[VulnWatch] iDefense Security Advisory 01.17.06: EMC Legato Networker nsrd.exe DoS Vulnerability

EMC Legato Networker nsrd.exe DoS Vulnerability iDefense Security Advisory 01.17.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=375 January 17, 2006 I. BACKGROUND EMC Legato NetWorker is a cross-platform backup and recovery application. II. DESCRIPTION Remote exploitation ...

CVE-2005-3658

Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup SBU 6.0 and 6.1 and StorEdge Enterprise Backup Software EBS 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause ...

CVE-2005-3659

nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup SBU 6.0 and 6.1 and StorEdge Enterprise Backup Software EBS 7.1 through 7.2L, allows remote attackers to cause a denial of service nsrd service crash via a malforme...

[SA17674] FreeMED XML_RPC PHP Code Execution Vulnerability

TITLE: FreeMED XMLRPC PHP Code Execution Vulnerability SECUNIA ADVISORY ID: SA17674 VERIFY ADVISORY: http://secunia.com/advisories/17674/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: FreeMED 0.x http://secunia.com/product/6190/ DESCRIPTION: A vulnerability has been...

[SA17674] FreeMED XML_RPC PHP Code Execution Vulnerability

TITLE: FreeMED XMLRPC PHP Code Execution Vulnerability SECUNIA ADVISORY ID: SA17674 VERIFY ADVISORY: http://secunia.com/advisories/17674/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: FreeMED 0.x http://secunia.com/product/6190/ DESCRIPTION: A vulnerability has been...

[SA17693] vtiger CRM Multiple Vulnerabilities

TITLE: FreeMED XMLRPC PHP Code Execution Vulnerability SECUNIA ADVISORY ID: SA17674 VERIFY ADVISORY: http://secunia.com/advisories/17674/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: FreeMED 0.x http://secunia.com/product/6190/ DESCRIPTION: A vulnerability has been...

CVE-2005-3644

PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...

CVE-2005-3644

CVE-2005-3644 describes a memory exhaustion/DoS condition in the Windows Plug and Play (PnP) service. The issue arises in UPnP handling via RPC calls (PNP_GetDeviceList) in Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, where a remote attacker can request a large output bu...

CVE-2005-3644: Undefined Security Weakness

PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...

phpAdsNew XML-RPC Library Remote Code Injection

The remote host appears to be running phpAdsNew, an open source ad server written in PHP. The version of phpAdsNew installed on the remote host allows attackers to execute arbitrary PHP code subject to the privileges of the web server user id due to a flaw in its bundled XML-RPC library...

[SA17440] b2evolution XML-RPC PHP Code Execution Vulnerabilities

TITLE: b2evolution XML-RPC PHP Code Execution Vulnerabilities SECUNIA ADVISORY ID: SA17440 VERIFY ADVISORY: http://secunia.com/advisories/17440/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: b2evolution 0.x http://secunia.com/product/2126/ DESCRIPTION: Two...

Zope Installation Path Disclosure

The remote web server contains an application server that is prone to information disclosure. Description : There is a minor security problem in all releases of Zope prior to version 2.5.1b1 - they reveal the installation path when an invalid XML RPC request is sent. OpenVAS Vulnerability Test $I...

Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350)

An information disclosure and denial of service vulnerability exists when the RPC Runtime Library processes specially crafted messages. An attacker who successfully exploited this vulnerability could potentially read portions of active memory or cause the affected system to stop responding. OpenV...

Unchecked Buffer in XP Redirector (Q810577)

The remote host is vulnerable to a flaw in the RPC redirector which can allow a local attacker to run code of its choice with the SYSTEM privileges. OpenVAS Vulnerability Test $Id: smbntms03-005.nasl 6040 2017-04-27 09:02:38Z teissa $ Description: Unchecked Buffer in XP Redirector Q810577 Authors...

snmpXdmid overflow

The remote RPC service 100249 snmpXdmid is vulnerable to a heap overflow which allows any user to obtain a root shell on this host. OpenVAS Vulnerability Test $Id: snmpXdmid.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: snmpXdmid overflow Authors: Intranode Copyright: Copyright C 2001...

Detect the HTTP RPC endpoint mapper

This detects the http-rpc-epmap service by connecting to the port 593 and processing the buffer received. This endpoint mapper provides CIS COM+ Internet Services parameters like port 135 epmap for RPC. OpenVAS Vulnerability Test $Id: http-rpc-epmap.nasl 8023 2017-12-07 08:36:26Z teissa $...

Detect CIS ports

This detects the CIS ports by connecting to the server and processing the buffer received. CIS COM+ Internet Services are RPC over HTTP tunneling and requires IIS to operate. CIS ports shouldn SPDX-FileCopyrightText: 2005 Alert4Web.com Some text descriptions might be excerpted from a referenced...

Obtain list of all port mapper registered programs via RPC

This script calls the DUMP RPC on the port mapper, to obtain the list of all registered programs. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Nmap (NASL wrapper)

This plugin runs nmap to find open ports. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.14259";...

snmpXdmid overflow

The remote RPC service 100249 snmpXdmid is vulnerable to a heap overflow which allows any user to obtain a root shell on this host. SPDX-FileCopyrightText: 2001 Intranode Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...