Ipswitch WS_FTP LE 5.08 - PASV Response Remote Buffer Overflow

/ wsexp.c WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 Tested on XP SP2 Polish, 2000 SP4 Polish Example: C:\wsexp 1 192.168.0.1 4444 WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 + Listening on 21 + Connection accepted from 192.168.0.3 + Client...

MDaemon WorldClient form2raw.cgi From buffer overflow

Added: 09/18/2006 CVE: CVE-2003-1200 BID: 9317 OSVDB: 3255 Background MDaemon is an e-mail server product for Windows. It includes a web mail component called WorldClient. Problem A buffer overflow in MDaemon WorldClient allows remote command execution by sending a web request for the form2raw.cg...

MDaemon WorldClient form2raw.cgi From buffer overflow

Added: 09/18/2006 CVE: CVE-2003-1200 BID: 9317 OSVDB: 3255 Background MDaemon is an e-mail server product for Windows. It includes a web mail component called WorldClient. Problem A buffer overflow in MDaemon WorldClient allows remote command execution by sending a web request for the form2raw.cg...

MDaemon WorldClient form2raw.cgi From buffer overflow

Added: 09/18/2006 CVE: CVE-2003-1200 BID: 9317 OSVDB: 3255 Background MDaemon is an e-mail server product for Windows. It includes a web mail component called WorldClient. Problem A buffer overflow in MDaemon WorldClient allows remote command execution by sending a web request for the form2raw.cg...

MS03-026 Microsoft RPC DCOM Interface Overflow

This module exploits a stack buffer overflow in the RPCSS service, this vulnerability was originally found by the Last Stage of Delirium research group and has been widely exploited ever since. This module can exploit the English versions of Windows NT 4.0 SP3-6a, Windows 2000, Windows XP, and...

CVE-2006-4796

Cross-site scripting XSS vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter strtopicsortord variable...

CVE-2006-4796

CVE-2006-4796 is an XSS vulnerability in Snitz Forums 2000 3.4.06, exploitable via the sortorder parameter (strtopicsortord) in forum.asp. Remote attackers can inject arbitrary script or HTML. The provided documents do not include exploit code, specific root-cause details beyond the input paramet...

CVE-2000-1241

Technical details for CVE-2000-1241 are not publicly available in the provided documents; no affected products, impact, or remediation are disclosed. Monitor for updates.

Microsoft IIS ISAPI w3who.dll Query String Overflow

This module exploits a stack buffer overflow in the w3who.dll ISAPI application. This vulnerability was discovered Nicolas Gregoire and this code has been successfully tested against Windows 2000 and Windows XP SP2. When exploiting Windows XP, the payload must call RevertToSelf before it will be...

MS01-033 Microsoft IIS 5.0 IDQ Path Overflow

This module exploits a stack buffer overflow in the IDQ ISAPI handler for Microsoft Index Server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MS01-033 Microsoft IIS 5.0 IDQ Path Overflow',...

JVN#52201480 Microsoft Windows Indexing Service cross-site scripting vulnerability

Impact If the Indexing Service in Internet Information Services IIS provides search capabilities, an arbitrary script could be executed on the user's web browser. Solution Products Affected Windows 2000 Windows XP Windows 2000 Server Windows Server 2003...

Snitz Forums 2000 - forum.asp Cross-Site Scripting

Snitz Forums 2000 - forum.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/20004/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This could allow an attacker to steal cookie-based authenticatio...

Snitz Forums 2000 - 'forum.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20004/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This could allow an attacker to steal cookie-based authentication credentials and launch other attacks. Version...

FutureSoft TFTP Server 2000 Transfer-Mode Overflow

This module exploits a stack buffer overflow in the FutureSoft TFTP Server 2000 product. By sending an overly long transfer-mode string, we were able to overwrite both the SEH and the saved EIP. A subsequent write-exception that will occur allows the transferring of execution to our shellcode via...

eIQNetworks ESA License Manager LICMGR_ADDLICENSE Overflow

This module exploits a stack buffer overflow in eIQnetworks Enterprise Security Analyzer. During the processing of long arguments to the LICMGRADDLICENSE command, a stack-based buffer overflow occurs. This module has only been tested against ESA v2.1.13. This module requires Metasploit:...

Preemptive Protection Against Zero-Day Vulnerability in Microsoft Word 2000 (925059)

A zero-day code execution vulnerability exists in Microsoft Word 2000. To exploit this vulnerability, a remote attacker must convince a user to open a maliciously crafted Word document that contains a Trojan horse referred to as Trojan.Mdropper.Q...

Microsoft Security Bulletin MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (910729)

Microsoft Security Bulletin MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution 910729 Published: September 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Publisher Impact of Vulnerability: Remote Code Execution Maximum Severit...

Microsoft Publisher Font Parsing Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a code-execution vulnerability. This is due to a flaw when handling malformed PUB files. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context of targeted users. Technologies Affected ...

Mercur MailServer 5.0 SP3 - IMAP Remote Buffer Overflow (2)

Mercur MailServer 5.0 SP3 - IMAP Remote Buffer Overflow 2 !/usr/bin/perl Tested on Windows 2k Sp4 Italian and English version and Win XP Pro SP2 Italian and English version Perl script based on Sami FTP server remote exploit by Critical Security https://www.securityfocus.com/bid/17138 acaro at...

Immunity Canvas: IMAIL_RCPTOVERFLOW

Name| imailrcptoverflow ---|--- CVE| CVE-2006-4379 Exploit Pack| CANVAS Description| IMail SMTPD32 Stack Overflow Notes| CVE Name: CVE-2006-4379 VENDOR: IPSwitch Post-exploitaion: Post-exploitation requires stoping and starting the IMail SMTP Server Service From a different process use...