ClearPath MCP Detection (FTP)

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Unisys ClearPath MCP Denial of Service Vulnerability

Unisys ClearPath MCP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-5872

The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service network connectivity disruption via a client hello with a...

Design/Logic Flaw

The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service network connectivity disruption via a client hello with a...

CVE-2017-5872

The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service network connectivity disruption via a client hello with a...

CVE-2017-5872

The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service network connectivity disruption via a client hello with a...

CVE-2017-5872

The issue affects Unisys ClearPath MCP TCP-IP-SW: versions 57.1 before 57.152, 58.1 before 58.142, and 59.1 before 59.172. When a TLS 1.2 service is active, a remote attacker can trigger a denial of service by sending a TLS client_hello containing a signature_algorithms extension larger than RFC ...

CVE-2017-5872: Improper Input Validation

The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service network connectivity disruption via a client hello with a...

PT-2017-16724

Name of the Vulnerable Software and Affected Versions Unisys ClearPath MCP systems with TCP-IP-SW versions 57.1 through 57.151 Unisys ClearPath MCP systems with TCP-IP-SW versions 58.1 through 58.141 Unisys ClearPath MCP systems with TCP-IP-SW versions 59.1 through 59.171 Description The issue...

Denial of Service Vulnerability in Multiple Unisys Products

UnisysLibra43xx and others are MCP-based application system architectures developed by Unisys Corporation in the United States. A security vulnerability exists in MCP-FIRMWARE 40.0 IC4Build270 prior to version 40.0 in UnisysLibra43xx, 63xx, 83xx and FS600class systems. A remote attacker could...

Stack overflow

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service data corruption or system crash via vectors related to using program operators during EPSILON level 5 based codefiles at...

CVE-2015-4049

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service data corruption or system crash via vectors related to using program operators during EPSILON level 5 based codefiles at...

CVE-2015-4049

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service data corruption or system crash via vectors related to using program operators during EPSILON level 5 based codefiles at...

CVE-2015-4049

Unisys Libra 43xx, 63xx, 83xx and FS600 class systems with MCP-FIRMWARE prior to 40.0IC4 Build 270 are affected. A remote authenticated user could trigger a denial of service (data corruption or system crash) by using program operators during EPSILON (level 5) based codefiles at peak memory usage...

CVE-2015-4049: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service data corruption or system crash via vectors related to using program operators during EPSILON level 5 based codefiles at...

PT-2017-6723

Name of the Vulnerable Software and Affected Versions Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE versions prior to 40.0IC4 Build 270 Description The issue allows remote authenticated users to cause a denial of service, resulting in data corruption or system crash...

PT-2014-5681

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.14 Description The issue concerns the rd build device space function in the Linux kernel, which fails to properly initialize a certain data structure. This allows local users to obtain sensitive information fro...

Stack overflow

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a TOOLSETTINGS section in a .mcp file, possibly a related issue to CVE-2009-1608...

CVE-2009-1674: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a TOOLSETTINGS section in a .mcp file, possibly a related issue to CVE-2009-1608...

CVE-2009-1608

Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long 1 FILEINFO, 2 CATFILTERS, and possibly other fields...