81 matches found
Microsoft Host Integration Server Installed
Microsoft Host Integration Server HIS is installed on the remote host. HIS provides connectivity between Windows networks and IBM mainframe and mid-range computers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56448; scriptversion"1.10";...
MS11-082: Vulnerabilities in Host Integration Server Could Allow Denial of Service (2607670)
The version of Host Integration Server HIS installed on the remote host has multiple denial of service vulnerabilities. A remote, unauthenticated attacker could exploit these issues to cause HIS services to become unresponsive. C Tenable Network Security, Inc. include"compat.inc"; if description...
Microsoft Host Integration Server snabase.exe Memory Access Error
A denial of service DoS vulnerability has been reported in Microsoft Host Integration Server HIS. HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging and...
Vulnerabilities in Microsoft Reader and HIS
Microsoft Reader is a PC/tablet software for reading the ebooks in LIT format and the Audible audio books. The following are a couple of integer overflows, an heap and an array indexing overflow and the writing of a NULL byte in an arbitrary memory location: http://aluigi.org/adv/msreader1-adv.tx...
Authentication flaw
Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...
CVE-2008-3466
CVE-2008-3466 affects Microsoft Host Integration Server 2000, 2004, and 2006. The flaw resides in the SNA RPC service which does not properly restrict administrative RPC calls, enabling a remote attacker to bypass authentication and execute arbitrary code via a crafted SNA RPC message that calls ...
Directory traversal
Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...
CVE-2008-1541
CVE-2008-1541 affects HIS Webshop 2.50, via a directory traversal in cgi-bin/his-webshop.pl. The t parameter can be abused with .. (dot dot) to read arbitrary files, enabling read access from remote attackers. The vulnerability is documented in multiple sources (NVD/NVD-derived data) with a CVSS ...
CVE-2008-1541
Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...
HIS-Webshop (his-webshop.pl t) Remote File Disclosure Vulnerability
No description provided by source. HIS-Webshop is a shopping-system written in Perl by www.shoppark.de The script doesnt check the "t"-parameter. Example: http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd%00 Greetz Zero X...
HIS-Webshop (his-webshop.pl t) Remote File Disclosure Vulnerability
Exploit for cgi platform in category web applications =================================================================== HIS-Webshop his-webshop.pl t Remote File Disclosure Vulnerability =================================================================== HIS-Webshop is a shopping-system written ...
hiswebshop-traverse.txt
HIS-Webshop is a shopping-system written in Perl by www.shoppark.de The script doesn´t check the "t"-parameter. Example: http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd%00...
HIS-webshop is vulnerable against Directory-Traversal (www.shoppark.de)
HIS-Webshop is a shopping-system written in Perl by www.shoppark.de The script doesnґt check the "t"-parameter. Example: http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd00 Greetz Zero X...
HIS-Webshop - 'his-webshop.pl t' Remote File Disclosure
HIS-Webshop is a shopping-system written in Perl by www.shoppark.de The script doesn´t check the "t"-parameter. Example: http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd%00 milw0rm.com 2008-03-24...
HIS-Webshop - his-webshop.pl t Remote File Disclosure
HIS-Webshop - his-webshop.pl t Remote File Disclosure HIS-Webshop is a shopping-system written in Perl by www.shoppark.de The script doesn´t check the "t"-parameter. Example: http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd%00 milw0rm.com 2008-03-24...
CVE-2001-0212
Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. dot dot in the menue parameter, and possibly execute commands via shell metacharacters...
HIS AUktion auktion.cgi Traversal Arbitrary Command Execution
The 'auktion.cgi' cgi is installed. This CGI has a well known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...
CVE-2001-0212
Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. dot dot in the menue parameter, and possibly execute commands via shell metacharacters...
HIS Auktion 1.62: "show files" vulnerability and remote command execute.
-----------UkR security team advisory 8------------ HIS Auktion 1.62: "show files" vulnerability and remote command execute. -------------------------------------------------- Name: HIS Auktion 1.62: "show files" vulnurability. Date: 11.02.2001 Author: UkR-XblP About: script "HIS Auktion 1.62" is...
