Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth)

No description provided by source. !/bin/bash Addonics NAS Adapter bts.cgi Post-Auth DoS Tested against NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Any of these BoF crashes the entire stack from the web GUI so throw a GET, and bye bye baby! Greetz to muts and...

Secunia Research: SAP GUI KWEdit ActiveX Control "SaveDocumentAs()" Insecure Method

====================================================================== Secunia Research 15/04/2009 - SAP GUI KWEdit ActiveX Control "SaveDocumentAs" Insecure Method - ====================================================================== Table of Contents Affected...

SAP GUI unauthorized access

KWEdit ActiveX has unsafe SaveDocumentAs method...

CVE-2008-4830

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

Security feature bypass

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

CVE-2008-4830

CVE-2008-4830 is an insecure method vulnerability in SAP GUI’s KWEdit ActiveX control (KWEDIT.DLL 6400.1.1.41 and 7100.1.1.43). The SaveDocumentAs method can allow an attacker to overwrite arbitrary files, and the OpenDocument method can read or execute arbitrary files on a remote host. Affected ...

CVE-2008-4830

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

SAP GUI KWEdit ActiveX控件不安全SaveDocumentAs()调用漏洞

BUGTRAQ ID: 34524 CVECAN ID: CVE-2008-4830 SAPgui是SAP软件的图形用户界面客户端。 SAPgui所捆绑的KWEdit ActiveX控件（KWEDIT.DLL）提供了不安全的SaveDocumentAs函数。如果用户受骗访问了恶意网页的话，该函数可能将 HTML文档保存到指定的位置。如果结合OpenDocument方式的话，远程攻击者就可以泄露任意文件的内容，或在用户系统上执行任意代码。 SAP Sapgui 7.10 Patch 5 SAP Sapgui 6.40 Patch 29 SAP ---...

Debian Security Advisory DSA 1764-1 (tunapie)

The remote host is missing an update to tunapie announced via advisory DSA 1764-1. OpenVAS Vulnerability Test $Id: deb17641.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1764-1 tunapie Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SAP GUI KWEdit ActiveX Control SaveDocumentAs() Insecure Method

The version of the KWEdit ActiveX control on the remote host is reportedly affected by a remote code execution vulnerability. The control provides the insecure method 'SaveDocumentAs', which saves an HTML document to a specified location. This can be exploited in combination with e.g. the...

Debian: Security Advisory (DSA-1764-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1764-1] New tunapie packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1764-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 07, 2009 http://www.debian.org/security/faq -...

Mandriva Update for drakxtools MDVA-2008:062 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2008:062 drakxtools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Debian DSA-1764-1 : tunapie - several vulnerabilities

Several vulnerabilities have been discovered in Tunapie, a GUI frontend to video and radio streams. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1253 Kees Cook discovered that insecure handling of temporary files may lead to local denial of servi...

Mandriva Update for drakxtools MDVA-2008:062 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2008:062 drakxtools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

[SECURITY] [DSA 1764-1] New tunapie packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1764-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 07, 2009 http://www.debian.org/security/faq -...

DSA-1764-1 tunapie - several vulnerabilities

Bulletin has no description...

SAP GUI Moniker Creation Multiple Vulnerabilities

The version of the SAP GUI Moniker Creation ActiveX control installed on the remote Windows host is reportedly affected by 3 stack-based buffer overflows involving various properties and methods in 'MonikerUtildll.dll'. If an attacker can trick a user on the affected host into viewing a specially...

SAP GUI SAPBExCommonResources ActiveX Command Execution

Added: 03/29/2009 Background The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. The SAP GUI family is available for Windows, Java, and HTML/Internet Transaction Server ITS environment. SAP GUI for Windows registers the...

SAP GUI SAPBExCommonResources ActiveX Command Execution

Added: 03/29/2009 Background The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. The SAP GUI family is available for Windows, Java, and HTML/Internet Transaction Server ITS environment. SAP GUI for Windows registers the...