reSIProcate 1.3.2 - Remote Denial of Service (PoC)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS in reSIProcate MU-200807-01 July 10, 2008 http://labs.mudynamics.com/advisories.html Affected Products/Versions: repro SIP proxy/registrar 1.3.2 http://www.resiprocate.org/ReSIProcate1.3.2Release Any product using the reSIProcate SIP stack...

Microsoft Dynamics GP < 10.0 Multiple Vulnerabilities

Microsoft Dynamics GP formerly known as Great Plains, is installed on remote host. The installed version of Microsoft Dynamics GP is affected by multiple vulnerabilities. - By sending a specially crafted DPS message with a very long IP address or a string, to Distributed Process Server DPS or...

Microsoft Dynamics GP Distributed Process Manager Detection

The remote host is running Microsoft Dynamics GP Distributed Process Manager. Dynamics GP is a business accounting and management software solution from Microsoft. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

Microsoft Dynamics GP拒绝服务和缓冲区溢出漏洞

BUGTRAQ ID: 29991 CVE ID:CVE-2006-5266 CVE-2006-5265 CNCVE ID：CNCVE-20065266 CNCVE-20065265 Microsoft Dynamics GP是一款高效解决方案，可以管理和集成组织内的财务、电子商务、供应链、制造、项目记帐、现场服务、客户关系和人力资源等。 Microsoft Dynamics GP存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务和缓冲区溢出攻击。 -Microsoft Dynamics...

CVE-2006-5265

Unspecified vulnerability in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allows remote attackers to cause a denial of service crash via an invalid magic number in a Distributed Process Server DPS message...

CVE-2006-5266

Multiple buffer overflows in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allow remote attackers to execute arbitrary code via 1 a crafted Distributed Process Manager DPM message to the a DPM component, or a 2 long string or 3 long IP address in a Distributed Process Server DPS...

CVE-2006-5265

CVE-2006-5265 affects Microsoft Dynamics GP (Great Plains) 9.0 and earlier. The vulnerability lies in the Distributed Process Server (DPS) (and DPS messages) where an invalid magic number in a DPS message can cause a crash (DoS). Threats described in connected documents also include DPS overflow ...

CVE-2006-5266

Microsoft Dynamics GP (Great Plains) versions up to 9.0 are affected by multiple buffer-overflow vulnerabilities in DPS/DPM components. Exploitation possible via crafted DPS/DPM messages: long strings, long IPs, or invalid magic numbers, leading to remote code execution with partial impact on con...

CVE-2008-2918

SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3...

CVE-2008-2918

The CVE-2008-2918 entry concerns an SQL injection in Application Dynamics Cartweaver 3.0 via the prodId parameter in details.php, allowing remote attackers to execute arbitrary SQL. Root cause appears to be unsanitized user input in the prodId parameter, leading to potential data compromise. Conn...

CVE-2006-5265: Improper Input Validation

Unspecified vulnerability in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allows remote attackers to cause a denial of service crash via an invalid magic number in a Distributed Process Server DPS message...

CVE-2006-5266: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allow remote attackers to execute arbitrary code via 1 a crafted Distributed Process Manager DPM message to the a DPM component, or a 2 long string or 3 long IP address in a Distributed Process Server DPS...

CVE-2008-2918: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3...

Data Dynamics ActiveBar (Actbar3.ocx 3.2) Multiple Insecure Methods

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"------------------------------------------------------------------------------------ bData Dynamics ActiveBar ActiveX Control Actbar3.ocx 3.2 Multiple Inscure Methods/b...

Data Dynamics ActiveBar (Actbar3.ocx 3.2) - Multiple Insecure Methods

Data Dynamics ActiveBar Actbar3.ocx 3.2 - Multiple Insecure Methods ------------------------------------------------------------------------------------ Data Dynamics ActiveBar ActiveX Control Actbar3.ocx 3.2 Multiple Inscure Methods url: http://www.datadynamics.com author: shinnai mail:...

Data Dynamics ActiveBar (Actbar3.ocx 3.2) Multiple Insecure Methods

Exploit for unknown platform in category remote exploits =================================================================== Data Dynamics ActiveBar Actbar3.ocx 3.2 Multiple Insecure Methods ===================================================================...

Data Dynamics ActiveBar (Actbar3.ocx 3.2) - Multiple Insecure Methods

------------------------------------------------------------------------------------ Data Dynamics ActiveBar ActiveX Control Actbar3.ocx 3.2 Multiple Inscure Methods url: http://www.datadynamics.com author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was writte...

Path traversal

Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 ActiveReports ActiveX control in arpro2.dll in ActiveReports 2.0 Professional Edition 2.5.0.1308 SP5 RC allows remote attackers to create or overwrite arbitrary files via a full pathname in an argument to t...

Path traversal

Absolute path traversal vulnerability in the Data Dynamics ActiveReport ActiveReports ActiveX control in actrpt2.dll 2.5 and earlier allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveLayout method...

CVE-2007-3982

The CVE-2007-3982 entry concerns the Data Dynamics ActiveReport (ActiveReports) ActiveX control (actrpt2.dll) version 2.5 and earlier. The vulnerability is an absolute path traversal in which a full pathname passed as the first argument to the SaveLayout method can be used to create or overwrite ...