CVE-2010-3964: Undefined Security Weakness

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka...

Microsoft SharePoint Malformed SOAP Request Remote Code Execution Vulnerability

Description Microsoft SharePoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the privileges of the guest account on the SharePoint server. Failed exploit attempts will result in a denial-of-service condition. Technologies...

CA XOsoft buffer overflow

Buffer overflow on SOAP request parsing...

SAP BusinessObjects Version Detection

This module simply attempts to identify the version of SAP BusinessObjects. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP BusinessObjects Version Detection', 'Description' = 'This module...

SAP NetWeaver Composition Environment sapstartsrv.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP NetWeaver Composition Environment. Authentication is not required to exploit this vulnerability. The specific flaw exists within the sapstartsrv.exe process which listens by default on ports...

Computer Associates XOsoft SOAP Request Username Enumeration (CA20100406)

The remote web server is a component of XOsoft, a product from Computer Associates for combined business continuity and disaster recovery. The installed version of this service does not require authentication when handling SOAP requests to enumerate user names. An unauthenticated, remote attacker...

Design/Logic Flaw

CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request...

CVE-2010-1222

CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request...

Design/Logic Flaw

CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request...

CVE-2010-1221

CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request...

CVE-2010-1221

CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request...

CVE-2010-1222

CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request...

CVE-2010-1222

CVE-2010-1222 affects CA XOsoft r12.5. The root cause is a lack of authentication, allowing unauthenticated SOAP requests to obtain potentially sensitive information (information disclosure). References indicate the issue affects XOsoft 12.5 products and CA issued patches (RO15016) for r12.5 prod...

CVE-2010-1221: Improper Authentication

CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request...

CVE-2010-1222: Improper Authentication

CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request...

ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability

ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-024 March 2, 2010 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have be...

Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability

This vulnerability allows remote attackers to deny services on vulnerable installations of Novell eDirectory Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NDS daemon's SOAP service. When a malformed request is made to the...

CVE-2010-0666

Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service crash via unknown a crafted SOAP request, a different issue than CVE-2008-0926...

CVE-2010-0666

CVE-2010-0666 describes a DoS in Novell eDirectory’s eMBox service (8.8 SP5 Patch 2 and earlier) triggered by a crafted SOAP request, allowing remote attackers to crash the service. The vulnerability is distinct from CVE-2008-0926. Connected documents confirm DoS wording and affected versions; no...

CVE-2010-0666: Undefined Security Weakness

Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service crash via unknown a crafted SOAP request, a different issue than CVE-2008-0926...