PT-2012-4396

Name of the Vulnerable Software and Affected Versions BreakingPoint Storm appliance versions prior to 3.0 Description The administrative interface in the embedded web server does not require authentication for the gwt/BugReport script, allowing remote attackers to obtain sensitive information by...

CA ARCserve D2D GWT RPC Request Credentials Disclosure (CVE-2011-3011)

A credentials disclosure vulnerability has been reported in CA ARCserve D2D. The vulnerability is due to an error while processing Google Web Toolkit GWT RPC requests. A remote attacker can exploit this vulnerability by sending a specially crafted RPC request to an affected server. Successful...

CA Arcserve D2D GWT RPC Credential Information Disclosure

$Id: caarcserverpcauthbypass.rb 13467 2011-08-01 21:20:29Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CA Arcserve D2D GWT RPC Credential Information Disclosure

Exploit for jsp platform in category web applications $Id: caarcserverpcauthbypass.rb 13467 2011-08-01 21:20:29Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...

CA ARCserver D2D GWT RPC Request Multiple Vulnerabilities

CA ARCserver D2D is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Computer Associates ARCserve D2D homepageServlet Servlet Information Disclosure

The installed version of ARCserve D2D, a disk-based backup product from Computer Associates, allows an unauthenticated, remote attacker to discover the username and password used by the affected application. This can be accomplished by sending a specially crafted POST request to the...

CA ARCserve D2D r15 Bypass / Disclosure / Command Execution

Exploit Title:CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution Google Dork: / Date: 25 July 2011 Author: rgod Software Link: / Version: r15.0 Tested on: Microsoft Windows Server 2003 r2 sp2 CVE : none ?php / CA ARCserve D2D r15 GWT RPC Request Auth...

CA ARCserve D2D r15 GWT RPC Multiple Vulnerabilities

Exploit for jsp platform in category web applications Exploit Title:CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution Google Dork: / Date: 25 July 2011 Author: rgod Software Link: / Version: r15.0 Tested on: Microsoft Windows Server 2003 r2 sp2 CVE :...

CA ARCserve D2D r15 GWT RPC - Multiple Vulnerabilities

CA ARCserve D2D r15 GWT RPC - Multiple Vulnerabilities Exploit Title:CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution Google Dork: / Date: 25 July 2011 Author: rgod Software Link: / Version: r15.0 Tested on: Microsoft Windows Server 2003 r2 sp2 CVE :...

CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution

?php / CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution PoC product homepage: http://arcserve.com/us/default.aspx file tested: CAARCserveD2DSetupBMR.zip tested against: Microsoft Windows Server 2003 r2 sp2 This software installs a Tomcat HTTP server...

CA ARCserve D2D r15 GWT RPC - Multiple Vulnerabilities

Exploit Title:CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution Google Dork: / Date: 25 July 2011 Author: rgod Software Link: / Version: r15.0 Tested on: Microsoft Windows Server 2003 r2 sp2 CVE : none ?php / CA ARCserve D2D r15 GWT RPC Request Auth...

CA Arcserve D2D GWT RPC Credential Information Disclosure

This module exploits an information disclosure vulnerability in the CA Arcserve D2D r15 web server. The information disclosure can be triggered by sending a specially crafted RPC request to the homepage servlet. This causes CA Arcserve to disclosure the username and password in cleartext used for...

CVE-2007-6452

CVE-2007-6452 affects Google Web Toolkit (GWT) – specifically the benchmark reporting system. The connected JVN entry states a cross-site scripting (XSS) vulnerability in GWT before version 1.4.61, enabling arbitrary script execution in the user’s browser. No exploit details are provided beyond t...

CVE-2007-2378

The CVE-2007-2378 issue concerns the Google Web Toolkit (GWT) framework, where JSON data is exchanged without a protection scheme, enabling JavaScript Hijacking. IBM’s bulletin specifies ITNM (IBM Tivoli Network Manager) IP Edition 4.2 GA through 4.2.0.15 is affected, with a fix in ITNM 4.2 Fix P...

CVE-2007-2378: Undefined Security Weakness

The Google Web Toolkit GWT framework exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data...