[security bulletin] HPSBMA02244 SSRT061260 rev.1 - HP OpenView Business Process Insight and Related Products Running Shared Trace Service, Remote Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01114023 Version: 1 HPSBMA02244 SSRT061260 rev.1 - HP OpenView Business Process Insight and Related Products Running Shared Trace Service, Remote Arbitrary Code Execution NOTICE: The information ...

[security bulletin] HPSBMA02246 SSRT061260 rev.1 - HP OpenView Performance Insight (OVPI) Running Shared Trace Service, Remote Arbitrary Code Execution --------

Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01115068 Version: 1 HPSBMA02246 SSRT061260 rev.1 - HP OpenView Performance Insight OVPI Running Shared Trace Service, Remote Arbitrary Code Execution NOTICE: The information in this Security Bulletin should be acted upon as soon a...

sapdb-seh.txt

/ Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Site : http://www.sapdb.org Found by : NGSSoftware Insight Security Research ---------------------------------------- Exploit : SAP DB 7.4 WebTools Remote SEH overwrite exploit Exploit date : 07.07.2007...

SAP DB 7.4 WebTools Remote SEH overwrite Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Site : http://www.sapdb.org Found by : NGSSoftware Insight Security Research ---------------------------------------- Exploit : SAP DB 7.4 WebTools Remote SEH overwrite...

SAP DB 7.4 - WebTools Remote Overwrite (SEH)

SAP DB 7.4 - WebTools Remote Overwrite SEH / Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Site : http://www.sapdb.org Found by : NGSSoftware Insight Security Research ---------------------------------------- Exploit : SAP DB 7.4 WebTools Remote SEH...

SAP DB 7.4 WebTools Remote SEH overwrite Exploit

Exploit for unknown platform in category remote exploits ================================================ SAP DB 7.4 WebTools Remote SEH overwrite Exploit ================================================ / Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Sit...

SAP DB 7.x Web Server - WAHTTP.exe Multiple Buffer Overflow Vulnerabilities

SAP DB 7.x Web Server - WAHTTP.exe Multiple Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/24773/info SAP DB Web Server is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an...

HP Systems Insight Manager for Windows unauthorized access

Invalid session cookie processing allows administrative session hijacknig...

ACROS Security: Session Fixation Vulnerability in HP SIM 5.0

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2007-05-14-1 ------------------------------------------------------------------------- ASPR 2007-05-14-1: Session Fixation Vulnerability in HP SIM 5.0...

[security bulletin] HPSBMA02213 SSRT061214 rev.1 - HP Systems Insight Manager (SIM) for Windows, Remote Privileged Access and Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01049713 Version: 1 HPSBMA02213 SSRT061214 rev.1 - HP Systems Insight Manager SIM for Windows, Remote Privileged Access and Arbitrary Code Execution NOTICE: The information in this Security...

CVE-2007-2719

CVE-2007-2719 affects HP Systems Insight Manager (SIM) versions 4.2 and 5.0 SP4/SP5. The vulnerability is a session fixation flaw that allows remote attackers to hijack web sessions by setting the JSESSIONID cookie. Documented impact is complete confidentiality, integrity, and availability compro...

CVE-2007-2719

Session fixation vulnerability in HP Systems Insight Manager SIM 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie...

Multiple critical and high risk issues in Oracle's database server

David Litchfield of NGSSoftware has discovered multiple critical and high risk vulnerabilities in Oracle's Database Server. Versions affected include Oracle Database 10g Release 2, versions 10.2.0.1, 10.2.0.2 Oracle Database 10g Release 1, versions 10.1.0.4, 10.1.0.5 Oracle9i Database Release 2,...

Directory traversal

Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary files via unspecified vectors, a different vulnerability than CVE-2005-2006...

CVE-2006-0656

Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary files via unspecified vectors, a different vulnerability than CVE-2005-2006...

CVE-2006-0656

CVE-2006-0656 corresponds to a directory traversal vulnerability in HP Systems Insight Manager (SIM) affecting HP SIM 4.2–5.0 SP3 on Windows. Public descriptions in the connected sources identify two related weaknesses: (1) Namazu-based traversal via the lang parameter in the web CGI, allowing un...

CVE-2006-0656

Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary files via unspecified vectors, a different vulnerability than CVE-2005-2006...

[security bulletin] SSRT061108 rev.2 - HP Systems Insight Manager Remote Unauthorized Access - Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00597967 Version: 2 HPSBMA02096 SSRT061108 rev.2 - HP Systems Insight Manager Remote Unauthorized Access - Directory Traversal NOTICE: The information in this Security Bulletin should be acted up...

HP Systems Insight Manager directory traversal

Multiple vulnerabilities allow to obtain any file from server...

HP Systems Insight Manager Namazu lang Parameter Traversal Arbitrary File Access

The remote host appears to be running HP Systems Insight Manager SIM, a unified infrastructure management tool. The version of HP SIM on the remote host includes a version of the search engine Namazu that reportedly fails to validate user input to the 'lang' parameter of the 'namazucgi' script. A...