Moderate: Red Hat Security Advisory: Red Hat Application Stack v2.1 security and enhancement update

Red Hat Application Stack v2.1 is now available. This update fixes various security issues and adds several enhancements. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Red Hat Application Stack is an integrated open source application...

CitectSCADA ODBC Server Remote Buffer Overflow

Binary data citectscadaodbcoverflow.nbin...

Stack overflow

Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222...

CVE-2008-2639

Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222...

Immunity Canvas: CITECT_SCADA

Name| citectscada ---|--- CVE| CVE-2008-2639 Exploit Pack| CANVAS Description| CitectSCADA ODBC Buffer Overflow Notes| CVE Name: CVE-2008-2639 VENDOR: Citect Repeatability: References: http://www.coresecurity.com/content/citect-scada-odbc-service-vulnerability CVE Url:...

CVE-2008-2639

Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222...

CVE-2008-2639

CVE-2008-2639 corresponds to a stack-based buffer overflow in the ODBC server service of CitectSCADA v6/v7 and CitectFacilities v7, exploitable remotely via the 20222/tcp ODBC port by sending a crafted second packet; vendor advisory CORE-2008-0125 confirms remote code execution as the impact. A p...

CVE-2008-2639: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222...

CitectSCADA ODBC service vulnerability

Advisory ID Internal CORE-2008-0125 Advisory Information Title: CitectSCADA ODBC service vulnerability Advisory ID: CORE-2008-0125 Advisory URL:https://www.coresecurity.com/core-labs/advisories/citect-scada-odbc-service-vulnerability Date published: 2008-06-11 Date of last update: 2008-06-10...

CitectSCADA/CitectFacilities ODBC Buffer Overflow

This module exploits a stack buffer overflow in CitectSCADA's ODBC daemon. This has only been tested against Citect v5, v6 and v7. Module Options msf use exploit/windows/scada/citect/scadaodbc msf undefinedscadaodbc show actions ...actions... msf undefinedscadaodbc set ACTION msf undefinedscadaod...

Citect CitectSCADA memory corruption

Memory corruption in TCP/20222 ODBC service...

Citect CitectSCADA ODBC service buffer overflow

Overview Citect CitectSCADA contains a remotely accessible buffer overflow vulnerability which may allow a remote attacker to execute arbitrary code. Description Citect CitectSCADA is software used for monitoring and control in Supervisory Control And Data Acquisition SCADA systems. A buffer...

authentix-xss.txt

Description: "Form-based or 100% cookie-free "Basic Authentication" website protection while keeping your NT Users Names and Passwords private. Protect all files, not just ASP pages. Validate against internal database, text file or external ODBC datasource." - www.flicks.com Summary: The Authenti...

Debian Security Advisory DSA 516-1 (postgresql)

The remote host is missing an update to postgresql announced via advisory DSA 516-1. OpenVAS Vulnerability Test $Id: deb5161.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 516-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

docusafe-sql.txt

DocuSafe "Search" SQL Injection Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://gartha.net Google Search: intitle:Corporate Contact System insert your command in the section "search" example: 'having 1=1-- Result: MicrosoftODB...

CVE-2002-2289

soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords...

CVE-2002-2289

The CVE concerns BadBlue 1.7.1 where soinfo.php calls the PHP phpinfo function, exposing sensitive information and potentially ODBC passwords. The root cause is the phpinfo output being exposed remotely, enabling information disclosure. Publicly documented details are limited to this information;...

CVE-2002-2289: Exposure of Sensitive Information to an Unauthorized Actor

soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords...

CVE-2002-2238

Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a ".." dot dot backslash in a GET request...

CVE-2002-2238

CVE-2002-2238 describes a directory traversal vulnerability in Kunani ODBC FTP Server 1.0.10 that allows remote attackers to read arbitrary files by supplying a ..\ in a GET request. The affected component is the server software; the underlying issue is improper path validation enabling access ou...