MS06-070 Microsoft Workstation Service NetpManageIPCConnect Overflow

This module exploits a stack buffer overflow in the NetApi32 NetpManageIPCConnect function using the Workstation service in Windows 2000 SP4 and Windows XP SP2. In order to exploit this vulnerability, you must specify the name of a valid Windows DOMAIN. It may be possible to satisfy this conditio...

BrightStor ARCserve Message Engine RPC server buffer overflow

Added: 11/09/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29535 Background The BrightStor ARCserve Backup family of products includes a Message Engine which listens for connections on port 6503/TCP. Problem A buffer overflow in the ASCORE.dll library allows remote attackers to execute arbitrary...

BrightStor ARCserve Message Engine RPC server buffer overflow

Added: 11/09/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29535 Background The BrightStor ARCserve Backup family of products includes a Message Engine which listens for connections on port 6503/TCP. Problem A buffer overflow in the ASCORE.dll library allows remote attackers to execute arbitrary...

Omni-NFS Server Buffer Overflow

This module exploits a stack buffer overflow in Xlink Omni-NFS Server 5.2 When sending a specially crafted nfs packet, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/nfs/xlink/nfsd msf undefinednfsd show actions ...actions... msf undefinednfsd set ACTION...

Microsoft Windows XML核心服务XSLT缓冲区溢出漏洞（MS06-061）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的XML核心服务在处理MSXML中可扩展样式表语言转换（XSLT）控件时存在字符串缓冲区溢出漏洞，成功利用此漏洞的攻击者可以完全控制受影响的系统。 攻击者可以通过建立恶意网页来利用此漏洞，如果用户访问该页面，即有可能允许远程执行指令。 Microsoft Office 2003 Service Pack 2 Microsoft Office 2003 Service Pack 1 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft...

WS_FTP LE 5.08 (PASV response) Remote Buffer Overflow Exploit

No description provided by source. / wsexp.c WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 [email protected] Tested on XP SP2 Polish, 2000 SP4 Polish Example: C:\wsexp 1 192.168.0.1 4444 WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 [email protected] +...

NaviCOPA Web Server 2.01 0day Remote Buffer Overflow Exp

No description provided by source. / naviexp.c NaviCOPA Web Server 2.01 0day Remote Buffer Overflow Exploit Coded by h07 [email protected] Tested on XP SP2 Polish, 2000 SP4 Polish Example: C:\naviexp 192.168.0.1 0 NaviCOPA Web Server 2.01 0day Remote Buffer Overflow Exploit Coded by h07 h07@interia....

BulletProof FTP Client 2.45 Remote Buffer Overflow Exploit (PoC)

Exploit for unknown platform in category remote exploits ================================================================ BulletProof FTP Client 2.45 Remote Buffer Overflow Exploit PoC ================================================================ !/usr/bin/python BulletProof FTP Client V2.45...

BulletProof FTP Client 2.45 - Remote Buffer Overflow

BulletProof FTP Client 2.45 - Remote Buffer Overflow !/usr/bin/python BulletProof FTP Client V2.45 0day Buffer Overflow PoC Exploit Vendor URL: http://www.bpftp.com/ Bug discovered by h07 Shellcode type: Windows Execute Command calc.exe thx metasploit.com Tested on 2000 SP4 Polish Details: buffer...

CVE-2006-4696: Improper Control of Generation of Code

Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka "SMB Rename Vulnerability."...

CA BrightStor ARCserve Message Engine Heap Overflow

This module exploits a heap overflow in Computer Associates BrightStor ARCserve Backup 11.5. By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. Module Options msf use exploit/windows/brightstor/message/engineheap msf undefinedengineheap...

NaviCOPA Web Server 2.01 - GET Remote Buffer Overflow

NaviCOPA Web Server 2.01 - GET Remote Buffer Overflow / naviexp.c NaviCOPA Web Server 2.01 0day Remote Buffer Overflow Exploit Coded by h07 Tested on XP SP2 Polish, 2000 SP4 Polish Example: C:\naviexp 192.168.0.1 0 NaviCOPA Web Server 2.01 0day Remote Buffer Overflow Exploit Coded by h07 + Sendin...

WS_FTP LE 5.08 (PASV response) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= WSFTP LE 5.08 PASV response Remote Buffer Overflow Exploit ============================================================= / wsexp.c WSFTP LE 5.08 PASV response 0day buffer overflo...

Ipswitch WS_FTP LE 5.08 - PASV Response Remote Buffer Overflow

/ wsexp.c WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 Tested on XP SP2 Polish, 2000 SP4 Polish Example: C:\wsexp 1 192.168.0.1 4444 WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 + Listening on 21 + Connection accepted from 192.168.0.3 + Client...

Immunity Canvas: IMAIL_RCPTOVERFLOW

Name| imailrcptoverflow ---|--- CVE| CVE-2006-4379 Exploit Pack| CANVAS Description| IMail SMTPD32 Stack Overflow Notes| CVE Name: CVE-2006-4379 VENDOR: IPSwitch Post-exploitaion: Post-exploitation requires stoping and starting the IMail SMTP Server Service From a different process use...

CVE-2006-3444

Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an "unchecked buffer."...

CVE-2006-3440: Undefined Security Weakness

Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."...

CVE-2006-3439: Undefined Security Weakness

Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314...

CVE-2006-3443: Undefined Security Weakness

Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gain privileges via a malicious DLL in the UserProfile directory, aka "User Profile Elevation of Privilege Vulnerability."...

CVE-2006-3441: Undefined Security Weakness

Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple...