PR08-09: Unauthenticated File Retrieval on Sun Java System Identity Manager "ext" parameter

PR08-09: Unauthenticated File Retrieval on Sun Java System Identity Manager "ext" parameter Date Found: 25th April 2008 Vendor Contacted: 28th April 2008 Date Public: 10th November 2008 Severity: High Credits: Richard Brain of ProCheckUp Ltd www.procheckup.com. ProCheckUp thanks Sun for working...

MS Windows Server Service Code Execution Exploit (MS08-0 6 7) (2k/2k3)-the exploit-warning-the black bar safety net

!/ usr/bin/env python MS08-0 6 7 Exploit by Debasis Mohanty aka Tr0y/nopsled www.hackingspirits.com www.coffeeandsecurity.com Email: d3basis. m0hanty @ gmail.com import struct import sys from threading import Thread Thread is imported incase you would like to modify the src to run against multipl...

CVE-2008-5112

The CVE describes an LDAP authentication behavior in Microsoft Windows 2000 SP4 and Server 2003 SP1/SP2, where the Active Directory LDAP server responds differently to failed binds based on whether the user exists and is allowed to login. This enables remote attackers to enumerate valid usernames...

CVE-2008-5112

The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind...

ms08067-2k2k3.txt

!/usr/bin/env python MS08-067 Exploit by Debasis Mohanty aka Tr0y/nopsled www.hackingspirits.com www.coffeeandsecurity.com Email: d3basis.m0hanty @ gmail.com import struct import sys from threading import Thread Thread is imported incase you would like to modify the src to run against multiple...

Microsoft Windows Server 20002003 - Code Execution (MS08-067)

Microsoft Windows Server 20002003 - Code Execution MS08-067 !/usr/bin/env python MS08-067 Exploit by Debasis Mohanty aka Tr0y/nopsled www.hackingspirits.com www.coffeeandsecurity.com Email: d3basis.m0hanty @ gmail.com E-DB Note: Exploit Update...

MS Windows Server Service Code Execution Exploit (MS08-067) (2k/2k3)

Exploit for unknown platform in category remote exploits ==================================================================== MS Windows Server Service Code Execution Exploit MS08-067 2k/2k3 ==================================================================== !/usr/bin/env python MS08-067 Exploit...

IBM Lotus Domino Sametime STMux.exe Stack Buffer Overflow

This module exploits a stack buffer overflow in Lotus Domino's Sametime Server. By sending an overly long POST request to the Multiplexer STMux.exe service we are able to overwrite SEH. Based on the exploit by Manuel Santamarina Suarez. This module requires Metasploit:...

Microsoft Active Directory LDAP Server - Username Enumeration

Microsoft Active Directory LDAP Server - Username Enumeration source: https://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this...

CVE-2008-5044

Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service crash or hang via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring...

CVE-2008-4037

Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential...

Race condition

Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service crash or hang via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring...

CVE-2008-5044

CVE-2008-5044 describes a race condition in Windows that allows a local DoS via a multi-threaded application making many calls to UnhookWindowsHookEx during certain desktop activity on Windows Server 2003 and Windows Vista . The vulnerability leads to a crash or hang. Public details in the connec...

CVE-2008-5044

Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service crash or hang via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring...

SMB Could Allow Remote Code Execution Vulnerability (957097)

This host is missing a critical security update according to Microsoft Bulletin MS08-068. OpenVAS Vulnerability Test $Id: secpodms08-068900057.nasl 5934 2017-04-11 12:28:28Z antu123 $ Description: SMB Could Allow Remote Code Execution Vulnerability 957097 Authors: Chandan S Copyright: Copyright C...

Microsoft XML Core Services Remote Code Execution Vulnerability (955218)

This host is missing a critical security update according to Microsoft Bulletin MS08-069. OpenVAS Vulnerability Test $Id: secpodms08-069900058.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Microsoft XML Core Services Remote Code Execution Vulnerability 955218 Authors: Chandan S Copyright:...

Microsoft Windows Vista/2003 - 'UnhookWindowsHookEx' Local Denial of Service

source: https://www.securityfocus.com/bid/32206/info Microsoft Windows is prone to a local denial-of-service vulnerability. Attackers may exploit this issue to deny further service to legitimate users. This issue affects Windows 2003 and Windows Vista; other versions may also be affected...

Windows 2003 SP1 Detection

Binary data 4737.prm...

Windows 2003 (No Service Pack) Detection

Binary data 4738.prm...

Microsoft Windows Media Player MIDI文件MThd头解析拒绝服务漏洞

BUGTRAQ ID: 32077 CNCAN ID：CNCAN-2008110405 Microsoft Windows Media Player是一款流行的媒体播放程序。 Microsoft Windows Media Player解析畸形MIDI文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 在解析MIDI文件的MThd头字段时存在问题，构建恶意文件，诱使用户访问，可导致应用程序崩溃。 Microsoft Windows Media Player 9.0 + Microsoft Windows Server 2003 Datacenter Edition +...