SAP GUI 6.4 - ActiveX (Accept) Remote Buffer Overflow (PoC)

Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor respons...

Design/Logic Flaw

Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager TSM client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17, and the TSM Express client 5.3.3.0 through 5.3.6.5, allows attackers to read or modify arbitrary files vi...

Buffer overflow

Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager TSM client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service application crash or execute arbitrary code vi...

Stack overflow

Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager TSM client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote...

CVE-2008-4828

Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager TSM client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote...

CVE-2009-1520

Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager TSM client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service application crash or execute arbitrary code vi...

CVE-2009-1521

Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager TSM client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17, and the TSM Express client 5.3.3.0 through 5.3.6.5, allows attackers to read or modify arbitrary files vi...

CVE-2009-1521

CVE-2009-1521 affects the Java GUI of IBM Tivoli Storage Manager (TSM) client versions 5.2.0.0–5.2.5.3, 5.3.0.0–5.3.6.5, 5.4.0.0–5.4.2.6, and 5.5.0.0–5.5.1.17, and the TSM Express client 5.3.3.0–5.3.6.5. The vulnerability is described as unspecified and allows attackers to read or modify arbitrar...

CVE-2009-1520

Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager TSM client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service application crash or execute arbitrary code vi...

CVE-2009-1521

Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager TSM client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17, and the TSM Express client 5.3.3.0 through 5.3.6.5, allows attackers to read or modify arbitrary files vi...

CVE-2008-4828

Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager TSM client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote...

CVE-2009-1521: Undefined Security Weakness

Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager TSM client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17, and the TSM Express client 5.3.3.0 through 5.3.6.5, allows attackers to read or modify arbitrary files vi...

CVE-2009-1520: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager TSM client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service application crash or execute arbitrary code vi...

Home Web Server Graphical User Interface Remote Denial Of Service Vulnerability

According to its version number, the remote version of the Home Web Server is prone to a denial-of-service vulnerability because it fails to adequately handle malformed HTTP requests. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, an...

Home Web Server r1.7.1 Memory Corruption

Home Web Server =r1.7.1 build 147 "Gui Thread-Memory Corruption Exploit." By: Aodrulez. Homepage : http://downstairs.dnsalias.net/homewebserver.html Product Released : 22.4.2009/21:16:58 Description: This web server when fed with 1006 bytes of chr0x0d,with the html "GET" parameter,the Server's...

Home Web Server <= r1.7.1 (build 147) Gui Thread-Memory Corruption

Exploit for unknown platform in category dos / poc ================================================================== Home Web Server = r1.7.1 build 147 Gui Thread-Memory Corruption ================================================================== Home Web Server =r1.7.1 build 147 "Gui...

MDVA-2009:004 : rpmdrake

This update fixes several minor issues with rpmdrake: - it stops running with debuging perl pragmas, which should speed up some things - it makes edit-urpm-sources not drop the 'ignore' flag when updating a medium bug 44930 - it makes edit-urpm-sources display the right type of altered mirrorlist...

Mandriva Linux Security Advisory : mplayer (MDVSA-2009:014)

Several vulnerabilities have been discovered in mplayer, which could allow remote attackers to execute arbitrary code via a malformed TwinVQ file CVE-2008-5616, and in ffmpeg, as used by mplayer, related to the execution of DTS generation code CVE-2008-4866. The updated packages have been patched...

CentOS 3 / 4 / 5 : qt (CESA-2007:0721)

Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...

CentOS 3 / 4 : qt (CESA-2006:0725)

Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...