CVE-2007-0284

Technical details (affected products, vulnerable components, impact, or fixes) are not publicly provided in the supplied documents; monitor for updates.

CVE-2007-0281

Public documents provided do not include concrete technical details (affected product, root cause, exploit vectors, or remediation) for CVE-2007-0281; monitor for updates.

CVE-2007-0284

Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.3 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2, have unknown impact and attack vectors related to Oracle Containers for J2EE, aka 1 OC4J03 and 2 OC4J04...

CVE-2007-0288

Unspecified vulnerability in Oracle Application Server 10.1.4.0 has unknown impact and attack vectors related to Oracle Internet Directory, aka OID01...

Directory traversal

Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably ".." sequences in the beanId parameter. NOTE: this is likely a duplicate of another CVE that Oracle addressed...

CVE-2007-0222

Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably ".." sequences in the beanId parameter. NOTE: this is likely a duplicate of another CVE that Oracle addressed...

CVE-2007-0222

Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably ".." sequences in the beanId parameter. NOTE: this is likely a duplicate of another CVE that Oracle addressed...

CVE-2007-0222

CVE-2007-0222 is a directory traversal vulnerability in Oracle Application Server 10g (10.1.3.0.0) specifically in the EmChartBean server-side component. It allows remote, unauthenticated attackers to read arbitrary files outside the application root (likely via “..” in requests to the beanId par...

CVE-2006-6853

Durian Web Application Server 3.02 freeware on Windows is affected by a buffer overflow vulnerability. The issue allows remote code execution via a crafted packet containing a long string sent to TCP port 4002, leading to untrusted data being processed by the server. The CVE description specifies...

Durian Web Application Server远程缓冲区溢出漏洞

Durian Web Application Server是一款WEB应用服务程序。 Durian Web Application Server不正确处理畸形请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务或缓冲区溢出攻击。 提交超长请求可导致缓冲区溢出，或者提交畸形请求可显示1000个访问冲突对话框而造成拒绝服务攻击。 Durian Web Application Server 3.02 目前没有解决方案提供： http://sourceforge.net/projects/durian/ //Durian Web Application Server 3.02 freeware f...

Durian Web Application Server 3.02 freeware for Win32 buffer overflow execute command exploit

No description provided by source. ?php / Durian Web Application Server 3.02 freeware for Win32 buffer overflow execute command exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org tested against xp sp2 ita software site - http://sourceforge.net/projects/durian/ /...

Durian Web应用服务器远程溢出漏洞

Durian是一款免费的Web应用服务器，用于以APS或DWS语言生成交互的动态Web内容。 Durian在处理恶意畸形请求时存在缓冲区溢出漏洞，远程攻击者可以利用此漏洞导致拒绝服务或执行任意指令。 Durian Web Application Server 3.02 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sourceforge.net/projects/durian/ ?php / Durian Web Application Server 3.02 freeware for Win32 buffer overfl...

Durian Web Application Server multiple security vulnerabilities

Buffer overflow on oversized request...

Durian Web Application Server 3.02 Remote Buffer Overflow Exploit

No description provided by source. ?php / Durian Web Application Server 3.02 freeware for Win32 buffer overflow execute command exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org tested against xp sp2 ita software site - http://sourceforge.net/projects/durian/ /...

Durian Web Application Server 3.02 Denial of Service Exploit

No description provided by source. ?php //Durian Web Application Server 3.02 freeware for Win32 denial of service exploit //this will merely show 1000 access violation boxes to screen //software site - http://sourceforge.net/projects/durian/ //by rgod mail: retrog at alice dot it site:...

Durian Web Application Server 3.02 - Denial of Service

Durian Web Application Server 3.02 - Denial of Service http://sourceforge.net/projects/durian/ //by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org errorreportingEALL; $serviceport = "4002"; $address = "192.168.1.3"; $ch =array"\xaa","\xa0","\x41";...

Durian Web Application Server 3.02 - Remote Buffer Overflow

Durian Web Application Server 3.02 - Remote Buffer Overflow http://sourceforge.net/projects/durian/ / errorreportingEALL; $address = "192.168.1.3"; $serviceport = "4002"; $shellcode = "\xeb\x1b". "\x5b". "\x31\xc0". "\x50". "\x31\xc0". "\x88\x43\x59". "\x53". "\xbb\x6d\x13\x86\x7c". //WinExec,...

durian-302-dos.txt

http://sourceforge.net/projects/durian/ //by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org errorreportingEALL; $serviceport = "4002"; $address = "192.168.1.3"; $ch =array"\xaa","\xa0","\x41"; $size=array30,70,150,330,520,700,1400,2300; $c=1000; for $m=1; $m...

Durian Web Application Server 3.02 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= Durian Web Application Server 3.02 Remote Buffer Overflow Exploit ================================================================= http://sourceforge.net/projects/durian/ /...

Durian Web Application Server 3.02 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================ Durian Web Application Server 3.02 Denial of Service Exploit ============================================================ http://sourceforge.net/projects/durian/ //by rgod mail: retrog ...