CVE-2004-0894

CVE-2004-0894 is a local elevation-of-privilege issue in LSASS on Microsoft Windows 2000 Server and Windows Server 2003. The vulnerability stems from incomplete validation of connection information by LSASS, allowing a locally authenticated user to gain complete control of the system by running a...

CVE-2004-0893

This CVE describes two privilege-elevation flaws in Windows components from 2004: (1) the Local Procedure Call (LPC) interface in the Windows kernel fails to validate message lengths, enabling a locally-authenticated attacker to gain full control; and (2) LSASS validates identity tokens improperl...

Microsoft Windows WINS Name Value Handling Remote Buffer Overflow Vulnerability

Description The WINS server contains a buffer-overflow vulnerability that can allow attackers to corrupt WINS process memory. The issue occurs because the software fails to perform sufficient boundary checks on computer 'name' data that is handled during a WINS transaction. Ultimately, a WINS...

CVE-2004-0616

The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext...

Microsoft W3Who ISAPI w3who.dll Multiple Remote Vulnerabilities

The Windows 2000 Resource Kit ships with a DLL that displays the browser client context. It lists security identifiers, privileges and $ENV variables. Nessus has determined that this file is installed on the remote host. The w3who.dll ISAPI may allow an attacker to execute arbitrary commands on...

CVE-2004-1080

The WINS service wins.exe on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the...

CVE-2004-1080

Summary: CVE-2004-1080 describes a remote memory overwrite in the Windows WINS service (wins.exe) via a crafted WINS replication packet sent to TCP port 42, which could allow arbitrary code execution. Affected products: Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003...

[NT] WINS Replication Remote Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Ipswitch WS_FTP Server 5.03 - MKD Remote Buffer Overflow

Ipswitch WSFTP Server 5.03 - MKD Remote Buffer Overflow / no@0x00:/Exploits/IPS-WSFTP$ ./IPSWSFTP-exploit 10.20.30.2 test test Ipswitch WSFTP Remote buffer overflow exploit by NoPh0BiA. x Connected to: 10.20.30.2 on port 21. x Sending Login..done. x Sending bad code..done. x Checking if...

Ipswitch WS_FTP Server 5.03 - MKD Remote Buffer Overflow

/ no@0x00:/Exploits/IPS-WSFTP$ ./IPSWSFTP-exploit 10.20.30.2 test test Ipswitch WSFTP Remote buffer overflow exploit by NoPh0BiA. x Connected to: 10.20.30.2 on port 21. x Sending Login..done. x Sending bad code..done. x Checking if exploitation was successful.. x Connected to: 10.20.30.2 on port...

DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow

DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow ===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl DMSPOP3Overflow.pl 127.0.0.1 110 DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 Download: http://www.digitalmapping.sk.ca/pop3srv/default.asp Patch:...

DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow

===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl DMSPOP3Overflow.pl 127.0.0.1 110 DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 Download: http://www.digitalmapping.sk.ca/pop3srv/default.asp Patch: http://www.digitalmapping.sk.ca/pop3srv/Update.asp use IO::Socket; use strict;...

DMS POP3 Server (1.5.3 build 37) Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== DMS POP3 Server 1.5.3 build 37 Buffer Overflow Exploit ======================================================== ===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl...

dmsPOP3.txt

Summary: A buffer overflow exists in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 http://www.digitalmapping.sk.ca/pop3srv/default.asp and prior versions. Details: A buffer overflow occurs during the POP3 authentication process when an overly long username is supplied. When the username buff...

slmail5x.txt

SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0942 INTRO: SLMail Pro is web-based POP3 and SMTP email server software for MicrosoftT Windows 2000 that includes advanced features usually found in enterprise-level systems. Seattlelab...

Buffer overlow in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 and prior versions.

Summary: A buffer overflow exists in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 http://www.digitalmapping.sk.ca/pop3srv/default.asp and prior versions. Details: A buffer overflow occurs during the POP3 authentication process when an overly long username is supplied. When the username buff...

MailCarrier 2.51 Remote Buffer Overflow Exploit

No description provided by source. / Remote exploit for MailCarrier by NoPh0BiA, no@0x00:/Exploits/MailCarrier$ ./mailcarried-exploit 192.168.0.1 MailCarrier Buffer Overflow Exploit by NoPh0BiA. x Connected to: 192.168.0.1 PORT: 25 x Sending evil buffer..done. x Trying to connect to port 31337.. ...

TABS MailCarrier 2.51 - Remote Buffer Overflow

TABS MailCarrier 2.51 - Remote Buffer Overflow / Remote exploit for MailCarrier by NoPh0BiA, no@0x00:/Exploits/MailCarrier$ ./mailcarried-exploit 192.168.0.1 MailCarrier Buffer Overflow Exploit by NoPh0BiA. x Connected to: 192.168.0.1 PORT: 25 x Sending evil buffer..done. x Trying to connect to...

MiniShare 1.4.1 - Remote Buffer Overflow (2)

MiniShare 1.4.1 - Remote Buffer Overflow 2 / no@0x00:/Exploits/minishare$ ./mini-exploit 10.20.30.2 MiniShare remote buffer overflow UNIX exploit by NoPh0BiA. x Connected to: 10.20.30.2 on port 80. x Sending bad code..done. x Trying to connect to: 10.20.30.2 on port 4444.. x 0wn3d! Microsoft...

MailCarrier 2.51 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits =============================================== MailCarrier 2.51 Remote Buffer Overflow Exploit =============================================== / Remote exploit for MailCarrier by NoPh0BiA, email protected:/Exploits/MailCarrier$...