CVE-2005-3644: Undefined Security Weakness

PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...

CVE-2005-2117: Undefined Security Weakness

Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code...

CVE-2005-2120: Undefined Security Weakness

Stack-based buffer overflow in the Plug and Play PnP service UMPNPMGR.DLL in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" backslash characters in a registry key name, which triggers the overflow i...

CVE-2005-1985: Undefined Security Weakness

The Client Service for NetWare CSNW on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages...

Savant Web Server 3.1 - Remote Buffer Overflow (2)

!/usr/local/bin/perl Savant Buffer Overflow Exploit ---------------------------------- Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com Vendor URL: http://savant.sourceforge.net $ARGC=@ARGV; if $ARGC !=3 print "\nUsage: $0 remote IP Port\n"; print...

Microsoft Windows Plug-and-Play Service - Remote Universal (Spanish) (MS05-039)

Microsoft Windows Plug-and-Play Service - Remote Universal Spanish MS05-039 / HOD-ms05039-pnp-expl-spanish.c 25.Aug.2005 Very slightly modified version by Roman Medina Tested on Win2k SP4 Spanish. Original credits & comments follow. / / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c...

Microsoft Windows Plug-and-Play Service - Remote Universal (MS05-039)

Microsoft Windows Plug-and-Play Service - Remote Universal MS05-039 / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::...

MS Windows Plug-and-Play Service Remote Universal Expl (MS05-039)

Exploit for unknown platform in category remote exploits ==================================================================== MS Windows Plug-and-Play Service Remote Universal Exploit MS05-039 ==================================================================== / HOD-ms05039-pnp-expl.c: 2005-08-1...

Remote File Explorer <= 1.0 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================== Remote File Explorer \n"; print "Example: $0 127.0.0.1\n"; exit; use Socket; my$remote,$port,$iaddr,$paddr,$proto; $remote=$ARGV0; $port = "1001"; default port for the server $iaddr =...

Microsoft Windows Message Queuing - Remote Buffer Overflow Universal (MS05-017) (v.0.3)

Microsoft Windows Message Queuing - Remote Buffer Overflow Universal MS05-017 v.0.3 / HOD-ms05017-msmq-expl.c: 2005-06-28: PUBLIC v.0.3 Copyright c 2004-2005 houseofdabus. MS05-017 Message Queuing Buffer Overflow Vulnerability Universal Exploit .:: houseofdabus ::...

[EXPL] TCP-IP Datalook DoS Vulnerability &#40;Exploit&#41;

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

TCP-IP Datalook &lt;= 1.3 Local Denial of Service Exploit

No description provided by source. / IP-DATALOOK Local DoS Exploit --------------------------------- INFGP - Hacking&security Research Resolve host...OK + Connecting...OK Target locked Sending bad procedure...OK Server Disconnected! Tested on Windows2000 SP4 Infos: infamous.2hell.com /...

WheresJames Webcam Publisher Beta 2.0.0014 - Remote Buffer Overflow

WheresJames Webcam Publisher Beta 2.0.0014 - Remote Buffer Overflow / WheresJames Webcam Publisher Beta 2.0.0014 POC www.wheresjames.com Bug and Exploit by : Miguel Tarascó Acuña - Haxorcitos.com 2005 Tarako AT gmail.com - Tarako AT Haxorcitos.com Platforms tested: - Windows 2000 SP4 Spanish -...

Microsoft Windows Server 2000 - WINS Remote Code Execution

Microsoft Windows Server 2000 - WINS Remote Code Execution // / ZUCWins 0.1 - Wins 2000 remote root exploit / / Exploit by: zuc / / works on Windows 2000 SP3/SP4 probably every language / // include include include include include include include include include include include include include...

CVE-2003-0906: Undefined Security Weakness

Buffer overflow in the rendering for 1 Windows Metafile WMF or 2 Enhanced Metafile EMF image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image...

MS04-007 Microsoft ASN.1 Library Bitstring Heap Overflow

This is an exploit for a previously undisclosed vulnerability in the bit string decoding code in the Microsoft ASN.1 library. This vulnerability is not related to the bit string vulnerability described in eEye advisory AD20040210-2. Both vulnerabilities were fixed in the MS04-007 patch. Windows...

CVE-2003-0662: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Troubleshooter ActiveX Control Tshoot.ocx in Microsoft Windows 2000 SP4 and earlier allows remote attackers to execute arbitrary code via an HTML document with a long argument to the RunQuery2 method...

CVE-2003-0605: Undefined Security Weakness

The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service crash, and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the RemoteGetClassObject interface that cause a NULL pointer to be passed to th...

CVE-2003-0496: Undefined Security Weakness

Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xpfileexist extended stored procedure with a named pipe as an argument instead of a normal file...