Microsoft IIS 5.0/6.0 FTP Server (Windows 2000) - Remote Stack Overflow

IIS 5.0 FTPd / Remote r00t exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2googlemail.com Affects IIS6 with stack cookie protection August 2009 - KEEP THIS 0DAY PRIV8 use IO::Socket; $|=1; metasploit shellcode, adduser "winown:nwoniw" $sc =...

CA Antivirus Engine CAB Buffer Overflow

This module exploits a stack buffer overflow in CA eTrust Antivirus 8.1.637. By creating a specially crafted CAB file, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

Novell Client for Windows 2000XP - ActiveX Remote Denial of Service

Novell Client for Windows 2000XP - ActiveX Remote Denial of Service Application: Novell Client for Windows 2000 and XP Platforms: Windows XP Professional French SP2 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2...

Novell Client for Windows 2000/XP - ActiveX Remote Denial of Service

Application: Novell Client for Windows 2000 and XP Platforms: Windows XP Professional French SP2 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction...

NaviCopa Web Server 3.01 Remote Buffer Overflow Exploit

No description provided by source. / navicpntxp1.c NaviCopa Web Server 3.01 Remote Buffer Overflow Exploit Cresit : http://milw0rm.com/exploits/7966 Thanks To: e.wiZz! Coded by : SimO-s0fT Madridista ; E-mail : OverflowsatHotmaildotcom Tested on Windows XP SP2 Francais , Win2k SP4 english Example...

NaviCOPA Web Server 3.01 - Remote Buffer Overflow

/ navicpntxp1.c NaviCopa Web Server 3.01 Remote Buffer Overflow Exploit Cresit : http://milw0rm.com/exploits/7966 Thanks To: e.wiZz! Coded by : SimO-s0fT Madridista ; E-mail : OverflowsatHotmaildotcom Tested on Windows XP SP2 Francais , Win2k SP4 english Example : C:\Documents and...

Windows WINS Attacks In The Wild

The “critical” WINS vulnerability that Microsoft issued a patch for last week is now being exploited actively in the wild, according to the SANS Institute sans.org. The Internet Storm Center ISC, which is operated by SANS, is receiving preliminary reports that hackers are targeting Microsoft’s WI...

Mandrake Security Advisory MDVSA-2009:164 (jasper)

The remote host is missing an update to jasper announced via advisory MDVSA-2009:164. OpenVAS Vulnerability Test $Id: mdksa2009164.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:164 jasper Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Design/Logic Flaw

The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka "Telnet Credential Reflectio...

Heap overflow

Heap-based buffer overflow in the Windows Internet Name Service WINS component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow...

Null pointer dereference

The Message Queuing aka MSMQ service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MS...

CVE-2009-1922

The Message Queuing aka MSMQ service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MS...

Integer overflow

Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, ...

CVE-2009-1534

CVE-2009-1534 : Buffer overflow in the Office Web Components ActiveX Control used by Microsoft Office Web Components across multiple products (Office XP/2000 Web Components SP3, BizTalk Server 2002, Visual Studio .NET 2003 SP1) enables remote code execution via crafted property values. The issue ...

ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability

ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-053 August 11, 2009 -- CVE ID: CVE-2009-1923 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows 2003 SP2 Microsoft Windows 2000 SP4 -- TippingPointTM IPS...

Microsoft Windows Telnet NTLM凭据反射绕过认证漏洞（MS09-042）

BUGTRAQ ID: 35993 CVECAN ID: CVE-2009-1930 Microsoft Windows是微软发布的非常流行的操作系统。 Telnet协议未正确地选择加入NTLM凭据反射保护以确保用户凭据不被反射回来并供用户使用。如果用户受骗连接到了恶意的Telnet服务器，就可能导致反射NTLM凭据并以当前用户的权限获得系统访问。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windo...

[PT-2008-09] Microsoft Windows MSMQ Privilege Escalation Vulnerability

---------------------------------------------------------------------- PT-2008-09 Positive Technologies Security Advisory Microsoft Windows MSMQ Privilege Escalation Vulnerability ---------------------------------------------------------------------- --- Affected Software Microsoft Windows 2000...

MS09-039: Vulnerabilities in WINS Could Allow Remote Code Execution (969883)

The remote host has a Windows WINS server installed. The remote version of this server contains two vulnerabilities that may allow an attacker to execute arbitrary code on the remote system : - A heap overflow vulnerability can be exploited by any attacker. - A integer overflow vulnerability can ...

Microsoft Security Bulletin MS09-039 - Critical Vulnerabilities in WINS Could Allow Remote Code Execution (969883)

Microsoft Security Bulletin MS09-039 - Critical Vulnerabilities in WINS Could Allow Remote Code Execution 969883 Published: August 11, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the Windows Internet Name Service...

Microsoft Active Template Library Object Type Mismatch Remote Code Execution Vulnerability

Description The Microsoft Active Template Library is prone to a remote code-execution vulnerability. NOTE: This issue affects a private version of the ATL used internally by Microsoft; components written by other vendors are likely unaffected. Remote attackers can exploit this issue to execute...