[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Wed, 13 Apr 2011 18:06:42 -0600
From: Kurt Seifried <kurt@...fried.org>
To: oss-security@...ts.openwall.com, info@...scan.com
Subject: CVE request for SAP issues
http://dsecrg.com/pages/vul/show.php?id=317
[DSECRG-11-017] SAP GUI - Buffer overflow
Attacker can construct saplogon.ini file which contains vulnerable tag
which is vulnerable to buffer overflow attack.
Digital Security Research Group [DSecRG] Advisory DSecRG-11-017
(Internal #DSECRG-00181)
http://dsecrg.com/pages/vul/show.php?id=316
[DSECRG-11-016] SAP NetWaver Data Archiving Service - multiple XSS
SAP Netweaver Data Archiving Service has multiple linked XSS vulnerabilities.
Digital Security Research Group [DSecRG] Advisory DSecRG-11-016 (
Internal DSECRG-00151)
http://dsecrg.com/pages/vul/show.php?id=315
[DSECRG-11-015] SAP Netweaver MessagingServer - XSS
NetWeaver 7.0 Messaging System application has linked XSS vulnerabilities.
Digital Security Research Group [DSecRG] Advisory DSecRG-11-015 (
Internal DSECRG-00122)
--
Kurt Seifried
kurt@...fried.org
skype: 1-703-879-3176
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
