SAP NetWeaver SDM Admin - information disclosure

Application: SAP NetWeaver SDM Versions Affected: SAP NetWeaver SDM Vendor URL: http://www.sap.com Bugs: Information Disclosure Exploits: YES Reported: 10.02.2012 Vendor response: 11.02.2012 Date of Public Advisory: 10.10.2012 Reference: SAP Security Note 1724516 Authors: Alexander Polyakov ERPSc...

SAP NetWeaver SDM Admin - DoS

Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs: Information Disclosure Exploits: YES Reported: 10.02.2012 Vendor response: 11.02.2012 Date of Public Advisory: 10.10.2012 Reference: SAP Security Note 1724516 Authors: Alexander Polyakov ERPScan...

SAP NetWeaver SDM - information disclosure and SMBRelay

Application: SAP NetWeaver SDM Versions Affected: SAP NetWeaver SDM Vendor URL: http://www.sap.com Bugs: Information Disclosure Exploits: YES Reported: 10.02.2012 Vendor response: 11.02.2012 Date of Public Advisory: 10.10.2012 Reference: SAP Security Note 1724516 Authors: Alexander Polyakov ERPSc...

CVE-2010-0594

Cisco Router and Security Device Manager (SDM) suffers a cross-site scripting (XSS) vulnerability (Bug ID CSCtb38467) that allows remote attackers to inject arbitrary script or HTML via unknown vectors. Affected products: Cisco Router and Security Device Manager (SDM) web-based management tool; v...

CVE-2008-5372

sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file...

CVE-2008-5372

sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file...

Arbitrary file deletion

sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file...

CVE-2008-5372

sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file...

CVE-2008-5372

The CVE-2008-5372 entry concerns sdm-login in sdm-terminal 0.4.0b, where a local user can exploit a symlink vulnerability to overwrite the temporary file /tmp/sdm.autologin.once. This is a local privilege issue that can impact confidentiality and integrity (as indicated by the CVE data) through a...

CVE-2008-5372: Improper Link Resolution Before File Access

sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file...

CVE-2006-4833

The CVE-2006-4833 entry concerns Verso NetPerformer FRAD ACT SDM-95xx (R1 and earlier, 7.xx), SDM-93xx (R2 and earlier, 10.x.x), and SDM-92xx (R1 and earlier, 9.x.x). It describes a remote denial of service caused by sending an ICMP packet with the same destination and source address and port (th...

CVE-2006-4833: Undefined Security Weakness

Verso NetPerformer FRAD ACT SDM-95xx 7.xx R1 and earlier, SDM-93xx 10.x.x R2 and earlier, and SDM-92xx 9.x.x R1 and earlier allow remote attackers to cause a denial of service hang or reboot via an ICMP packet with the same destination and source address and port, aka the "Land" vulnerability...