108 matches found
his software auktion 1.62 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2367/info A remote user could gain read access to known files outside of the root directory where HIS Software Auktion 1.62 resides. Requesting a specially crafted URL composed of '../' sequences along with the known...
CVE-2011-2007
CVE-2011-2007 affects Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010. The vulnerability allows remote attackers to cause a denial of service (SNA Server service outage) by sending crafted TCP or UDP traffic, described as an “Endless Loop DoS in snabase.exe Vulnerabilit...
CVE-2011-2008
CVE-2011-2008 affects Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010. The vulnerability allows remote, unauthenticated attackers to cause a denial of service (SNA Server service outage) by sending crafted TCP/UDP traffic, described as an Access of Unallocated Memory Do...
CVE-2011-2007: Improper Input Validation
Microsoft Host Integration Server HIS 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service SNA Server service outage via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability."...
Microsoft Host Integration Server Installed
Microsoft Host Integration Server HIS is installed on the remote host. HIS provides connectivity between Windows networks and IBM mainframe and mid-range computers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56448; scriptversion"1.10";...
MS11-082: Vulnerabilities in Host Integration Server Could Allow Denial of Service (2607670)
The version of Host Integration Server HIS installed on the remote host has multiple denial of service vulnerabilities. A remote, unauthenticated attacker could exploit these issues to cause HIS services to become unresponsive. C Tenable Network Security, Inc. include"compat.inc"; if description...
Microsoft Host Integration Server snabase.exe Memory Access Error
A denial of service DoS vulnerability has been reported in Microsoft Host Integration Server HIS. HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging and...
Vulnerabilities in Microsoft Reader and HIS
Microsoft Reader is a PC/tablet software for reading the ebooks in LIT format and the Audible audio books. The following are a couple of integer overflows, an heap and an array indexing overflow and the writing of a NULL byte in an arbitrary memory location: http://aluigi.org/adv/msreader1-adv.tx...
Authentication flaw
Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...
CVE-2008-3466: Improper Authentication
Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...
CVE-2008-3466
CVE-2008-3466 affects Microsoft Host Integration Server 2000, 2004, and 2006. The flaw resides in the SNA RPC service which does not properly restrict administrative RPC calls, enabling a remote attacker to bypass authentication and execute arbitrary code via a crafted SNA RPC message that calls ...
Directory traversal
Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...
CVE-2008-1541
CVE-2008-1541 affects HIS Webshop 2.50, via a directory traversal in cgi-bin/his-webshop.pl. The t parameter can be abused with .. (dot dot) to read arbitrary files, enabling read access from remote attackers. The vulnerability is documented in multiple sources (NVD/NVD-derived data) with a CVSS ...
CVE-2008-1541
Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...
CVE-2008-1541: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...
HIS-Webshop (his-webshop.pl t) Remote File Disclosure Vulnerability
No description provided by source. HIS-Webshop is a shopping-system written in Perl by www.shoppark.de The script doesnt check the "t"-parameter. Example: http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd%00 Greetz Zero X...
hiswebshop-traverse.txt
HIS-Webshop is a shopping-system written in Perl by www.shoppark.de The script doesn´t check the "t"-parameter. Example: http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd%00...
HIS-webshop is vulnerable against Directory-Traversal (www.shoppark.de)
HIS-Webshop is a shopping-system written in Perl by www.shoppark.de The script doesnґt check the "t"-parameter. Example: http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd00 Greetz Zero X...
HIS-Webshop (his-webshop.pl t) Remote File Disclosure Vulnerability
Exploit for cgi platform in category web applications =================================================================== HIS-Webshop his-webshop.pl t Remote File Disclosure Vulnerability =================================================================== HIS-Webshop is a shopping-system written ...
HIS-Webshop - his-webshop.pl t Remote File Disclosure
HIS-Webshop - his-webshop.pl t Remote File Disclosure HIS-Webshop is a shopping-system written in Perl by www.shoppark.de The script doesn´t check the "t"-parameter. Example: http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd%00 milw0rm.com 2008-03-24...