CVE-2011-2681

IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors...

CVE-2011-2681

IBM Rational DOORS Web Access 1.4.x prior to 1.4.0.4 is affected by an issue where exceptions are not handled properly, described as having unspecified impact and remote attack vectors. The root cause is improper exception handling in the affected component. Remediation is to upgrade to 1.4.0.4 o...

CVE-2011-2682

CVE-2011-2682 : The Login component in IBM Rational DOORS Web Access 1.4.x prior to 1.4.0.4 allows remote authenticated users to cause a denial of service via license consumption by logging with a new user account that has never been used to log in before. This is a confirmed issue with affected ...

PT-2011-4026

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Web Access versions 1.4.x before 1.4.0.4 Description The issue allows remote authenticated users to cause a denial of service by consuming licenses when attempting to log in to DOORS Web Access with a new, unused user accoun...

PT-2011-4024

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Web Access versions 1.4.x through 1.4.0.3 Description The issue is related to an unspecified vulnerability with an unknown impact and remote attack vectors. It is connected to the "server error response." Recommendations For...

CVE-2011-2681: Improper Input Validation

IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors...

CVE-2011-2680: Undefined Security Weakness

Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server error response."...

CVE-2011-2679: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2682: Undefined Security Weakness

The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service license consumption by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login...

PT-2011-4023

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Web Access versions 1.4.x through 1.4.0.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions 1.4.x through 1.4.0.3, update to version...

PT-2011-4025

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Web Access versions 1.4.x before 1.4.0.4 Description The issue is related to improper exception handling, which has an unspecified impact and can be exploited remotely. Recommendations For versions 1.4.x before 1.4.0.4, upda...

Report: Reused, Third Party Code Major Sources of Insecurity

A new report out from security testing firm Veracode suggests that reused and third party code is a big source of application insecurity. Application security is a sore spot for many organizations, as attackers shift the battlefield from operating system and network attacks to application specifi...

CVE-2009-0874

Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allow local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones relat...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allow local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones relat...

Race condition

Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allows local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is...

CVE-2009-0874

Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allow local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones relat...

CVE-2009-0875

Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allows local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is...

CVE-2009-0874: Undefined Security Weakness

Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allow local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones relat...

CVE-2009-0875: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allows local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is...

Security Best Practice: Familiarize Yourself with the General HTTP Worm Catcher

A worm is a self-replicating malware, which propagates by actively sending itself to new machines. There are worms that propagate by using security vulnerabilities in HTTP servers or clients. Some worms are able to open back doors, launch Trojans, stop security applications and destroy computer...