4884 matches found
CVE-2018-2402
In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, see SAP Note 2362820 for more information about capture & replay, user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker with the required authorization...
CVE-2018-2402
SAP HANA vulnerability CVE-2018-2402 affects the optional capture & replay feature in SAP HANA versions 1.00 and 2.00. The root cause is that user credentials can be stored in plaintext in the control system’s indexserver trace files, enabling an attacker with required authorizations on the contr...
PT-2018-15533
Name of the Vulnerable Software and Affected Versions SAP HANA versions 1.00 through 2.00 Description The issue affects systems using the optional capture & replay functionality, where user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker...
CVE-2018-2402: Exposure of Sensitive Information to an Unauthorized Actor
In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, see SAP Note 2362820 for more information about capture & replay, user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker with the required authorization...
Security Vulnerabilities in Smart Contracts
Interesting research: "Finding The Greedy, Prodigal, and Suicidal Contracts at Scale": Abstract: Smart contracts -- stateful executable objects hosted on blockchains like Ethereum -- carry billions of dollars worth of coins and cannot be updated once deployed. We present a new systematic...
[Citrix Gateway Trace Study] – LDAP Authentication
This trace study looks at how LDAP authentication to the Citrix Gateway works, using a user called "garyca" as an example. This example trace was carried out in a practice lab environment with the following IP addresses: VIP:10.90.33.172 NSIP:10.90.41.200 SNIP:192.168.0.2 LDAP/AD server:192.168.0...
[NetScaler Gateway Trace Study] - App Launch Through NetScaler Gateway
This trace study looks at a successful application launch via NetScaler Gateway. This example trace was carried out in a practice lab environment with the following IP addresses: VIP:10.90.33.172 NSIP:10.90.41.200 SNIP:192.168.0.2 Client: 10.90.41.87 SF: 192.168.0.6 XA: 192.168.0.3...
Chrome V8 PropertyArray Integer Overflow
Chrome: V8: Integer overflow with PropertyArray There's a snippet of the MigrateFastToFast function which is used to create a new PropertyArray object. int numberoffields = newmap-NumberOfFields; int inobject = newmap-GetInObjectProperties; int unused = newmap-UnusedPropertyFields; ... int...
Windows Kernel stack memory disclosure in nt!RtlpCopyLegacyContextX86(CVE-2018-0832)
We have discovered a new Windows kernel memory disclosure vulnerability in the creation and copying of a CONTEXT structure to user-mode memory. Two previous bugs in the nearby code area were reported in issues 1177 and 1311 ; in fact, the problem discussed here appears to be a variant of 1177 but...
Wireshark epan/dissectors/packet-lltd.c file denial of service vulnerability
Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in the epan/dissectors/packet-lltd.c file in Wireshark...
Wireshark DMP Parser Denial of Service Vulnerability
Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.DMP dissector is one of the DMP communication system parsers. A security...
Wireshark epan/dissectors/packet-thread.c file denial of service vulnerability
Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in the epan/dissectors/packet-thread.c file in Wireshark...
PT-2018-18058
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.12 Wireshark versions 2.4.0 through 2.4.4 Description The issue concerns a denial of service crash that can be caused by a malformed packet trace file. This is due to a problem in the SIGCOMP dissector. The...
PT-2018-18059
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.12 Wireshark versions 2.4.0 through 2.4.4 Description The NBAP dissector in Wireshark could crash due to incorrect initialization of the DCH ID. This issue allows attackers to cause a denial of service by...
kernel security and bug fix update
2.6.32-696.20.1.OL6 - Update genkey bug 25599697 2.6.32-696.20.1 - x86 kaiser/efi: unbreak tboot Waiman Long 1519799 1519802 CVE-2017-5754 - x86 pti/mm: Fix trampoline stack problem with XEN PV Waiman Long 1519799 1519802 CVE-2017-5754 - x86 pti/mm: Fix XEN PV boot failure Waiman Long 1519799...
Cross-site Scripting (XSS)
sentry-provider-db is vulnerable to cross-site scripting XSS attacks. The vulnerability exists as HTTP TRACE requests are possible, which can lead to XSS attacks...
IBM MQ service trace module elevation of privilege vulnerability
IBM MQ formerly known as IBM WebSphere MQ is a messaging middleware product from IBM. It provides a reliable and proven messaging backbone for Service Oriented Architecture SOA. service trace module is one of the service trace modules. An elevation of privilege vulnerability exists in the service...
Code injection
IBM WebSphere MQ 7.0, 7.1, 7.5, 8.0, and 9.0 service trace module could be used to execute untrusted code under 'mqm' user. IBM X-Force ID: 132953...
