SAP Business Objects XI R2 Cross Site Scripting

Class Input Validation Error Remote Yes Published 10 February 11:00AM Vulnerable XI R2 SAP Business Objects is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

SAP Business Objects InfoVew System - 'listing.aspx?searchText' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52361/info SAP Business Objects is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspectin...

BackTrack 5 R2 Released, New Kernel, New Tools

BackTrack 5 R2 Released, New Kernel, New Tools Hacker are your Ready ? Backtrack 5 R2 finally released with bug fixes, upgrades, and the addition of 42 new tools. With the best custom-built 3.2.6 kernel, the best wireless support available at maximum speed. This release have included Metasploit...

samba security, bug fix, and enhancement update

3.0.33-3.37.el5 - Regenerate manpage for 'wide links' and 'unix extensions' sections - related: 722553 3.0.33-3.36.el5 - Security Release, fixes CVE-2010-0926 - resolves: 722553 3.0.33-3.35.el5 - Fix smbclient return code - resolves: 768908 3.0.33-3.34.el5 - Fix support for Windows 2008 R2 domain...

CVE-2012-1223

RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack...

Directory traversal

Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the File command...

Code injection

RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack...

Low: Red Hat Security Advisory: samba security, bug fix, and enhancement update

Updated samba packages that fix one security issue, one bug, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2012-1222

Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute arbitrary code via a long string to TCP port 23...

RedHat Update for samba RHSA-2012:0313-03

Check for the Version of samba OpenVAS Vulnerability Test RedHat Update for samba RHSA-2012:0313-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

CVE-2012-1223

The CVE-2012-1223 entry concerns RabidHamster R2/Extreme 1.65 and earlier. The vulnerability stems from a small PIN-guessing search space that allows remote attackers to brute-force and obtain the PIN, exposing partial confidentiality. According to the provided details, the attack is possible ove...

CVE-2012-1222

CVE-2012-1222 describes a stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier. The issue allows remote authenticated users to execute arbitrary code by sending a long string to TCP port 23. The connected sources (NVD, PRION, CVE lists) corroborate the same vulnerability detail...

CVE-2012-1221

CVE-2012-1221 describes a directory traversal in the telnet server of RabidHamster R2/Extreme, affecting 1.65 and earlier. Remote attackers can read arbitrary files via .. in the File command. The provided sources confirm the vulnerability details but do not specify patches or remediation steps.

R2Extreme 1.65 - Stack Buffer Overflow Directory Traversal

R2Extreme 1.65 - Stack Buffer Overflow Directory Traversal source: https://www.securityfocus.com/bid/52061/info R2/Extreme is prone to a stack-based buffer-overflow vulnerability and a directory-traversal vulnerability. Exploiting these issues may allow remote attackers to execute arbitrary code ...

R2 1.65 Stack Overflow / Directory Traversal / Brute Forcing

Luigi Auriemma Application: R2 http://www.rabidhamster.org/R2/ Versions: = 1.65 Platforms: Windows Bugs: A stack overflow B directory traversal C PIN brute forcing Exploitation: remote Date: 09 Feb 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bugs 3 Th...

R2/Extreme 1.65 - Stack Buffer Overflow / Directory Traversal

source: https://www.securityfocus.com/bid/52061/info R2/Extreme is prone to a stack-based buffer-overflow vulnerability and a directory-traversal vulnerability. Exploiting these issues may allow remote attackers to execute arbitrary code or retrieve arbitrary files within the context of the...

MS12-012: Vulnerability in Color Control Panel Could Allow Remote Code Execution (2643719)

The remote host contains a version of Windows Color Control Panel that is affected by an insecure library loading vulnerability. A remote attacker could exploit this by tricking a user into opening a .camp, .cdmp, .gmmp, .icc, or .icm file in a directory that also contains a malicious 'sti.dll'...

MS12-010: Cumulative Security Update for Internet Explorer (2647516)

The remote host is missing Internet Explorer IE Security Update 2647516. The installed version of IE is affected by several vulnerabilities that could allow an attacker to execute arbitrary code on the remote host as well as vulnerabilities that could allow the attacker to view privileged...

Gentoo Security Advisory GLSA 201110-10 (Wget)

The remote host is missing updates announced in advisory GLSA 201110-10. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201110-09 (Conky)

The remote host is missing updates announced in advisory GLSA 201110-09. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...