MS07-033: Cumulative Security Update for Internet Explorer (933566)

The remote host is missing IE Cumulative Security Update 933566. The remote version of IE is affected by several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25486; scriptversion"1.37"...

ibmtivoli-preauth.txt

!/usr/bin/python IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit http://dvlabs.tippingpoint.com/advisory/TPTI-07-05 Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com/0day/ibm-ti-pro.py Notes: Egghunter can take upto 5...

PT-2007-4382 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 SP1 through 7 for Windows XP SP2 and SP3 Microsoft Internet Explorer versions 6 and 7 for Server 2003 SP2 Microsoft Internet Explorer version 7 for Vista Gold, SP1, and SP2 Microsoft Internet Explorer...

Code injection

Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an invalid user name, which allows context-dependent attackers to determine valid Active Directory account...

CVE-2007-2999

CVE-2007-2999 affects Microsoft Windows Server 2003 where time-restricted user accounts produce different error messages for failed logins with valid usernames versus invalid usernames. This behavior enables context-dependent attackers to enumerate valid Active Directory account names. The vulner...

CVE-2007-2999

Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an invalid user name, which allows context-dependent attackers to determine valid Active Directory account...

IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit

No description provided by source. !/usr/bin/python IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit http://dvlabs.tippingpoint.com/advisory/TPTI-07-05 Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com/0day/ibm-ti-pro.py...

Microsoft活动目录登录用户名枚举漏洞

Microsoft Active Directory是一款目录服务，可以实现整个网络的集中式安全管理。。 Microsoft Active Directory存在一个设计缺陷，远程攻击者可以利用漏洞枚举用户名信息。 如果通过Windows终端服务提供合法的用户名，根据域控制器返回的错误消息不同，可导致获得用户名是否存在信息。不过此漏洞只存在于用户帐户被设置了时间限制和这些帐户只有在这些时间里访问才存在。 Microsoft Windows Server 2003 Standard Edition SP2 Microsoft Windows Server 2003 Standard...

IBM Tivoli Provisioning Manager - Remote Overflow (Egghunter)

IBM Tivoli Provisioning Manager - Remote Overflow Egghunter !/usr/bin/python IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit http://dvlabs.tippingpoint.com/advisory/TPTI-07-05 Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected]...

IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit

Exploit for unknown platform in category remote exploits ======================================================= IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit ======================================================= !/usr/bin/python IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit...

IBM Tivoli Provisioning Manager - Remote Overflow (Egghunter)

!/usr/bin/python IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit http://dvlabs.tippingpoint.com/advisory/TPTI-07-05 Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com/0day/ibm-ti-pro.py Notes: Egghunter can take upto 5...

[Full-disclosure] Microsoft Windows Active Directory Logon Hours User Enumeration Weakness

Windows Server 2003 can be configured http://support.microsoft.com/kb/816666 to restrict the hours and days that a user may log on to a Windows Server 2003 domain. This could lead to username enumeration. Issue:- Microsoft Windows Active Directory Username Enumeration Criticality:- Less Critical...

CVE-2003-1330

Technical details about CVE-2003-1330 are not provided in the connected documents. The initial description summarizes the vulnerability as bypass of e-mail attachment filtering via an undetected attachment. Monitor for official advisories or patches.

apache2058-rewrite.txt

/ apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003 original exploit http://milw0rm.com/exploits/3680 only...

Apache 2.0.58 mod_rewrite Remote Overflow Exploit (win2k3)

No description provided by source. / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003...

Apache 2.0.58 mod_rewrite Remote Overflow Exploit (win2k3)

Exploit for unknown platform in category remote exploits ========================================================== Apache 2.0.58 modrewrite Remote Overflow Exploit win2k3 ========================================================== / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS...

Apache 2.0.58 mod_rewrite (Windows 2003) - Remote Overflow

/ apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003 original exploit http://milw0rm.com/exploits/3680 only...

Apache 2.0.58 mod_rewrite (Windows 2003) - Remote Overflow

Apache 2.0.58 modrewrite Windows 2003 - Remote Overflow / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003...

CVE-2003-1329

ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service...

CVE-2003-1329

CVE-2003-1329 affects wu-ftpd 2.6.2 ftpd.c. On OSes that allow only one non-connected socket bound to the same local address, it does not close failed connections, enabling remote denial-of-service. Risk data (NVD) assigns CVSSv2 base score 7.8 (HIGH) with network attack vector and no authenticat...