用友某客户端四处SQL注入影响众多系统(无需登录DBA权限)

简要描述： 附40多个案例啊。。 详细说明： 用友软件RAS标准版客户端远程快速应用接入 无需登录存在SQL注入。 第一处： POST /server/cmxpagedquery.php?pgid=AppList&SearchFlag=true HTTP/1.1 Content-Length: 136 Content-Type: application/x-www-form-urlencoded Referer: http://116.236.131.194:8080/ Cookie: PHPSESSID=jb7b826hb3p30jf2rdt17mr8n0;...

TANDBERG vF8.2, F8.0, F7.2, and F6.3 - Remote Denial of Service

No description provided by source. Security Advisory Platform : TANDBERG Date : November 6, 2009 Affected : All MXP FIPS140 Current as of December 8, 2009 Tested : F8.2, F8.0, F7.2, F6.3 Unconf : VCS, BC, C90 Author : otokoyama Problem Description: Issues with the H.225 RAS implementation in...

Wyse Winterm 1125SE 4.2/4.4 - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14536/info Winterm 1125SE is affected by a remote denial of service vulnerability. This issue is due to the application failing to handle exceptional conditions in a proper manner. The problem occurs when processing packe...

3Com SuperStack II RAS 1500 - IP Header Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7175/info vulnerability has been reported in the 3Com SuperStack II RAS 1500 router. The problem occurs when processing network packets containing malicious IP headers. When received, the packet may cause the router to...

Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 RAS Phonebook Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/266/info Microsoft Windows NT RAS Service contains multiple buffer overflows that allow the execution of arbitrary code resulting in elevated privileges by local users. The RAS Service allows users to dial and connect to...

Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 RAS Dial-up Networking "Save Password" Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/232/info Windows NT allows users to save their RAS and/or RRAS credentials by using the 'Save Password' checkbox when making a dial-up connection. Credentials saved in this manner are stored in the...

XnView RAS Image Processing Heap Overflow

No description provided by source. Application: XnView RAS Image Processing Heap Overflow Platforms: Windows Secunia: SA49091 PRL: 2012-14 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...

3Com SuperStack II RAS 1500 Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7176/info A vulnerability has been reported in 3Com RAS 1500 router that may allow attackers to access sensitive data. Specifically, RAS 1500 devices fail to carry out authentication when requests are made for various fil...

CVE-2014-4038

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to 1 rtaserrd/diagsupport.c and /tmp/getdtfiles, 2 scripts/ppc64diagmkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or 3 lpd/test/lpdelatest.sh and /var/tmp/ras...

Microsoft Windows RAS Manager Registry Corruption (CVE-2006-2371)

A buffer overflow vulnerability has been reported in Microsoft Routing and Remote Access Service. The flaw is caused by improper boundary checking of user-supplied data to the Routing and Remote Access service. A remote attacker may leverage this vulnerability by sending a crafted request to the...

Design/Logic Flaw

Untrusted search path vulnerability in ALSee 6.20.0.1 allows local users to gain privileges via a Trojan horse patchani.dll file in the current working directory, as demonstrated by a directory that contains a .ani, .bmp, .cal, .hdp, .jpe, .mac, .pbm, .pcx, .pgm, .png, .psd, .ras, .tga, or .tiff...

Computer Virus Blacks Out Qatari Gas Producer

An “unknown virus” has shutdown the entire computer network of the world’s second largest liquefied natural gas LNG producer, RasGas, according to news reports. RasGas is based in Qatar, a peninsular nation located within the larger Arabian Peninsula. The LNG producer has reportedly been offline...

Scientific Linux Security Update : gimp on SL5.x, SL4.x, SL3.x i386/x86_64

Marsu discovered a stack overflow bug in The GIMP RAS file loader. An attacker could create a carefully crafted file that could cause The GIMP to crash or possibly execute arbitrary code if the file was opened by a victim. CVE-2007-2356 For users of Red Hat Enterprise Linux 5, the previous GIMP...

XnView - '.RAS' Image Processing Heap Overflow

Application: XnView RAS Image Processing Heap Overflow Platforms: Windows Secunia: SA49091 PRL: 2012-14 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical details 4 The Code...

XnView - .RAS Image Processing Heap Overflow

XnView - .RAS Image Processing Heap Overflow Application: XnView RAS Image Processing Heap Overflow Platforms: Windows Secunia: SA49091 PRL: 2012-14 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timelin...

Privilege escalation

NDISTAPI.sys in the NDISTAPI driver in Remote Access Service RAS in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of Privilege Vulnerability."...

AIX 710000 : U833034

The remote host is missing AIX PTF U833034 which is related to the security of the package devices.chrplpar.base.ras.7.1.0.15 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

The Problem of Issuing Certs For Unqualified Names

The recent attack on Comodo and several of its associated registration authorities has spurred quite a bit of re-examination of the way that the Web’s certificate authority infrastructure works–or doesn’t. One interesting result of this work is that the folks at the Electronic Frontier Foundation...

TANDBERG Remote Denial Of Service

Security Advisory Platform : TANDBERG Date : November 6, 2009 Affected : All MXP FIPS140 Current as of December 8, 2009 Tested : F8.2, F8.0, F7.2, F6.3 Unconf : VCS, BC, C90 Author : otokoyama Problem Description: Issues with the H.225 RAS implementation in TANDBERG Codecs. This has been confirme...

TANDBERG F8.2 F8.0 F7.2 F6.3 - Remote Denial of Service

TANDBERG F8.2 F8.0 F7.2 F6.3 - Remote Denial of Service Security Advisory Platform : TANDBERG Date : November 6, 2009 Affected : All MXP FIPS140 Current as of December 8, 2009 Tested : F8.2, F8.0, F7.2, F6.3 Unconf : VCS, BC, C90 Author : otokoyama Problem Description: Issues with the H.225 RAS...