684 matches found
多个厂商Hummingbird STR服务栈溢出漏洞
BUGTRAQ ID: 36868 EMC Documentum eRoom是基于WEB的协作服务器，OpenText Search Server是高效的纯文本搜索引擎，上述产品都使用了Hummingbird STR服务。 默认监听于TCP 10500端口上的Hummingbird STR服务（STRsvc.exe）中存在栈溢出漏洞。STRlib.dll模块将接收到的网络报文拷贝到了静态的栈缓冲区，如果发送了超长的报文就可以触发栈溢出，导致以SYSTEM权限执行任意指令。 EMC Documentum eRoom 7.4.1 Open Text Corporation Search...
Hummingbird STR service / EMC Documentum eRoom / OpenText Search Server buffer overflow
Buffer overflow on TCP/10500 traffic parsing...
Multiple Vendor Hummingbird STR Service Stack Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC Documentum eRoom, OpenText Hummingbird and OpenText Search Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Hummingbird STR...
Heap overflow
Heap-based buffer overflow in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606...
Directory traversal
Directory traversal vulnerability in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to T...
CVE-2008-3685
Directory traversal vulnerability in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to T...
CVE-2008-3684
Heap-based buffer overflow in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606...
CVE-2008-3684
Heap-based buffer overflow in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606...
CVE-2008-3685
CVE-2008-3685 affects EMC Documentum ApplicationXtender Workflow Server Admin Agent (aws_tmxn.exe); vulnerable via directory traversal sequences over TCP port 2606, enabling remote attackers to upload arbitrary files and execute arbitrary code. Impact is described as potentially remote code execu...
CVE-2008-3684
CVE-2008-3684 is a heap-based buffer overflow in the AWS_TMXN.EXE component (Admin Agent service) of EMC Documentum ApplicationXtender Workflow Server. The vulnerability exists in the aws_tmxn.exe listener on TCP port 2606 and allows remote attackers to execute arbitrary code, as described by ZDI...
EMC Captiva QuickScan Pro 4.6 sp1| EMC Documentum ApllicationXtender
Exploit for unknown platform in category remote exploits =================================================================================== EMC Captiva QuickScan Pro 4.6 sp1 and EMC Documentum ApllicationXtender Desktop 5.4...
EMC Captiva QuickScan Pro 4.6 SP1 and EMC Documentum ApllicationXtender Desktop 5.4 (keyhelp.ocx 1.2.312) - Remote Overflow
//executing calc scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" & unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34" & unescape"%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41" &...
EMC Captiva QuickScan Pro 4.6 SP1 and EMC Documentum ApllicationXtender Desktop 5.4 (keyhelp.ocx 1.2.312) - Remote Overflow
EMC Captiva QuickScan Pro 4.6 SP1 and EMC Documentum ApllicationXtender Desktop 5.4 keyhelp.ocx 1.2.312 - Remote Overflow //executing calc scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" &...
Unrestricted file upload
Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute...
CVE-2008-0656
Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute...
CVE-2008-0656
The CVE-2008-0656 entry concerns EMC Documentum components: Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317. The vulnerability is an uncontrolled file upload in dmclTrace.jsp that allows a remote attacker to overwrite arbitrary files by supplying a crafted filename attribute. The availabl...
CVE-2008-0656
Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute...
CYBSEC Security Advisory: Arbitrary file overwrite in Documentum Administrator / Documentum Webtop
The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityAdvisoryDocumentumdmclTraceArbitraryfileoverwrite.pdf Advisory Name: Arbitrary file overwrite in Documentum Administrator / Documentum Webtop ============== Vulnerability Class:...
eRoomVuln.txt
/ $ An open security advisory 9 - eRoom v6. Vulnerabilities 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Remote $ This advisory and/or proof of concept code must not be used for commercial gain. Documentum eRoom...
