HP Data Protector Client 6.11 - 'EXEC_SETUP' Remote Code Execution

Exploit Title: HP Data Protector Cliet EXECSETUP Remote Code Execution Vulnerability PoC ZDI-11-056 Date: 2011-05-29 Author: @fdiskyou e-mail: rui at deniable.org Version: 6.11 Tested on: Windows 2003 Server SP2 en CVE: CVE-2011-0922 Notes: ZDI-11-056 Reference:...

HP Data Protector Client EXEC_SETUP Code Execution PoC (ZDI-11-056)

Exploit for windows platform in category remote exploits Exploit Title: HP Data Protector Cliet EXECSETUP Remote Code Execution Vulnerability PoC ZDI-11-056 Date: 2011-05-29 Author: fdisk Version: 6.11 Tested on: Windows 2003 Server SP2 en CVE: CVE-2011-0922 Notes: ZDI-11-056 Reference:...

HP Data Protector Client Code Execution Vulnerability PoC (ZDI-11-055)

Exploit for windows platform in category remote exploits Exploit Title: HP Data Protector Client Remote Code Execution Vulnerability PoC ZDI-11-055 Date: 2011-05-28 Coded by: fdisk Version: 6.11 Tested on: Windows 2003 Server SP2 en CVE: CVE-2011-0923 Notes: ZDI-11-055 Reference:...

HP Data Protector Client Code Execution

Exploit Title: HP Data Protector Client Remote Code Execution Vulnerability PoC ZDI-11-055 Date: 2011-05-28 Coded by: fdisk Version: 6.11 Tested on: Windows 2003 Server SP2 en CVE: CVE-2011-0923 Notes: ZDI-11-055 Reference: http://www.zerodayinitiative.com/advisories/ZDI-11-055/ Reference:...

HP Data Protector Client 6.11 - EXEC_CMD Remote Code Execution

HP Data Protector Client 6.11 - EXECCMD Remote Code Execution Exploit Title: HP Data Protector Client EXECCMD Remote Code Execution Vulnerability PoC ZDI-11-055 Date: 2011-05-28 Author: @fdiskyou e-mail: rui at deniable.org Version: 6.11 Tested on: Windows 2003 Server SP2 en CVE: CVE-2011-0923...

HP System Management Homepage Cross Site Scripting

PR10-11: Multiple XSS injection vulnerabilities and a offsite redirection flaw within HP System Management Homepage Insight Manager Vulnerability found: 6th June 2010 Date Published 20th May 2011 Severity: Medium Description: XSS vulnerabilities have been found within HP System Management; Arisin...

HP OpenView Network Node Manager ovwebsnmpsrv.exe ovutil.dll stringToSeconds Buffer Overflow

Added: 05/23/2011 CVE: CVE-2011-0262 BID: 45762 OSVDB: 70470 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability affecting ovwebsnmpsrv.exe, in the stringToSeconds function in ovutil.dll, allows remote...

Avaya WinPMD UniteHostRouter Buffer Overflow

This module exploits a stack buffer overflow in Avaya WinPMD. The vulnerability exists in the UniteHostRouter service, due to the insecure usage of memcpy when parsing specially crafted "To:" headers. The module has been tested successfully on Avaya WinPMD 3.8.2 over Windows XP SP3 and Windows 20...

HP OpenView Network Node Manager ovwebsnmpsrv.exe ovutil.dll stringToSeconds Buffer Overflow

Added: 05/23/2011 CVE: CVE-2011-0262 BID: 45762 OSVDB: 70470 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability affecting ovwebsnmpsrv.exe , in the stringToSeconds function in ovutil.dll , allows remote...

HP OpenView Network Node Manager ovwebsnmpsrv.exe ovutil.dll stringToSeconds Buffer Overflow

Added: 05/23/2011 CVE: CVE-2011-0262 BID: 45762 OSVDB: 70470 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability affecting ovwebsnmpsrv.exe , in the stringToSeconds function in ovutil.dll , allows remote...

HP OpenView Network Node Manager ovwebsnmpsrv.exe ovutil.dll stringToSeconds Buffer Overflow

Added: 05/23/2011 CVE: CVE-2011-0262 BID: 45762 OSVDB: 70470 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability affecting ovwebsnmpsrv.exe, in the stringToSeconds function in ovutil.dll, allows remote...

MS11-035: Vulnerability in WINS Could Allow Remote Code Execution (2524426) (uncredentialed check)

The version of WINS Windows Internet Name Service installed on the remote Windows host is affected by a memory corruption vulnerability due to a logic error when handling a socket send exception. By sending specially crafted packets to the affected WINS system, a remote attacker can potentially...

Novell File Reporter Agent XML Parser Buffer Overflow

Added: 05/16/2011 CVE: CVE-2011-0994 BID: 47144 OSVDB: 71980 Background Novell File Reporter is software that allows network administrators to identify files stored on the network and generates reports regarding the size of individual files, file type, when files were last accessed, and where...

Novell File Reporter Agent XML Parser Buffer Overflow

Added: 05/16/2011 CVE: CVE-2011-0994 BID: 47144 OSVDB: 71980 Background Novell File Reporter is software that allows network administrators to identify files stored on the network and generates reports regarding the size of individual files, file type, when files were last accessed, and where...

Novell File Reporter Agent XML Parser Buffer Overflow

Added: 05/16/2011 CVE: CVE-2011-0994 BID: 47144 OSVDB: 71980 Background Novell File Reporter is software that allows network administrators to identify files stored on the network and generates reports regarding the size of individual files, file type, when files were last accessed, and where...

Windows Xp sp2 + JetAudio v8.0.7.1 + M-Office 2003 DLL Hijacking

Exploit for windows platform in category local exploits ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive...

CVE-2011-1248

WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted packets, related to unintended stack-frame values...

CVE-2011-1248

CVE-2011-1248 affects Microsoft Windows WINS (the Windows Internet Name Service) on Windows Server 2003 SP2 and Windows Server 2008 Gold/SP2/R2/R2 SP1. The vulnerability arises from a logic error in handling socket send exceptions in the wins.exe service, leaving certain user-supplied values in a...

Microsoft Windows Internet Name Service (WINS)失败响应远程代码执行漏洞

Bugtraq ID: 47730 Microsoft Windows是一款微软发行的操作系统。 Microsoft Windows 2003 Server分发的wins.exe服务存在缺陷。此服务设计用于解析NetBIOS请求，并接收42端口的连接，当处理套接字发送异常时存在一个逻辑错误，部分用户提供的值会遗留在栈帧中，并在其他上下文中重用。远程攻击者可以利用这个缺陷调用LeaveCriticalSection，并在一个可控的位置上进行操作。这个条件可导致远程代码在SYSTEM用户上下文执行。 Microsoft Windows Server 2003 Datacenter Editi...

Microsoft PowerPoint远程代码执行漏洞

Bugtraq ID: 47700，47699 CVE ID：CVE-2011-1269 CVE-2011-1270 Microsoft PowerPoint是一款微软开发的演示文稿播放处理软件。 Microsoft Office PowerPoint存在多个安全漏洞，允许攻击者以应用程序上下文执行任意代码。 -当调用某些函数时存在未明错误，可导致内存破坏。 -当解析PowerPoint文件时存在未明错误，可导致内存破坏。 成功利用漏洞可以以应用程序上下文执行任意代码。 Microsoft Office 2003 Professional Edition Microsoft Office...