CVE-2008-4478: Undefined Security Weakness

Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted 1 Content-Length header in a SOAP request or 2 Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer...

CVE-2008-4479: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header...

Novell eDirectory HTTP Request Content-Length Heap Buffer Overflow

A remote code execution vulnerability exists in Novell eDirectory. Novell eDirectory is a cross-platform directory server used for identity management. Novell eDirectory utilizes various protocols to provide information services to various platforms, including HTTP-based SOAP. Novell eDirectory...

Update Protection against Novell eDirectory SOAP Handling Accept Language Header Overflow

A buffer overflow vulnerability exists in Novell eDirectory Directory Services over SOAP. Novell eDirectory is a cross-platform directory server used for identity management. Novell eDirectory utilizes various protocols to provide information services to various platforms, including HTTP-based...

ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability

ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-064 October 8, 2008 -- CVE ID: CVE-2008-4479 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection:...

ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability

ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-063 October 8, 2008 -- CVE ID: CVE-2008-4478 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection:...

Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. Authentication is not required to exploit this vulnerability. The specific flaw resides in the web console running on TCP ports 8028 and 8030. The server exposes a web interface and...

Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. Authentication is not required to exploit this vulnerability. The specific flaw resides in the web console running on TCP ports 8028 and 8030. The server exposes a web interface and...

SOAP '.wsdl' File Detection

Binary data 4675.prm...

SOAP '.disco' File Detection

Binary data 4676.prm...

Cisco Unified Communications Manager multiple security vulnerabilities

Computer Telephony Integration Manager DoS TCP/2748 The Real-Time Information Server SOAP interface TCP/2556 unauthorized access...

WS-Management Server Detection

The remote web server supports the Web Services for Management WS-Management specification, a general web services protocol based on SOAP for managing systems, applications, and other such entities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33139;...

IBM WebSphere Application Server < 6.1.0.17 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 17 appears to be running on the remote host. As such, it is reportedly affected by multiple flaws : - An attribute in a SOAP security header may cause a security exposure in Web Services applications. PK61315 - An unspecified vulnerability in t...

Design/Logic Flaw

Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header...

CVE-2008-2550

Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header...

CVE-2008-2550

IBM WebSphere Application Server 6.1 prior to 6.1.0.17 is affected by a vulnerability in the Web Services Security SOAP header attribute, with unspecified impact and attack vectors. The issue is associated with CVE-2008-2550. Public references note the vulnerability exists in WAS 6.1 before Fix P...

CVE-2008-2550: Undefined Security Weakness

Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header...

Novell eDirectory eMBox工具edirutil命令绕过认证漏洞

BUGTRAQ ID: 28441 CVECAN ID: CVE-2008-0926 Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory处理访问认证时存在漏洞，远程攻击者可能利用此漏洞获取非授权访问。 可通过/SOAP URL使用Novell...

Novell eDirectory unauthenticated access to SOAP interface

= Affected software : Editor : Novell Name : eDirectory Version : 8.7.x see note and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3866911&sliceId=1 https://vulners.com/cve/CVE-2008-0926 = Technical details : A SO...

Fedora 7 : otrs-2.1.5-4.fc7 (2008-3100)

Security update: Add upstream patch for CVE-2008-1515 / OSA-2008-01 Vulnerability in OTRS SOAP interface allowing remote access without valid SOAP user - http://otrs.org/advisory/OSA-2008-01-en/ Note that Tenable Network Security has extracted the preceding description block directly from the...