sapdb-seh.txt

/ Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Site : http://www.sapdb.org Found by : NGSSoftware Insight Security Research ---------------------------------------- Exploit : SAP DB 7.4 WebTools Remote SEH overwrite exploit Exploit date : 07.07.2007...

SAP DB 7.4 WebTools Remote SEH overwrite Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Site : http://www.sapdb.org Found by : NGSSoftware Insight Security Research ---------------------------------------- Exploit : SAP DB 7.4 WebTools Remote SEH overwrite...

SAP DB 7.4 WebTools Remote SEH overwrite Exploit

Exploit for unknown platform in category remote exploits ================================================ SAP DB 7.4 WebTools Remote SEH overwrite Exploit ================================================ / Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Sit...

SAP DB 7.4 - WebTools Remote Overwrite (SEH)

SAP DB 7.4 - WebTools Remote Overwrite SEH / Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Site : http://www.sapdb.org Found by : NGSSoftware Insight Security Research ---------------------------------------- Exploit : SAP DB 7.4 WebTools Remote SEH...

SAP DB 7.4 - WebTools Remote Overwrite (SEH)

/ Dreatica-FXP crew ---------------------------------------- Target : SAP DB 7.4 WebTools Site : http://www.sapdb.org Found by : NGSSoftware Insight Security Research ---------------------------------------- Exploit : SAP DB 7.4 WebTools Remote SEH overwrite exploit Exploit date : 07.07.2007...

Stack overflow

Multiple stack-based buffer overflows in waHTTP.exe aka the SAP DB Web Server in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via 1 a certain cookie value; 2 a certain additional parameter, related to sapdbwaGetQueryString; and other unspecified vectors relat...

CVE-2007-3614

Multiple stack-based buffer overflows in waHTTP.exe aka the SAP DB Web Server in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via 1 a certain cookie value; 2 a certain additional parameter, related to sapdbwaGetQueryString; and other unspecified vectors relat...

CVE-2007-3614

Multiple stack-based buffer overflows in waHTTP.exe aka the SAP DB Web Server in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via 1 a certain cookie value; 2 a certain additional parameter, related to sapdbwaGetQueryString; and other unspecified vectors relat...

CVE-2007-3614

CVE-2007-3614 describes a stack-based buffer overflow in the SAP DB Web Server (waHTTP.exe) used with SAP DB, affecting SAP DB/WebTools components. Multiple vectors are cited, including crafted cookie values and a long parameter related to sapdbwa_GetQueryString, plus other fields. Exploitation c...

CVE-2007-3614: Undefined Security Weakness

Multiple stack-based buffer overflows in waHTTP.exe aka the SAP DB Web Server in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via 1 a certain cookie value; 2 a certain additional parameter, related to sapdbwaGetQueryString; and other unspecified vectors relat...

SAP DB 7.x Web Server - WAHTTP.exe Multiple Buffer Overflow Vulnerabilities

SAP DB 7.x Web Server - WAHTTP.exe Multiple Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/24773/info SAP DB Web Server is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an...

SAP DB Web Server Stack Overflow

======= Summary ======= Name: SAP DB Web Server Stack Overflow Release Date: 5 July 2007 Reference: NGS00486 Discover: Mark Litchfield [email protected] Vendor: SAP Vendor Reference: SECRES-291 Systems Affected: All Versions Risk: Critical Status: Fixed ======== TimeLine ======== Discovered: 3...

SAP DB 7.4 WebTools Buffer Overflow

This module exploits a stack buffer overflow in SAP DB 7.4 WebTools. By sending an overly long GET request, it may be possible for an attacker to execute arbitrary code. Module Options msf use exploit/windows/http/sapdb/webtools msf undefinedwebtools show actions ...actions... msf undefinedwebtoo...

SAP DB 7.x Web Server - 'WAHTTP.exe' Multiple Buffer Overflow Vulnerabilities

// source: https://www.securityfocus.com/bid/24773/info SAP DB Web Server is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer. Successfully exploiting these issues will allow an...

Intel CORE 2处理器多个本地拒绝服务漏洞

Intel CORE 2是非常流行的双核处理器。 CORE 2处理器中存在多个拒绝服务漏洞： 如果温度达到了无效的温度，则即使已经超过了设置的阀值，CPU仍不会生成Thermal中断； 在执行一系列REP存储指令期间，存储可能会在完成指令之前便试图分派内存，导致处理器锁定和/或系统挂起； 如果一个逻辑处理器写入非脏页面（dirty page），另一个逻辑处理器写入相同的非脏页面或在相关的页面表项中明确的设置脏位，则内部处理器行为的复杂交互会导致不可预测的系统行为并挂起； 如果从Core 1请求数据导致L1缓存丢失，就会将请求发送给L2缓存。如果这个请求遇到了Core...

csc-sqlxss.txt

--- Comersus Shop Cart 7.07 SQL Injection & XSS Comersus is an active server pages asp software for running shopping stores, integrated with the rest of your web site. Comersus ASP Cart is free and IT CAN BE used for commercial purposes. An attacker may leverage this issue to have arbitrary scrip...

Fedora Core 6 : iscsi-initiator-utils-6.2.0.865-0.0.fc6 (2007-590)

This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release includes two security fixes, which are described here, https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=243719 bug fixes and new features. The tools in this release use a different db...

Fedora Core 5 : iscsi-initiator-utils-5.2.0.865-0.0.fc5 (2007-589)

This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release includes two security fixes which are described here https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=243719 bug fixes and new features. The tools in this release use a different db format...

CVE-2007-2452

Heap-based buffer overflow in the visitoldformat function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036...

CVE-2007-2944: Undefined Security Weakness

WabCMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/wabcmsn.mdb. NOTE: this issue was originally reported for "webCMS," but this was an error by an unreliable researcher...