CVE-2011-0914: Undefined Security Weakness

Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow...

CVE-2011-0913: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP getEnvironmentString request, related to the local variable cache...

(0Day) Lotus Domino Server diiop getEnvironmentString Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The flaw exists within the ndiiop.exe component which listens by default on a dynamic TCP port. When handling a GIOP...

SAP Crystal Reports JobServer GIOP Request Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Crystal Reports. Authentication is not required to exploit this vulnerability. The specific flaw exists within the JobServer.exe process which listens by default on several TCP ports above 1024...

Stack overflow

Stack-based buffer overflow in NTNamingService.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arbitrary code via a long GIOP request to TCP port 30000...

CVE-2009-4988

Stack-based buffer overflow in NTNamingService.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arbitrary code via a long GIOP request to TCP port 30000...

CVE-2009-4988: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in NTNamingService.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arbitrary code via a long GIOP request to TCP port 30000...

Integer overflow

Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a GIOP packet with a crafted size, which triggers a heap-based buffer...

CVE-2010-3032

Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a GIOP packet with a crafted size, which triggers a heap-based buffer...

CVE-2010-3032

SAP Crystal Reports 2008 is affected by an integer overflow in the OBGIOPServerWorker::extractHeader function within the ebus-3-3-2-6.dll module. The vulnerability allows remote attackers to trigger a heap-based buffer overflow via a crafted GIOP packet size, potentially leading to a crash (DoS) ...

SAP Crystal Reports 2008 integer overflow

Integer overflow on GIOP message processing...

Buffer overflow

Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution LMS, allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol GIOP request, related to...

CVE-2010-0138

Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution LMS, allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol GIOP request, related to...

CVE-2010-0138

Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution LMS, allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol GIOP request, related to...

Cisco CiscoWorks IPM GIOP getProcessName Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco CiscoWorks Internetwork Performance Monitor. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of CORBA GIOP requests. By making a special...

CVE-2010-0138: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution LMS, allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol GIOP request, related to...

CiscoWorks Internetwork Performance Monitor CORBA GIOP Overflow Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Sophos RMS GIOP消息远程拒绝服务漏洞

BUGTRAQ ID: 33313 Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos远程管理系统（RMS）所使用的第三方对象请求代理TAO中存在内存分配失败错误，如果远程攻击者发送了超大的GIOP消息的话，就可以触发异常，导致RMS路由器退出，需要依赖于Windows服务管理器才能重启服务。 Sophos Anti-Virus 7.x Sophos Anti-Virus 6.x Sophos Anti-Virus 4.x Sophos Remote Management System 3.0.8 临时解决方法： 在防火墙阻断RMS...

Oracle TNS Listener DoS and/or remote memory inspection

NGSSoftware Insight Security Research Advisory Name: Oracle TNS Listener DoS and/or remote memory inspection Systems Affected: Oracle 8.1.7.4, 10g Release 2 and 1, Oracle 9 Severity: High Vendor URL: http://www.oracle.com/ Author: David Litchfield [email protected] Reported: 22nd June 2006...

CVE-2007-5507

The GIOP service in TNS Listener in the Oracle Net Services component in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote attackers to cause a denial of service crash or read potentially sensitive memory via a connect GIOP packet with an invalid data size, which...