Novell Netware RPC XNFS xdrDecodeString Vulnerability

Exploit for linux platform in category dos / poc !/usr/bin/ruby Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=24&Itemid=24 require 'socket' netwareserver = ARGV0 targetport = ARGV1 || 1234 beepbeep= "\x1c\xd1\xef\xab" + XID "\x00\x00\x00\x00" + Message Type:...

PT-2011-2314

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server devices with software 1.6.x Description The issue concerns a lack of authentication for an XML-RPC interface, allowing remote attackers to perform unspecified actions via a session on TCP port 8080...

CVE-2010-4227: Improper Restriction of Operations within the Bounds of a Memory Buffer

The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service abend or execute arbitrary code via a crafted, signed value in a NFS RPC request to port UDP 1234, leading to a stack-based buffer overflow...

CVE-2011-0392: Improper Authentication

Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug ID CSCtg35833...

CVE-2011-0386: Improper Control of Generation of Code

The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code via a malformed request, aka Bug ID CSCti50739...

CVE-2011-0390: Undefined Security Weakness

The XML-RPC implementation on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, 1.6.x, and 1.7.0 allows remote attackers to cause a denial of service process crash via a crafted request, aka Bug ID CSCtj44534...

PT-2011-2312

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.7.0 Description The issue concerns the XML-RPC implementation, which allows remote attackers to cause a denial of service by sending a crafted request, resulting in a process...

CVE-2011-0378: Improper Neutralization of Special Elements used in an OS Command

The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587...

Novell Netware - RPC XNFS xdrDecodeString

Novell Netware - RPC XNFS xdrDecodeString !/usr/bin/ruby Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=24&Itemid=24 require 'socket' netwareserver = ARGV0 targetport = ARGV1 || 1234 beepbeep= "\x1c\xd1\xef\xab" + XID "\x00\x00\x00\x00" + Message Type: Call 0...

Novell Netware RPC XNFS xdrDecodeString Code Execution

!/usr/bin/ruby Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=24&Itemid=24 require 'socket' netwareserver = ARGV0 targetport = ARGV1 || 1234 beepbeep= "\x1c\xd1\xef\xab" + XID "\x00\x00\x00\x00" + Message Type: Call 0 "\x00\x00\x00\x02" + RPC Version: 2...

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-090 February 18, 2011 -- CVE ID: CVE-2010-4227 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell Netware --...

Novell Netware - RPC XNFS xdrDecodeString

!/usr/bin/ruby Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=24&Itemid=24 require 'socket' netwareserver = ARGV0 targetport = ARGV1 || 1234 beepbeep= "\x1c\xd1\xef\xab" + XID "\x00\x00\x00\x00" + Message Type: Call 0 "\x00\x00\x00\x02" + RPC Version: 2...

PT-2011-1480

Name of the Vulnerable Software and Affected Versions Novell Netware version 6.5 before SP8 Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafted value in a NFS RPC request. This is due to a stack-based buffer overflow in the...

bo-blog upload vulnerability-vulnerability warning-the black bar safety net

| Attention to the following recent of several large cattle site was hacked the message, The know with bo-blog, just under the sleeve 2. 1. 1 See, found a point problem. This program and F2blog the presence of the same upload bug, just use the hard point, to a certain permissions. But the...

Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is not required to exploit this vulnerability. The flaw exists within the XNFS.NLM component which listens by default on UDP port 1234. When handling the an NFS RPC...

Microsoft Server Service - NetpwPathCanonicalize Overflow (MS06-040) (Metasploit)

$Id: ms06040netapi.rb 11762 2011-02-17 03:56:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Microsoft Windows - Print Spooler Service Impersonation (MS10-061) (Metasploit)

$Id: ms10061spoolss.rb 11766 2011-02-17 19:22:11Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

ZDI-11-062: Multiple Vendor Calendar Manager RPC Service Remote Code Execution Vulnerability

ZDI-11-062: Multiple Vendor Calendar Manager RPC Service Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-062 February 8, 2011 -- CVE ID: CVE-2010-4435 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard IBM Sun Microsystems -- Affect...

Multiple Vendor Calendar Manager - Remote Code Execution

Multiple Vendor Calendar Manager - Remote Code Execution / Rodrigo Rubira Branco BSDaemon - http://www.kernelhacking.com/rodrigo http://www.risesecurity.org / include include include include include define CMSDPROG 100068 define CMSDVERS 4 define CMSDINSERT 6 define CMSDUNKN 10 struct cmsend char...

Vendor Calendar Manager Remote Code Execution

Exploit for multiple platform in category remote exploits / Rodrigo Rubira Branco BSDaemon - http://www.kernelhacking.com/rodrigo http://www.risesecurity.org / include include include include include define CMSDPROG 100068 define CMSDVERS 4 define CMSDINSERT 6 define CMSDUNKN 10 struct cmsend cha...