PT-2008-1742 · Microsoft · Windows Server 2003 +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A spoofing issue exists in the Windows DNS client, allowing unauthenticated attackers to send malicious responses to DNS requests, thereby spoofing or redirecting Internet...

Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020)

Hello BugTraq, The Microsoft Windows DNS stub resolver the component in Windows that queries the upstream DNS server for address resolutions on behalf of most Windows programs, e.g. browsers sends predictable DNS queries with respect to DNS transaction ID and source UDP port. This allows some...

Microsoft Windows Kernel Usermode Callback Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. The vulnerability resides in the Windows kernel. A locally logged-in user can exploit this issue to gain kernel-level access to the operating system. Technologies Affected Avaya Messaging Application Server Avay...

Microsoft Windows GDI 'CreateDIBPatternBrushPt' Function Heap Overflow Vulnerability

Description Microsoft Windows is prone to a heap-based overflow vulnerability that resides in the GDI graphics library and can be triggered by a malformed EMF or WMF image file. A successful exploit of this vulnerability can allow a remote attacker to completely compromise the affected computer...

PT-2008-2681 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4 through Server 2008 Description: A heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed...

Microsoft Security Bulletin MS08-020 – Important Vulnerability in DNS Client Could Allow Spoofing (945553)

Microsoft Security Bulletin MS08-020 – Important Vulnerability in DNS Client Could Allow Spoofing 945553 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability. This spoofing vulnerability exists in Windows DNS...

CVE-2008-0083: Improper Control of Generation of Code

The 1 VBScript VBScript.dll and 2 JScript JScript.dll scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2008-0087: Use of Insufficiently Random Values

The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses...

Cisco Secure ACS UCP CSuserCGI.exe buffer overflow

Added: 04/07/2008 CVE: CVE-2008-0532 BID: 28222 OSVDB: 42961 Background Cisco Secure Access Control Server ACS is a centralized user access control framework which can be used with routers, switches, firewalls, VPNs, and other devices. User Changeable Passwords UCP, a utility implemented by Cisco...

Cisco Secure ACS UCP CSuserCGI.exe buffer overflow

Added: 04/07/2008 CVE: CVE-2008-0532 BID: 28222 OSVDB: 42961 Background Cisco Secure Access Control Server ACS is a centralized user access control framework which can be used with routers, switches, firewalls, VPNs, and other devices. User Changeable Passwords UCP, a utility implemented by Cisco...

Computer Associates Alert Notification Buffer Overflow

This module exploits a buffer overflow in Computer Associates Threat Manager for the Enterprise r8.1 By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. In order to successfully exploit this vulnerability, you will need valid logon...

noticeware-dos.txt

NoticeWare Email Server Application: Noticeware Email Server Version: 4.6.1.0 NoticeWare Email Server Bugs: Denial Of Service/ Remote Crash Exploitation: Remote Date: 1st April 2008 Author: Ray Email: [email protected] Platforms: Tested on XP/2003 Taken from :...

Noticeware Email Server 4.6.1.0 - Denial of Service

Noticeware Email Server 4.6.1.0 - Denial of Service NoticeWare Email Server Application: Noticeware Email Server Version: 4.6.1.0 NoticeWare Email Server Bugs: Denial Of Service/ Remote Crash Exploitation: Remote Date: 1st April 2008 Author: Ray Email: [email protected] Platforms: Tested on...

Noticeware Email Server 4.6.1.0 - Denial of Service

NoticeWare Email Server Application: Noticeware Email Server Version: 4.6.1.0 NoticeWare Email Server Bugs: Denial Of Service/ Remote Crash Exploitation: Remote Date: 1st April 2008 Author: Ray Email: [email protected] Platforms: Tested on XP/2003 Taken from :...

Quick FTP Pro 2.1 Transfer-Mode Overflow

This module exploits a stack buffer overflow in the Quick TFTP Pro server product. MS Update KB926436 screws up the opcode address being used in oledlg.dll resulting in a DoS. This is a port of a sploit by Mati "muts" Aharoni. Module Options msf use exploit/windows/tftp/quick/tftppromode msf...

My Web Doc 2000 Administration Pages - Multiple Authentication Bypass Vulnerabilities

source: https://www.securityfocus.com/bid/28400/info My Web Doc is prone to multiple authentication-bypass vulnerabilities. Attackers can leverage these issues to compromise the application, which could aid in other attacks. My Web Doc 2000 Final is vulnerable; other versions may also be affected...

VMWare applications multiple security vulnerabilities

Host to guest shared folder HGFS directory traversal, named pipes privileg e escalation, Windows 2000 privilege escalation, DHCP service DoS, configuration file privilege escalation, memory corruption...

netwin-list.txt

!/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows Platform Tested on OS : Windows 2000 SP4 English Windows XP Sp2 Englis...

Microsoft Office单元格标注解析内存破坏漏洞（MS08-016）

BUGTRAQ ID: 28146 CVECAN ID: CVE-2008-0118 Microsoft Office是非常流行的办公软件套件。 Office处理特制Office文件的方式存在内存分配错误，如果用户受骗打开了畸形文件的话，就可能导致执行任意指令。 Microsoft Office XP SP3 Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pack 2 Microsoft Office 2000 SP3 临时解决方法： 在打开未知或不可信任来源的文件时，使用Microsoft...

NetWin Surgemail 3.8k4-4 - IMAP (Authenticated) Remote LIST Universal

NetWin Surgemail 3.8k4-4 - IMAP Authenticated Remote LIST Universal !/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows...