OpenText LiveLink 9.7.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: OpenText LiveLink multiple vulnerabilities CSRF, XSS Date: 22/06/2010 Author: Alejandro Ramos http://www.securitybydefault.com Software Link: http://www.opentext.com/ Version: 9.7.1 Tested on: Solaris Opentext NASDAQ OTEX LiveLink 9.7.1 Livelink features several advanced foundation...

OpenText LiveLink 9.7.1 - Multiple Cross-Site Scripting Vulnerabilities

OpenText LiveLink 9.7.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43420/info OpenText LiveLink is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...

OpenText LiveLink 9.7.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43420/info OpenText LiveLink is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Hummingbird STR Service Buffer Overflow

Hummingbird STR service STRsvc.exe is installed on the remote host. It is included with EMC Documentum eRoom, OpenText Hummingbird, and OpenText Search Server. The installed version is affected by a buffer overflow vulnerability. By sending a very large packet to the Hummingbird STR service, it m...

ZDI-09-074: Multiple Vendor Hummingbird STR Service Stack Overflow Vulnerability

ZDI-09-074: Multiple Vendor Hummingbird STR Service Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-074 October 28, 2009 -- Affected Vendors: EMC OpenText -- Affected Products: EMC Documentum eRoom OpenText Hummingbird OpenText Search Server -- TippingPointTM IPS...

Hummingbird STR service / EMC Documentum eRoom / OpenText Search Server buffer overflow

Buffer overflow on TCP/10500 traffic parsing...

Multiple Vendor Hummingbird STR Service Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC Documentum eRoom, OpenText Hummingbird and OpenText Search Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Hummingbird STR...

CVE-2004-2496

OpenText FirstClass HTTP daemon (OpenText FirstClass 7.1 and 8.0) is vulnerable to a denial-of-service via a flood of POST requests to /Search. Root cause is an excessively resource-intensive handling of /Search POSTs, which can exhaust service availability. Impact is denial of service to the HTT...

CVE-2004-2496

The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service service availability loss via a large number of POST requests to /Search...

CVE-2005-1045

OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark...

CVE-2005-1045

OpenText FirstClass 8.0 client is affected by CVE-2005-1045 due to improper sanitization of strings before passing them to the Windows ShellExecute API. This allows a remote attacker to execute arbitrary commands via a UNC path in a bookmark. The vulnerability is network‑based with no authenticat...

CVE-2005-1045

OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark...

OpenText FirstClass 8.0 Client Arbitrary File Execution

Product: OpenText FirstClass 8.0 Client Homepage: http://www.firstclass.com Platform: Microsoft Windows Description: Insufficient validation of user input allows arbitrary file execution FirstClass bookmark files allow the user to organise their web address's using the familiar FirstClass desktop...

OpenText FirstClass client code execution

Internet Bokkmark can point to UNC resource...

CVE-2004-2496

The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service service availability loss via a large number of POST requests to /Search...

Fwd: OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS Vulnerability

From: dila [email protected] Date: Wed, 15 Dec 2004 02:27:40 +0000 Subject: OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS Vulnerability To: [email protected], [email protected] 13.12.04 OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS Vulnerability The...

OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS

Exploit for unknown platform in category dos / poc ====================================================== OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS ====================================================== / http://secunia.com/advisories/13415 written by dila released on 11.12.04 compil...

OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS

No description provided by source. / http://secunia.com/advisories/13415 written by dila released on 11.12.04 compile with ms vc++ remember to link with winsock / define WIN32LEANANDMEAN include "windows.h" define IDDMAIN 101 define IDIMAIN 103 define IDCSERV 1000 define IDCSOCKS 1002 define IDHA...

OpenText FirstClass 8.0 - HTTP Daemon Search Remote Denial of Service

OpenText FirstClass 8.0 - HTTP Daemon Search Remote Denial of Service / http://secunia.com/advisories/13415 written by dila released on 11.12.04 compile with ms vc++ remember to link with winsock / define WIN32LEANANDMEAN include "windows.h" define IDDMAIN 101 define IDIMAIN 103 define IDCSERV 10...

OpenText FirstClass 8.0 - HTTP Daemon /Search Remote Denial of Service

/ http://secunia.com/advisories/13415 written by dila released on 11.12.04 compile with ms vc++ remember to link with winsock / define WIN32LEANANDMEAN include "windows.h" define IDDMAIN 101 define IDIMAIN 103 define IDCSERV 1000 define IDCSOCKS 1002 define IDHALT 1004 // Next default values for...