Design/Logic Flaw

The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service network connectivity disruption via a client hello with a...

CVE-2017-5872

The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service network connectivity disruption via a client hello with a...

CVE-2017-5872

The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service network connectivity disruption via a client hello with a...

CVE-2017-5872

The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service network connectivity disruption via a client hello with a...

CVE-2017-5872

The issue affects Unisys ClearPath MCP TCP-IP-SW: versions 57.1 before 57.152, 58.1 before 58.142, and 59.1 before 59.172. When a TLS 1.2 service is active, a remote attacker can trigger a denial of service by sending a TLS client_hello containing a signature_algorithms extension larger than RFC ...

CVE-2017-5872: Improper Input Validation

The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service network connectivity disruption via a client hello with a...

Denial of Service Vulnerability in Multiple Unisys Products

UnisysLibra43xx and others are MCP-based application system architectures developed by Unisys Corporation in the United States. A security vulnerability exists in MCP-FIRMWARE 40.0 IC4Build270 prior to version 40.0 in UnisysLibra43xx, 63xx, 83xx and FS600class systems. A remote attacker could...

Stack overflow

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service data corruption or system crash via vectors related to using program operators during EPSILON level 5 based codefiles at...

CVE-2015-4049

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service data corruption or system crash via vectors related to using program operators during EPSILON level 5 based codefiles at...

CVE-2015-4049

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service data corruption or system crash via vectors related to using program operators during EPSILON level 5 based codefiles at...

CVE-2015-4049

Unisys Libra 43xx, 63xx, 83xx and FS600 class systems with MCP-FIRMWARE prior to 40.0IC4 Build 270 are affected. A remote authenticated user could trigger a denial of service (data corruption or system crash) by using program operators during EPSILON (level 5) based codefiles at peak memory usage...

CVE-2015-4049: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service data corruption or system crash via vectors related to using program operators during EPSILON level 5 based codefiles at...

Stack overflow

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a TOOLSETTINGS section in a .mcp file, possibly a related issue to CVE-2009-1608...

CVE-2009-1674: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a TOOLSETTINGS section in a .mcp file, possibly a related issue to CVE-2009-1608...

CVE-2009-1608

Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long 1 FILEINFO, 2 CATFILTERS, and possibly other fields...

MPLAB IDE 8.30 - .mcp Universal Overwrite (SEH)

MPLAB IDE 8.30 - .mcp Universal Overwrite SEH usage: mplab.py then open the project file : Download : http://ww1.microchip.com/downloads/en/DeviceDoc/MPLAB8.30.zip nadli chouk fi rassi :p print "" print " MPLAB IDE 8.30 .mcp Universal Seh Overwrite Exploit\n" print " Refer : Secunia advisory...

Oracle 10g KUPM$MCP.MAIN SQL Injection Exploit

No description provided by source. !/usr/bin/perl Remote Oracle KUPM$MCP.MAIN exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.red-database-security.com/ AUTHOR: Andrea "bunker" Purificato...

CVE-2002-2179

The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of service crash via a TCP port scan using a tool such as nmap...

CVE-2002-2179

CVE-2002-2179 affects the ClearPath MCP environment and is triggered by its dynamic initialization feature. The issue allows remote attackers to cause a denial of service (crash) by performing a TCP port scan (e.g., with nmap). The available documents confirm the vulnerability mechanism but do no...

CVE-2002-2179: Undefined Security Weakness

The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of service crash via a TCP port scan using a tool such as nmap...