oss-sec mailing list archives

CVE request for SAP issues

From: Kurt Seifried <kurt () seifried org>
Date: Wed, 13 Apr 2011 18:06:42 -0600

http://dsecrg.com/pages/vul/show.php?id=317
[DSECRG-11-017] SAP GUI - Buffer overflow
Attacker can construct saplogon.ini file which contains vulnerable tag
which is vulnerable to buffer overflow attack.
Digital Security Research Group [DSecRG] Advisory DSecRG-11-017
(Internal #DSECRG-00181)


http://dsecrg.com/pages/vul/show.php?id=316
[DSECRG-11-016] SAP NetWaver Data Archiving Service - multiple XSS
SAP Netweaver Data Archiving Service has multiple linked XSS vulnerabilities.
Digital Security Research Group [DSecRG] Advisory DSecRG-11-016 (
Internal DSECRG-00151)


http://dsecrg.com/pages/vul/show.php?id=315
[DSECRG-11-015] SAP Netweaver MessagingServer - XSS
NetWeaver 7.0 Messaging System application has linked XSS vulnerabilities.
Digital Security Research Group [DSecRG] Advisory DSecRG-11-015 (
Internal DSECRG-00122)


-- 
Kurt Seifried
kurt () seifried org
skype: 1-703-879-3176

Current thread:

CVE request for SAP issues Kurt Seifried (Apr 13)
- Re: CVE request for SAP issues Solar Designer (Apr 13)
  - Re: CVE request for SAP issues Kurt Seifried (Apr 13)