oss-security - CVE request for SAP issues

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <BANLkTi=KMfgWK-KYbNbwFE4G=8k8tP3zGg@mail.gmail.com>
Date: Wed, 13 Apr 2011 18:06:42 -0600
From: Kurt Seifried <kurt@...fried.org>
To: oss-security@...ts.openwall.com, info@...scan.com
Subject: CVE request for SAP issues

http://dsecrg.com/pages/vul/show.php?id=317
[DSECRG-11-017] SAP GUI - Buffer overflow
Attacker can construct saplogon.ini file which contains vulnerable tag
which is vulnerable to buffer overflow attack.
Digital Security Research Group [DSecRG] Advisory DSecRG-11-017
(Internal #DSECRG-00181)

http://dsecrg.com/pages/vul/show.php?id=316
[DSECRG-11-016] SAP NetWaver Data Archiving Service - multiple XSS
SAP Netweaver Data Archiving Service has multiple linked XSS vulnerabilities.
Digital Security Research Group [DSecRG] Advisory DSecRG-11-016 (
Internal DSECRG-00151)

http://dsecrg.com/pages/vul/show.php?id=315
[DSECRG-11-015] SAP Netweaver MessagingServer - XSS
NetWeaver 7.0 Messaging System application has linked XSS vulnerabilities.
Digital Security Research Group [DSecRG] Advisory DSecRG-11-015 (
Internal DSECRG-00122)

-- 
Kurt Seifried
kurt@...fried.org
skype: 1-703-879-3176

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.