SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

SNMPc Network Manager SNMP TRAP community string buffer overflow

Added: 07/21/2008 CVE: CVE-2008-2214 BID: 28990 OSVDB: 44885 Background SNMPc Network Manager is a distributed network management and monitoring solution. Problem A buffer overflow vulnerability in SNMPc Network Manager allows remote attackers to execute arbitrary commands by sending an SNMP TRAP...

Oracle Internet Directory 10.1.4 Remote Preauth DoS Exploit

Exploit for multiple platform in category dos / poc =========================================================== Oracle Internet Directory 10.1.4 Remote Preauth DoS Exploit =========================================================== !/usr/bin/python """ Oracle Internet Directory 10.1.4...

Oracle Database Server <= 10.1.0.2 Buffer Overflow Exploit

No description provided by source. / Advanced SQL Injection in Oracle databases Exploit for the buffer overflow vulnerability in procedure MDSYS.MD2.SDOCODESIZE of Oracle Database Server version 10.1.0.2 under Windows 2000 Server SP4. Fixes available at http://metalink.oracle.com. The exploit...

RealPlayer 10 ".smil" File Local Buffer Overflow Exploit

No description provided by source. / RealPlayer .smil file buffer overflow Coded by nolimit@CiSO & Buzzdee greets to COREiSO & news & flare & class101 & ESI & RVL & everyone else I forget This uses a seh overwrite method, which takes advantage of the SEH being placed in multiple locations over th...

Microsoft IIS 5.0 WebDAV拒绝服务漏洞(MS01-044)

CVE CAN ID : CAN-2001-0508 Microsoft IIS 5.0 WebDAV处理中存在一个拒绝服务漏洞，远程攻击者可以临时中断IIS 5.0服务。 WebDAV没有正确的处理特定类型的请求，特别是请求相当长而且其中包含某种 类型的无效数据时。这会导致内存访问错误，从而使得IIS 5.0进程中断。由于缺省情况 下，IIS 5.0会自动重启。因此这只会临时中断IIS服务。 Microsoft IIS 5.0 - Microsoft Windows 2000 厂商补丁： 微软已经为此发布了一个安全公告（MS01-044）以及相应补丁程序：...

MS00-049:Microsoft Office 脚本允许远程保存恶意文件

如果一个Web站点在web页面中嵌入恶意脚本,它调用一个Excel 2000或者PowerPoint文件， 当用户访问这个站点时可能导致一个远程文件可能是恶意的被保存到该用户的硬盘上。 Microsoft Excel 2000 Microsoft PowerPoint 2000 Microsoft PowerPoint 97.0 - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 - Microsoft Windows NT 2000 微软已经提供了补丁程序： Microsoft Excel...

Microsoft IE 5.01/5.5 DHTMLED远程文件读取漏洞

Microsoft IE 5.5/5.01中DHTMLED（动态HTML编辑控制）部分的实现存在安全问题。可能允许 一个恶意站点非法读取远程客户主机上的已知文件的内容。这种攻击也可以通过发送HTML格式的 邮件给那些使用Outlook的用户来实现。 动态HTML编辑控制是一种让IE具有WYSIWYG HTML编辑器功能的机制。然而DOM安全模型没有正确 处理通过DHTMLED来使用IFRAME的情况，导致IFRAME的内容可以被重定向到某个web server IFRAME可以被设置为从已知的本地文件读取。下面是一个例子代码： dh.DOM.all.I1.focus;...

Microsoft ISA Server H.323 Gatekeeper内存泄漏漏洞(MS01-045)

BUGTRAQ ID: 3196 CVECAN ID: CVE-2001-0546 Microsoft ISA Server中所带的一个服务：H.323 Gatekeeper存在一个拒绝服务漏洞，这 个服务支持"voice-over-IP"数据通过ISA防火墙传输。它包含一个内存泄漏问题，当发送 特定类型的畸形H.323数据时就会触发内存泄漏。如果攻击者持续发送大量的畸形数据， 就可以消耗大量的服务器内存，并使性能严重下降以至中止所有通过防火墙的通信。 Microsoft ISA Server 2000 - Microsoft Windows 2000...

Outlook Express 6 恶意附件保护绕过漏洞

BUGTRAQ ID: 3271 微软OutLook Express 6中带了一个新的安全特性，额可以阻止用户打开或者保存可能有 害的附件。 然而，这个特性存在一个漏洞。攻击者可以通过在邮件中嵌入一个frame来绕过上述保护。 当攻击者在frame中嵌入一个".exe"或者“.bat"文件时，如果用户试图打开这个文件，恶 意程序可能被执行。用户也可以将其保存在硬盘上。 Microsoft Outlook Express 6.0 - Microsoft Windows ME - Microsoft Windows 98se - Microsoft Windows 98 - Microsof...

MS00-020:Windows 2000 Windows Station 非法访问漏洞

如果用户本地登录到一台Windows 2000机器，在某些特定条件下，可以获得对其他用户的widnows stations进程的访问权限。这个问题将允许一个低级别的用户的进程看到同一个session中另外一 个桌面的输入或输出数据，这可能包含口令等敏感信息。 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server - Microsoft Windows 2000 Advanced Server 微软已经发布了一个相应的补丁程序，您可以在下列地址下载： -...

Microsoft Internet Explorer New ActiveX对象字符串串联内存破坏漏洞

BUGTRAQ ID: 30219 CNCAN ID：CNCAN-2008071510 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer new ActiveX对象处理存在内存破坏，远程攻击者可以利用漏洞对程序进行拒绝服务攻击，可能导致任意代码执行。 构建使用New ActiveX对象字符串的串联，当Internet Explorer解析时可导致应用程序崩溃，通过使用Javascript aka heapspray填充内存的方法可控制堆，导致以应用程序权限执行任意指令。 Microsoft...

Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing (953230)

Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing 953230 Published: July 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the Windows Domain Name System DNS that could allo...

Design/Logic Flaw

Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache...

Microsoft SQL Server Convert Function Remote Memory Corruption Vulnerability

Description Microsoft SQL Server is prone to a remote memory-corruption vulnerability because it fails to perform adequate boundary checks on user-supplied input. Authenticated attackers can exploit this issue to execute arbitrary code and completely compromise affected computers. Failed attacks...

Microsoft Word Malformed Record Value Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Successful attacks may allow arbitrary malicious code to run in the context of the user running the application. Failed attack attempts may result in a crash. Reports indicate that this issue affects Microsoft Office XP...

CVE-2008-1454: Undefined Security Weakness

Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache...

CVE-2008-0086: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine MSDE 2000 SP4, and 2000 Desktop Engine WMSDE allows remote authenticated users to execute arbitrary code via a crafted SQL expression...

Microsoft SQL Server Memory Page Reuse Information Disclosure Vulnerability

Description Microsoft SQL Server is prone to an information-disclosure vulnerability caused by a memory-reallocation flaw. An attacker with operator access may leverage this issue to obtain potentially sensitive information that could aid in further attacks. Technologies Affected Microsoft Data...