeWizardX...