60 matches found
KLA12452 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Dynamics GP can be...
CVE-2010-2083
Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors...
Design/Logic Flaw
Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors...
CVE-2010-2083
CVE-2010-2083 involves Microsoft Dynamics GP where the system password has a default value of ACCESS. The connected sources confirm this as a design/configuration issue that could allow remote authenticated users to bypass access restrictions via unspecified vectors. The documents do not specify ...
CVE-2010-2083
Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors...
CVE-2010-2083: Undefined Security Weakness
Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors...
CVE-2010-2011
Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information by decrypting a field's contents...
Code injection
Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information by decrypting a field's contents...
CVE-2010-2011
Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information by decrypting a field's contents...
CVE-2010-2011: Undefined Security Weakness
Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information by decrypting a field's contents...
Microsoft Dynamics GP < 10.0 Multiple Vulnerabilities
Microsoft Dynamics GP formerly known as Great Plains, is installed on remote host. The installed version of Microsoft Dynamics GP is affected by multiple vulnerabilities. - By sending a specially crafted DPS message with a very long IP address or a string, to Distributed Process Server DPS or...
Microsoft Dynamics GP拒绝服务和缓冲区溢出漏洞
BUGTRAQ ID: 29991 CVE ID:CVE-2006-5266 CVE-2006-5265 CNCVE ID：CNCVE-20065266 CNCVE-20065265 Microsoft Dynamics GP是一款高效解决方案，可以管理和集成组织内的财务、电子商务、供应链、制造、项目记帐、现场服务、客户关系和人力资源等。 Microsoft Dynamics GP存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务和缓冲区溢出攻击。 -Microsoft Dynamics...
CVE-2006-5266
Multiple buffer overflows in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allow remote attackers to execute arbitrary code via 1 a crafted Distributed Process Manager DPM message to the a DPM component, or a 2 long string or 3 long IP address in a Distributed Process Server DPS...
CVE-2006-5265
Unspecified vulnerability in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allows remote attackers to cause a denial of service crash via an invalid magic number in a Distributed Process Server DPS message...
CVE-2006-5266
Microsoft Dynamics GP (Great Plains) versions up to 9.0 are affected by multiple buffer-overflow vulnerabilities in DPS/DPM components. Exploitation possible via crafted DPS/DPM messages: long strings, long IPs, or invalid magic numbers, leading to remote code execution with partial impact on con...
CVE-2006-5265
CVE-2006-5265 affects Microsoft Dynamics GP (Great Plains) 9.0 and earlier. The vulnerability lies in the Distributed Process Server (DPS) (and DPS messages) where an invalid magic number in a DPS message can cause a crash (DoS). Threats described in connected documents also include DPS overflow ...
CVE-2006-5265: Improper Input Validation
Unspecified vulnerability in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allows remote attackers to cause a denial of service crash via an invalid magic number in a Distributed Process Server DPS message...
CVE-2006-5266: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allow remote attackers to execute arbitrary code via 1 a crafted Distributed Process Manager DPM message to the a DPM component, or a 2 long string or 3 long IP address in a Distributed Process Server DPS...
CVE-2006-5265
Unspecified vulnerability in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allows remote attackers to cause a denial of service crash via an invalid magic number in a Distributed Process Server DPS message...
CVE-2006-5266
Multiple buffer overflows in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allow remote attackers to execute arbitrary code via 1 a crafted Distributed Process Manager DPM message to the a DPM component, or a 2 long string or 3 long IP address in a Distributed Process Server DPS...