HP Data Protector CRS Opcode 215 and 263 Stack Buffer Overflow (CVE-2013-2328)

Two stack buffer overflows have been discovered in HP Data Protector...

HP Data Protector CRS Opcode 235 Stack Buffer Overflow (CVE-2013-2325)

A stack buffer overflow has been discovered in HP Data Protector. The vulnerability exists in the Cell Request service crs.exe, which listens on a randomly chosen port. The application fails to sanitize input with opcode 235, which can result in a stack buffer overflow. A remote, unauthenticated...

Code injection

The PPTP-ALG component in CRS Carrier Grade Services Engine CGSE and ASR 9000 Integrated Service Module ISM in Cisco IOS XR allows remote attackers to cause a denial of service module reset via crafted packet streams, aka Bug ID CSCue91963...

CVE-2013-5498

The CVE-2013-5498 issue affects the PPTP-ALG component of Cisco CRS Carrier Grade Services Engine (CGSE) and Cisco ASR 9000 Series ISM running IOS XR. The root cause is in the PPTP-ALG’s handling of packet streams, allowing an unauthenticated, remote attacker to cause a denial of service via craf...

HP Data Protector CRS Opcode 227 Stack Buffer Overflow (CVE-2013-2335)

A stack buffer overflow vulnerability has been discovered in HP Data Protector. The vulnerability exists in the Cell Request Service crs.exe, which listens on a randomly chosen port. The application fails to sanitize input with opcode 227, which can result in a stack buffer overflow. A remote,...

HP Data Protector CRS Opcode 234 Stack Buffer Overflow (CVE-2013-2326)

A buffer overflow has been reported in HP Data Protector. The vulnerability exists in the Cell Request Service crs.exe, which listens on a randomly chosen port. The application fails to sanitize input with opcode 234, which can result in a stack buffer overflow. A remote, unauthenticated attacker...

HP Data Protector CRS Opcode 211 Stack Buffer Overflow

Added: 07/24/2013 CVE: CVE-2013-2333 BID: 60309 OSVDB: 93867 Background HP Data Protector is an automated data backup solution. Problem A buffer overflow vulnerability in crs.exe when handling requests with opcode 211 allows remote attackers to execute arbitrary commands. Resolution Apply a patch...

HP Data Protector CRS Opcode 305 Stack Buffer Overflow (CVE-2013-2330)

A stack buffer overflow has been reported in HP Data Protector. The vulnerability is in the Cell Request service, which listens on a randomly chosen port. The application fails to sanitize input with opcode 305, which can result in a stack-based buffer overflow. A remote, unauthenticated attacker...

CVE-2013-1112

The CVE-2013-1112 issue pertains to Cisco Carrier Routing System (CRS). It is caused by improper handling of short malformed packets, leading to inefficient processing and a denial of service (packet loss). The vulnerability can be exploited by an unauthenticated, remote attacker to degrade norma...

CVE-2012-1342

Cisco Carrier Routing System CRS 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975...

CVE-2012-1342

Cisco Carrier Routing System (CRS) versions 3.9, 4.0, and 4.1 are affected by CVE-2012-1342. The issue arises from improper handling of IPv4 fragments (noninitial fragments) which allows remote, unauthenticated attackers to bypass ACL entries and reach restricted network segments. The vulnerabili...

CVE-2012-2488

Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service packet transmission outage via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593...

Design/Logic Flaw

Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service packet transmission outage via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593...

CVE-2012-2488

Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service packet transmission outage via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593...

CVE-2012-2488

Cisco IOS XR vulnerability CVE-2012-2488 affects ASR 9000 and CRS series devices running before 4.2.1. Affected components include the Route Processor and related hardware (ASR 9000 series RSP-4G/8G, RSP440, CRS PRP) where handling of crafted packets can cause a denial of service (packet transmis...

Cisco Security Advisory: Cisco IOS XR Software IP Packet Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS XR Software IP Packet Vulnerability Advisory ID: cisco-sa-20110525-iosxr Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT +--------------------------------------------------------- Summary ======= Cisco IOS...

PHP CRS 3.Za Local File Inclusion

! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 123. elseif isset$POST'btnStartImport' 124. require"../inc/selectSupplierImport.inc.php"; 125. $importFunction = $POST'importFunction'; 126. require"../inc/". $importFunction .".inc.php...

CVE-2009-4305

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file CourseTitle."...

CVE-2009-4305

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file CourseTitle."...

Sql injection

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file CourseTitle."...