502 matches found
PT-2010-5199
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2007 SP2 Description The issue is related to an unrestricted file upload vulnerability in the Document Conversions Launcher Service. This allows remote attackers to execute arbitrary code via a crafted SOAP...
CA XOsoft buffer overflow
Buffer overflow on SOAP request parsing...
SAP BusinessObjects Version Detection
This module simply attempts to identify the version of SAP BusinessObjects. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP BusinessObjects Version Detection', 'Description' = 'This module...
SAP NetWeaver Composition Environment sapstartsrv.exe Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP NetWeaver Composition Environment. Authentication is not required to exploit this vulnerability. The specific flaw exists within the sapstartsrv.exe process which listens by default on ports...
Computer Associates XOsoft SOAP Request Username Enumeration (CA20100406)
The remote web server is a component of XOsoft, a product from Computer Associates for combined business continuity and disaster recovery. The installed version of this service does not require authentication when handling SOAP requests to enumerate user names. An unauthenticated, remote attacker...
Design/Logic Flaw
CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request...
Design/Logic Flaw
CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request...
CVE-2010-1221
CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request...
CVE-2010-1222
CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request...
CVE-2010-1221
CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request...
CVE-2010-1222
CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request...
CVE-2010-1222
CVE-2010-1222 affects CA XOsoft r12.5. The root cause is a lack of authentication, allowing unauthenticated SOAP requests to obtain potentially sensitive information (information disclosure). References indicate the issue affects XOsoft 12.5 products and CA issued patches (RO15016) for r12.5 prod...
CVE-2010-1221: Improper Authentication
CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request...
CVE-2010-1222: Improper Authentication
CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request...
ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability
ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-024 March 2, 2010 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have be...
Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability
This vulnerability allows remote attackers to deny services on vulnerable installations of Novell eDirectory Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NDS daemon's SOAP service. When a malformed request is made to the...
CVE-2010-0666
Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service crash via unknown a crafted SOAP request, a different issue than CVE-2008-0926...
CVE-2010-0666
CVE-2010-0666 describes a DoS in Novell eDirectory’s eMBox service (8.8 SP5 Patch 2 and earlier) triggered by a crafted SOAP request, allowing remote attackers to crash the service. The vulnerability is distinct from CVE-2008-0926. Connected documents confirm DoS wording and affected versions; no...
CVE-2010-0666: Undefined Security Weakness
Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service crash via unknown a crafted SOAP request, a different issue than CVE-2008-0926...