Date: Wed, 13 Apr 2011 18:06:42 -0600 From: Kurt Seifried <kurt@...fried.org> To: oss-security@...ts.openwall.com, info@...scan.com Subject: CVE request for SAP issues http://dsecrg.com/pages/vul/show.php?id=317 [DSECRG-11-017] SAP GUI - Buffer overflow Attacker can construct saplogon.ini file which contains vulnerable tag which is vulnerable to buffer overflow attack. Digital Security Research Group [DSecRG] Advisory DSecRG-11-017 (Internal #DSECRG-00181) http://dsecrg.com/pages/vul/show.php?id=316 [DSECRG-11-016] SAP NetWaver Data Archiving Service - multiple XSS SAP Netweaver Data Archiving Service has multiple linked XSS vulnerabilities. Digital Security Research Group [DSecRG] Advisory DSecRG-11-016 ( Internal DSECRG-00151) http://dsecrg.com/pages/vul/show.php?id=315 [DSECRG-11-015] SAP Netweaver MessagingServer - XSS NetWeaver 7.0 Messaging System application has linked XSS vulnerabilities. Digital Security Research Group [DSecRG] Advisory DSecRG-11-015 ( Internal DSECRG-00122) -- Kurt Seifried kurt@...fried.org skype: 1-703-879-3176
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.