CVE-2009-0906

The Service Component Architecture SCA feature pack for IBM WebSphere Application Server WAS SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors...

CVE-2009-0906: Improper Authentication

The Service Component Architecture SCA feature pack for IBM WebSphere Application Server WAS SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors...

CVE-2009-0903

IBM WebSphere Application Server WAS 7.0 before 7.0.0.3, and the Feature Pack for Web Services for WAS 6.1 before 6.1.0.25, when a WS-Security policy is established at the operation level, does not properly handle inbound requests that lack a SOAPAction or WS-Addressing Action, which allows remot...

Design/Logic Flaw

IBM WebSphere Application Server WAS 7.0 before 7.0.0.3, and the Feature Pack for Web Services for WAS 6.1 before 6.1.0.25, when a WS-Security policy is established at the operation level, does not properly handle inbound requests that lack a SOAPAction or WS-Addressing Action, which allows remot...

CVE-2009-0903: Undefined Security Weakness

IBM WebSphere Application Server WAS 7.0 before 7.0.0.3, and the Feature Pack for Web Services for WAS 6.1 before 6.1.0.25, when a WS-Security policy is established at the operation level, does not properly handle inbound requests that lack a SOAPAction or WS-Addressing Action, which allows remot...

CVE-2008-5414: Undefined Security Weakness

Unspecified vulnerability in the Feature Pack for Web Services in the Web Services Security component in IBM WebSphere Application Server WAS 7 before 7.0.0.1 has unknown impact and attack vectors related to "userNameToken."...

CVE-2007-2950: Undefined Security Weakness

Centennial Discovery 2006 Feature Pack 1, which is used by 1 Numara Asset Manager 8.0 and 2 Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges...

CVE-2007-2514

Stack-based buffer overflow in XferWan.exe as used in multiple products including 1 Symantec Discovery 6.5, 2 Numara Asset Manager 8.0, and 3 Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation...

CVE-2007-2514: Undefined Security Weakness

Stack-based buffer overflow in XferWan.exe as used in multiple products including 1 Symantec Discovery 6.5, 2 Numara Asset Manager 8.0, and 3 Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation...

CVE-2007-1173

CVE-2007-1173 describes a buffer overflow flaw in the CentennialIPTransferServer (XFERWAN.EXE) used by Centennial Discovery 2006 Feature Pack 1, Numara Asset Manager 8.0, and Symantec Discovery 6.5. The vulnerability arises from processing long strings in crafted TCP packets, enabling remote arbi...

CVE-2007-1173: Undefined Security Weakness

Multiple buffer overflows in the CentennialIPTransferServer service XFERWAN.EXE, as used by 1 Centennial Discovery 2006 Feature Pack 1, 2 Numara Asset Manager 8.0, and 3 Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet...

SQL Server Feature Pack

The Feature Pack is a collection of standalone install packages that provide additional value for SQL Server. It includes: Latest versions of redistributable components for SQL Server Latest versions of add-on providers for SQL Server Latest versions of backward compatibility components for SQL...