DSSExploit.txt

-- Advisory Name -- Default Screen Saver Vulnerability in Microsoft Windows -- Author -- Susam Pal -- Vulnerable Systems -- Windows XP, Windows 2003 Server -- Vulnerability Description -- This vulnerability has been tested on Windows XP and Windows 2003 Server. The screen saver in these systems i...

msieCrashMouse.txt

Title: Microsoft Internet Explorer - Crash on mouse button click Author: Kil13r - http://www.kil13r.info/ Local / Remote: Both Date of discovery: 2003/12/28 Release date: 2006/05/20 Affected software: Microsoft Internet Explorer Description: There is a bug in Microsoft Internet Explorer, which...

Buffer overflow

Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack...

US-CERT Technical Cyber Security Alert TA06-139A -- Microsoft Word Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-139A Microsoft Word Vulnerability Original release date: May 19, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Word 2003 Microsoft Word XP 2002 Microsoft Word is includ...

CVE-2006-2492

CVE-2006-2492 is a buffer overflow in Microsoft Word (Office 2000 SP3, XP SP3, 2003 SP1/SP2) and Microsoft Works through 2006 caused by a malformed object pointer. The flaw allows arbitrary code execution and requires user interaction (via opening a crafted Word/Works document). Affected products...

DSA-1067-1 kernel-source-2.4.16 - several

Bulletin has no description...

PuTTy.exe 0.53 - Validation Remote Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

PuTTy.exe <= 0.53 (validation) Remote Buffer Overflow Expl (meta)

Exploit for unknown platform in category remote exploits ==================================================================== PuTTy.exe 'PuTTy.exe '$Revision: 1.1 $', 'Authors' = 'y0 at w00t-shell.net' , 'Description' = Pex::Text::Freeformqq This module exploits a buffer overflow in the PuTTY SSH...

PuTTy.exe 0.53 - Validation Remote Buffer Overflow (Metasploit)

PuTTy.exe 0.53 - Validation Remote Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

FreeBSD : kpopup -- local root exploit and local denial of service (1613db79-8e52-11da-8426-000fea0a9611)

Mitre CVE reports : Format string vulnerability in main.cpp in kpopup 0.9.1-0.9.5pre2 allows local users to cause a denial of service segmentation fault and possibly execute arbitrary code via format string specifiers in command line arguments. misc.cpp in KPopup 0.9.1 trusts the PATH variable wh...

Windows 2003 or XP SP2 VPN Detection

Binary data 3564.prm...

Code injection

Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service crash via a BuildContextW request with a large 1 UuidString or 2 GuidIn of a certain length, which causes an out-of-range memory...

MS06-018: Vulnerability in Microsoft Distributed Transaction Coordinator Could Allow DoS (913580) (uncredentialed check)

The remote version of Windows contains a version of MSDTC Microsoft Data Transaction Coordinator service that is affected by several remote code execution and denial of service vulnerabilities. An attacker may exploit these flaws to obtain complete control of the remote host 2000, NT4 or to crash...

[EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service

Microsoft Distributed Transaction Coordinator Denial of Service http://www.eeye.com/html/research/advisories/AD20060509b.html Release Date: May 9, 2006 Date Reported: October 11, 2005 Patch Development Time In Days: 210 Severity: Low Denial of Service Systems Affected: Windows NT 4.0 Windows 2000...

CVE-2006-1184

CVE-2006-1184 describes a Denial of Service in Microsoft Windows’ Distributed Transaction Coordinator (MSDTC) that could crash the MSDTC service when a remote attacker sends a crafted BuildContextW message with a large UuidString or GuidIn. The issue affects MSDTC on Windows NT 4.0, 2000 SP4, XP ...

Microsoft Windows MSDTC Invalid Memory Access Denial Of Service Vulnerability

Description Microsoft Windows Distributed Transaction Coordinator is prone to a denial-of-service vulnerability. Attackers can exploit this vulnerability remotely to disrupt the MSDTC service and any services that depend on MSDTC. This vulnerability affects Windows NT and Windows 2000 by default,...

Microsoft Security Bulletin MS06-019 Vulnerability in Microsoft Exchange Could Allow Remote Code Execution &#40;916803&#41;

Microsoft Security Bulletin MS06-019 Vulnerability in Microsoft Exchange Could Allow Remote Code Execution 916803 Published: May 9, 2006 Version: 1.0 Summary Who should read this document: System administrators who use Microsoft Exchange Impact of Vulnerability: Remote Code Execution Maximum...

Microsoft Security Bulletin MS06-018 Vulnerability in Microsoft Distributed Transaction Coordinator Could Allow Denial of Service &#40;913580&#41;

Microsoft Security Bulletin MS06-018 Vulnerability in Microsoft Distributed Transaction Coordinator Could Allow Denial of Service 913580 Published: May 9, 2006 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Denial of Service Maximu...

[REWTERZ-20060503] XM Easy Personal FTP Server Remote Buffer Overflow Vulnerability

REWTERZ-20060503 - XM Easy Personal FTP Server Remote Buffer Overflow Vulnerability Release Date: May 3, 2006 Severity: High Remote Code Execution Vendor: Dxmsoft Software Affected: XM Easy Personal FTP Server v4.3 and before Operating Systems Affected: Windows NT 4.0 Windows 98 / ME Windows 2000...

CVE-2006-2094

Affected software: Internet Explorer prior to Windows XP SP2 and Windows Server 2003 SP1. Vulnerability summary: When Prompt is enabled in Security Settings, IE uses modal dialogs to verify running an ActiveX control or other risky actions. This enables user-assisted remote attackers to exploit a...