Oracle TNS Listener AUTH_SESSKEY Buffer Overflow.

$Id: tnsauthsesskey.rb 8183 2010-01-21 00:30:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Oracle 10gR2 TNS Listener AUTH_SESSKEY Buffer Overflow

This module exploits a stack buffer overflow in Oracle. When sending a specially crafted packet containing a long AUTHSESSKEY value to the TNS service, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

Oracle Network Authentication CVE-2009-1979 Remote Buffer Overflow

Exploit for unknown platform in category remote exploits ================================================================================ Oracle Network Authentication CVE-2009-1979 Remote Buffer Overflow Vulnerability ==============================================================================...

Oracle Database Server Network Authentication AUTH_SESSKEY Buffer Overflow (CVE-2009-1979)

Oracle Database Server is an enterprise-level relational database application suite. A buffer overflow vulnerability exists in the Oracle Database server, the vulnerability is due to an error in the Oracle Database server that fails to sufficiently validate the length field of the AUTHSESSKEY...

CVE-2009-1979

creationtimestamp| type| source ---|---|--- 2009-10-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9905 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16342 2018-05-29 15:50:33+00:00| seen|...

CVE-2009-1979

CVE-2009-1979 concerns a buffer overflow in Oracle Database Server Network Authentication (AUTH_SESSKEY) on Oracle 10.1.0.5 and 10.2.0.4. The vulnerability arises from insufficient validation of the AUTH_SESSKEY length, allowing a remote attacker to send crafted packets that may lead to arbitrary...

CVE-2008-1979

The CVE-2008-1979 issue affects CA ARCserve Backup Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier. A remote attacker can trigger a denial-of-service (crash) by sending a crafted packet that uses a large integer in an increment to TCP port 41523, resulting in a buffer o...

CVE-2008-1979

creationtimestamp| type| source ---|---|--- 2008-04-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31707...

CVE-2007-1979

CVE-2007-1979 refers to an SQL injection in the PopnupBlog module for XOOPS (index.php) up to version 2.52 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the postid parameter, potentially involving get_blogid_from_postid in class/PopnupBlogUtils.php. ...

CVE-2006-1979

CVE-2006-1979 is a Cross-site Scripting (XSS) vulnerability in mwguest.php of Manic Web MWGuest 2.1.0. The flaw allows remote attackers to inject arbitrary web script or HTML via the homepage parameter. Connected documents confirm the affected component and vulnerability class but do not provide ...

CVE-2005-1979

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service MSDTC service exception and exit via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol TIP functionality...

CVE-2005-1979

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service MSDTC service exception and exit via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol TIP functionality...

CVE-2005-1979

CVE-2005-1979 affects the Microsoft Distributed Transaction Coordinator (MSDTC) TIP handling. A denial-of-service can occur when a remote attacker sends a crafted TIP message, potentially terminating MSDTC and affecting dependent services. The issue is mitigated by MS05-051 updates across Windows...

CVE-2004-1979

Summary: The CVE-2004-1979 entry describes a stored/ reflected cross-site scripting (XSS) vulnerability in the PROPS 0.6.1 product, specifically in the do_search.php script. The issue is triggered via the search_string parameter, enabling remote attackers to inject arbitrary HTML or web script. T...