2908 matches found
CVE-2003-1035
The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does...
CVE-2002-1577
SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the 1 SAP, 2 SAPCPIC, 3 DDIC, 4 EARLYWATCH, or 5 TMSADM accounts...
CVE-2002-1578
The CVE-2002-1578 detail: default SAP R/3 installation, when used with Oracle and SQLNet V2 3.x–6.10, allows remote attackers to obtain arbitrary SAP data by directly connecting to the Oracle database and executing queries, due to the database not being password-protected. The vulnerability affec...
CVE-2003-1035
CVE-2003-1035 describes a vulnerability in the default installation of SAP R/3 46C/D where remote attackers can bypass account lockout by using the RFC API instead of the SAPGUI to perform brute-force password guessing, since the SAPGUI lockout does not occur. The description notes that the RFC-b...
CVE-2003-1035
The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does...
CVE-2002-1577
CVE-2002-1577 concerns SAP R/3 versions 2.0B to 4.6D, where multiple clients are installed with default user accounts and passwords. The underlying issue is insecure default credentials that allow remote attackers to gain privileges via accounts such as SAP*, SAPCPIC, DDIC, EARLYWATCH, and TMSADM...
CVE-2002-1578
The default installation of SAP R/3, when using Oracle and SQLnet V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected...
PivX Advisory MK002B H&R Block TaxCut Information Disclosure Vulnerability
Mike Kristovich, PivX Security Advisory MK002B Date: January 10, 2003 Application: H&R Block Tax Cut Version: All versions up to current. Bug: Information in saved Tax Returns discloses Social Security Number, Full Information, and more.. Risk: Can allow for identity theft, information disclosure...
Unauthorized acces in SAP R/3
It's possible to obtain administrative access to database in default configuration...
SAP R/3 on Oracle: vulnerable Default Installation
SAP R/3 on Oracle: vulnerable Default Installation Topic: SAP R/3 on Oracle: vulnerable Default Installation Module: Default Oracle Listener Configuration Announced: 2002-04-27 Affects: All R/3 Releases using SQLnet V2 3.x, 4.x, 6.10 Vendor: 1SAP AG, Walldorf, Germany Vendor-Status: 2002-03-03:...
CVE-1999-1339
CVE-1999-1339 affects Linux 2.2.10 and earlier (with ipchains) and FreeBSD 3.2 (with ipfw). The issue is triggered by a crafted ping -R (record route) packet, causing a remote attacker to induce a kernel panic and denial of service. The vulnerability arises from how NAT is handled when enabled, a...
CVE-2001-0366
saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program...
CVE-2001-0366
The CVE-2001-0366 issue affects saposcol in SAP R/3 Web Application Server Demo prior to 1.5, where the process trusts the PATH environment variable to locate and execute the expand program. This design allows local users to escalate to root by altering PATH to point to a Trojan horse expand prog...
Problem with HP r-cmnds
Overview A problem existed with HP versions of the r-commands remshd, rexecd, rlogin, rlogind, remsh, rcp, rexec, rdist in use circa December, 1998. Description See HEWLETT-PACKARD COMPANY SECURITY BULLETIN: 00090, registration required 07 December 1998 for a description of the problem. No other...
CVE-2001-0366
saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program...
Дырка в SAP R/3 (saposcol)
При вызове внешней программы не указывается абсолютный путь, что позволяет получить привилегии root...
CVE-1999-0986
The CVE-1999-0986 entry concerns the Linux ping command (Linux 2.0.3x) where local users can cause a denial of service by sending oversized packets using the -R (record route) option. The available data identifies the affected component as the ping utility and the root cause as improper handling ...
Reliability Rollup for Microsoft .NET Framework 4.6 and 4.6.1 on Windows 8.1 and Windows Server 2012 R2 for x64 (KB3186208)
Reliability Rollup for Microsoft .NET Framework 4.6 and 4.6.1 on Windows 8.1 and Windows Server 2012 R2 for x64 KB3186208...
2017-10 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 on Windows 8.1 and Server 2012 R2 for x64 (KB4043767)
2017-10 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 on Windows 8.1 and Server 2012 R2 for x64 KB4043767...