MS06-009: Vulnerability in Korean Input Method Could Allow Elevation of Privilege (901190)

The remote version of Windows contains a flaw in the Korean input method that may allow a local attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need credentials to log into the remote host. C Tenable Network Security, Inc. include"compat.inc"; if...

MS06-007: Vulnerability in TCP/IP Could Allow Denial of Service (913446)

The remote host runs a version of Windows with a flaw in its TCP/IP stack that could allow an attacker to perform a denial of service attack against the remote host. To exploit this vulnerability, an attacker needs to send a specially crafted IGMP packet to the remote host. C Tenable Network...

Oracle Database Server XML Database Buffer Overflow (CVE-2003-0727)

...

CVE-2003-0463

CVE-2003-0463 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2003-0463

...

QNX Neutrino 6.2.1 - 'phfont' Race Condition Privilege Escalation

!/bin/sh word, exploit for http://www.idefense.com/intelligence/vulnerabilities/display.php?id=383 greetings and salutations from www.lort.dk kokanin@dtors 18/10/2003 $ cksum /usr/photon/bin/phfont 4123428723 30896 /usr/photon/bin/phfont $ uname -a QNX localhost 6.2.1 2003/01/08-14:50:46est x86pc...

CVE-2003-1293

Multiple cross-site scripting XSS vulnerabilities in NukedWeb GuestBookHost allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 Email and 3 Message fields when signing the guestbook...

CVE-2003-1292

CVE-2003-1292 concerns ashNews 0.83. The vulnerability is a PHP remote file inclusion (RFI) where an attacker can use a URL in the pathtoashnews parameter to ashnews.php and ashheadlines.php to include and execute remote files. Affected software: ashNews 0.83. The CVSS details from NVD indicate a...

CVE-2003-1291

VMware ESX Server 1.5.2 prior to Patch 4 is vulnerable to local privilege escalation: local users can execute arbitrary programs as root via certain modified VMware ESX Server environment variables. Root cause described as environment-variable manipulation. A fix is available in Patch 4 (see VMwa...

CVE-2006-0488

The VDM Virtual DOS Machine emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by dumper.asm...

FrontPage fp30reg.dll remote debug buffer overflow

Added: 01/30/2006 CVE: CVE-2003-0822 BID: 9007 OSVDB: 2952 Background Microsoft FrontPage Server Extensions includes a remote debugging function. Problem A buffer overflow in fp30reg.dll leads to a vulnerability in the remote debug function in FrontPage Server Extensions. A remote attacker could...

Windows mem leakage

Desc : Windows Dos emulation allows dumping of first 1 Mo of RAM with no particular privilege. Tested under : Win 2000, XP SP2, 2003 Code : ;---------------- dumper.asm ----------------------------------------- ; Dump first 1 Mo of memory under any MS product ; 1 Mo is the maximum quantity of...

Rookie Edition Expliot the guidelines for the preparation of the PNP the overflow vulnerability analysis+exploit-vulnerability warning-the black bar safety net

A month ago, and chat with friends, talked about now on the network, worms, viruses are increasingly rampant, the year before the“shock wave”, last year's“shock wave”, this year also don't know and out of what? The voice just fell, the one is named Zotob worm has been in a 8 on 1 to 5 November...

Novell ZENworks 6.5 Desktop/Server Management Overflow

This module exploits a heap overflow in the Novell ZENworks Desktop Management agent. This vulnerability was discovered by Alex Wheeler. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Novell...

MSIEDoS.txt

Advisory Name MicrosoftR Internet Explorer 5 & 6 Remote Denial of Service DoS using IMG & XML elements Release Date 14. January 2006 Vulnerable Product MicrosoftR Internet Explorer 5 MicrosoftR Internet Explorer 6 Tested and Confirmed Vulerable Microsoft® Windows® XP Professional with Service Pac...

Alt-N WebAdmin USER Buffer Overflow

Alt-N WebAdmin is prone to a buffer overflow condition. This is due to insufficient bounds checking on the USER parameter. Successful exploitation could result in code execution with SYSTEM level privileges. This module requires Metasploit: https://metasploit.com/download Current source:...

Oracle 9i XDB FTP UNLOCK Overflow (win32)

By passing an overly long token to the UNLOCK command, a stack based buffer overflow occurs. David Litchfield, has illustrated multiple vulnerabilities in the Oracle 9i XML Database XDB, during a seminar on "Variations in exploit methods between Linux and Windows" presented at the Blackhat...

Minishare 1.4.1 Buffer Overflow

This is a simple buffer overflow for the minishare web server. This flaw affects all versions prior to 1.4.2. This is a plain stack buffer overflow that requires a "jmp esp" to reach the payload, making this difficult to target many platforms at once. This module has been successfully tested...

HelmXSS.txt

I.Vulnerability Helm Hosting Control Panel Cross Site Scripting Vulnerability II.Vendor Web Host Automation Ltd. www.webhostautomation.com III.Affected Systems Helm v3.2.8 and probably previous versions. IV.About Helm is a multi-server management and hosting control system for Windows 2000 and 20...

CVE-2003-1290

BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain configuration information by accessing MBeanHome via the Java Naming and Directory Interface JNDI...