217 matches found
MS Windows IIS Unicode Remote Transversal Bug (4)
No description provided by source. !/usr/bin/perl See http://www.securityfocus.com/vdb/bottom.html?section=exploit&vid=1806 Very simple PERL script to execute commands on IIS Unicode vulnerable servers Use port number with SSLproxy for testing SSL sites Usage: unicodexecute2 IP:port command Only...
Really the dir-overflow-vulnerability warning-the black bar safety net
Just in CN. Tink there to see, ha ha, fun! I tried the following, screenshot as follows: ! /Article/UploadPic/2006-10/20061023103110897.jpg Windows Command Processor CMD.EXE Buffer Overflow Execute the following line in cmd.exe copy-paste.. tested on winxp sp2 fully patched on 2006/10/06/17. 5 6 ...
In the WEBSHELL, the clever use of file sharing to perform system commands-bug warning-the black bar safety net
Article author: pt007 （article is very concise, but make it so difficult Recently in the invasion of Win2003 when found default case not use the system comes with the cmd. exe files to execute system commands, upload the cmd. exe file because the file is too big to fail, then I pass a station...
In the WEBSHELL, the clever use of file sharing to perform system commands-bug warning-the black bar safety net
Recently in the invasion of Win2003 when found default case not use the system comes with the cmd. exe files to execute system commands, upload the cmd. exe file because the file is too big to fail, then I pass a station adjacent to the machine's file share successfully upload the cmd. exe file,...
With QQ file sharing vulnerabilities to completely compromise Windows2003 sturdy fortress-bug warning-the black bar safety net
On the server running the third party software historically, it is the attacker who is regarded as the invasion of the target system shortcut. Now, the famous Tencent QQ has been included in these shortcut list, but the QQ is not the server the necessary software, so that will not cause a wide...
Platinum Secure smartcard security bypass
======================================================== - Platinum Secure Smart Card security bypass technique - ======================================================== Vendor: http://360degreeweb.com Vendor informed: nope...but Acer were Impact : pretty high Vulnerable Systems ----------------...
BakBone NetVault 7.1 - Local Privilege Escalation
// ===== Start UnhideNetVaultServiceWindow.c ====== include include int main void HWND hWnd; char szWindowName = "C:\Program Files\BakBone Software\NetVault\bin\nvstatsmngr.exe"; printf "Finding window %s\n", szWindowName ; hWnd = FindWindow NULL, szWindowName ; if hWnd == NULL printf "ERROR!...
Microsoft Windows - JPEG GDI+ Overflow Shellcode
// launch a local cmd.exe not bound to the net... // GDI+ buffer overrun exploit by FoToZ // NB: the headers here are only sample headers taken from a .JPG file, // with the FF FE 00 01 inserted in header1. // Sample shellcode is provided // You can put approx. 2500 bytes of shellcode...who needs...
OllyDbg 1.10 - Format String
// Exploit opens a new cmd.exe.Tested on win2ken+sp4en+ollydbg v1.09d // Open exploit with ollydebug and run the exploit from ollydebugF9 key. // Coded by Ahmet Cihana.k.a. hurby // Thanx to r3db4r0n, Murat Erdo??ana.k.a. Stormwr, Onur Cihana.k.a.eurnie and 3710336, Orhan Tun????z and Mehmet Yaku...
CVE-2003-1407
Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command...
Microsoft Windows NT2000 - cmd.exe CD Buffer Overflow (PoC)
Microsoft Windows NT2000 - cmd.exe CD Buffer Overflow PoC source: https://www.securityfocus.com/bid/6829/info The Windows NT and 2000 command prompt cmd.exe does not properly handle paths containing more than 256 characters. If the cd change directory command is used to change to a subdirectory...
SECURITY.NNOV: Windows NT 4.0/2000 cmd.exe long path buffer overflow/DoS
Title: Buffer overflow/DoS against cmd.exe for Windows NT 4.0/2000 Affected: Microsoft Windows NT 4.0 buffer overflow Microsoft Windows 2000 DoS Vendor: Microsoft Risk: Average for Windows NT 4.0 Low for Windows 2000 Exploitable: Yes Remote: No Vendor Notified: January, 30 2003 I. Intro cmd.exe i...
Microsoft Windows NT/2000 - 'cmd.exe' CD Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/6829/info The Windows NT and 2000 command prompt cmd.exe does not properly handle paths containing more than 256 characters. If the cd change directory command is used to change to a subdirectory resulting in a path with more than 256 characters, a buffer...
Buffer overflow/DoS against cmd.exe for Windows NT 4.0/2000
Title: Buffer overflow/DoS against cmd.exe for Windows NT 4.0/2000 Author: ZARAZA Affected: Microsoft Windows NT 4.0 buffer overflow Microsoft Windows 2000 DoS Vendor: Microsoft Risk: Average for Windows NT 4.0 Low for Windows 2000 Exploitable: Yes Remote: No Vendor Notified: January, 30 2003 I...
Possible problems with patch for MS00-086
A recent report http://www.securityfocus.com/archive/1/147109 suggests that; http://IISServer/scripts/somefile.bat/..C19C..C19C..C19Cwinnt/system32 /cmd.exe?/c20dir20C: wrapped might yield a directory listing on IIS 5.0 boxes that have applied the fix listed in Microsoft Security Bulletin MS00-08...
CVE-2000-0331
CVE-2000-0331 affects Microsoft CMD.EXE on Windows NT and Windows 2000. The vulnerability is a buffer overflow caused by a long environment variable, enabling a local user to cause a denial of service. The available documents provide the root cause and impact but do not specify a remediation or p...
Microsoft Windows 95/98/NT 4.0 - Help File Backdoor
source: https://www.securityfocus.com/bid/868/info The help files for the Windows Help system .cnt, .hlp can be edited so that they run an arbitrary executable when selected by a user. The executable will run at the privelege level of the user. The .cnt files are like tables of contents that tell...