4978 matches found
CVE-2013-0483
The login component in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 uses cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2013-0483
IBM’s Security Bulletin links CVE-2013-0483 to IMS Enterprise Suite SOAP Gateway versions 1.1, 2.1, and 2.2, where the login process could transmit credentials in cleartext, enabling exposure over the network. The affected components are the SOAP Gateway in IBM IMS Enterprise Suite for z/OS, Linu...
CVE-2013-0483: Undefined Security Weakness
The login component in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 uses cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...
PT-2013-2376
Name of the Vulnerable Software and Affected Versions IBM IMS Enterprise Suite versions 1.1 through 2.2 Description The issue concerns the login component in SOAP Gateway, which uses cleartext credentials. This allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2013-0664
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests...
Code injection
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests...
CVE-2013-0664
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests...
PT-2013-1301
Name of the Vulnerable Software and Affected Versions Schneider Electric Quantum versions 140NOE77111 and 140NWM10000 M340 BMXNOE0110x Premium TSXETY5103 Description The issue allows remote authenticated users to execute arbitrary code by sending Modbus messages embedded in SOAP HTTP POST request...
CVE-2013-0664: Undefined Security Weakness
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests...
Fedora 18 : php-5.4.13-1.fc18 (2013-3891)
Upstream NEWS, 14 Mar 2012, PHP 5.4.13 Core : - Fixed bug 64235 Insteadof not work for class method in 5.4.11. Laruence - Implemented FR 64175 Added HTTP codes as of RFC 6585. Jonh Wendell - Fixed bug 64142 dval to lval different behavior on ppc64. Remi - Fixed bug 64070 Inheritance with Traits...
Fedora 17 : php-5.4.13-1.fc17 (2013-3927)
Upstream NEWS, 14 Mar 2012, PHP 5.4.13 Core : - Fixed bug 64235 Insteadof not work for class method in 5.4.11. Laruence - Implemented FR 64175 Added HTTP codes as of RFC 6585. Jonh Wendell - Fixed bug 64142 dval to lval different behavior on ppc64. Remi - Fixed bug 64070 Inheritance with Traits...
CentOS Update for axis CESA-2013:0683 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RedHat Update for axis RHSA-2013:0683-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RHEL 5 : axis (RHSA-2013:0683)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0683 advisory. Apache Axis is an implementation of SOAP Simple Object Access Protocol. It can be used to build both web service clients and servers. Apache Axis did...
vTiger CRM SOAP AddEmailAttachment Arbitrary File Upload
vTiger CRM allows a user to bypass authentication when requesting SOAP services. In addition, arbitrary file upload is possible through the AddEmailAttachment SOAP service. By combining both vulnerabilities an attacker can upload and execute PHP code. This module has been tested successfully on...
SAP SOAP RFC SXPG_CALL_SYSTEM Remote Command Execution
This module abuses the SAP NetWeaver SXPGCALLSYSTEM function, on the SAP SOAP RFC Service, to execute remote commands. This module needs SAP credentials with privileges to use the /sap/bc/soap/rfc in order to work. The module has been tested successfully on Windows 2008 64-bit and Linux 64-bit...
Moderate: Red Hat Security Advisory: axis security update
Updated axis packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
php
New php packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/php-5.4.13-i486-1slack14.0.txz: Upgraded. This release fixes two security issues in SOAP: Added check tha...
FreeBSD : php5 -- Multiple vulnerabilities (1d23109a-9005-11e2-9602-d43d7e0c7c02)
The PHP development team reports : PHP does not validate the relationship between the soap.wsdlcachedir directive and the openbasedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory. The...
Ubuntu Update for php5 USN-1761-1
Check for the Version of php5 OpenVAS Vulnerability Test $Id: gbubuntuUSN17611.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for php5 USN-1761-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...