CVE-2004-2365

Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service memory exhaustion by repeatedly creating and deleting directories using a non-standard tool such as smbmount...

CVE-2003-1222

BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service JMS provider, echoes the password for the foreign provider to the console and stores it in cleartext in config.xml, which could allow attackers to obtain the password...

CVE-2004-2365

CVE-2004-2365 affects Windows XP and Windows Server 2003. The issue is a memory leak in the operating system that allows a local user to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount. The provided documents...

CVE-2003-1225

The vulnerability CVE-2003-1225 affects BEA WebLogic Server and Express 7.0 and 7.0.0.1, where the default CredentialMapper stores passwords in cleartext on disk, enabling local users to extract passwords. The related Nessus entry corroborates a local-access information disclosure risk, including...

CVE-2003-1228

CVE-2003-1228 describes a buffer overflow in the prepare_reply function of request.c affecting Mathopd versions 1.2–1.5b13 (and possibly earlier). The vulnerability can be exploited by a crafted HTTP request with a long path, potentially leading to a denial of service (server crash) and, in some ...

CVE-2003-1224

Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by physically observing "shoulder surfing" the screen...

CVE-2003-1225

The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords...

CVE-2003-1222

CVE-2003-1222 affects BEA WebLogic Express/Server 8.0–8.1 SP1 when using a foreign JMS provider. The underlying issue is that the system echoes the foreign provider password to the console and stores it in cleartext in config.xml, enabling an attacker to obtain the password. The description does ...

zenworks_desktop_agent.pm.txt

package Msf::Exploit::zenworksdesktopagent; use strict; use base "Msf::Exploit"; use Pex::Text; my $advanced = ; my $info = 'Name' = 'ZENworks 6.5 Desktop/Server Management Remote Stack Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'Anonymous', , 'Arch' = 'x86' , 'OS' = 'win32', 'winxp',...

MS Windows Plug-and-Play Service Remote Universal Expl (MS05-039)

Exploit for unknown platform in category remote exploits ==================================================================== MS Windows Plug-and-Play Service Remote Universal Exploit MS05-039 ==================================================================== / HOD-ms05039-pnp-expl.c: 2005-08-1...

Microsoft Windows Plug-and-Play Service - Remote Universal (MS05-039)

Microsoft Windows Plug-and-Play Service - Remote Universal MS05-039 / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::...

Microsoft Windows Plug-and-Play Service - Remote Universal (MS05-039)

/ HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::. --------------------------------------------------------------------- Description: A remot...

Novell ZENworks 6.5 - Desktop/Server Management Remote Stack Overflow (Metasploit)

package Msf::Exploit::zenworksdesktopagent; use strict; use base "Msf::Exploit"; use Pex::Text; my $advanced = ; my $info = 'Name' = 'ZENworks 6.5 Desktop/Server Management Remote Stack Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'Anonymous', , 'Arch' = 'x86' , 'OS' = 'win32', 'winxp',...

ZENworks 6.5 Desktop/Server Management Remote Stack Overflow

Exploit for unknown platform in category remote exploits ============================================================ ZENworks 6.5 Desktop/Server Management Remote Stack Overflow ============================================================ package Msf::Exploit::zenworksdesktopagent; use strict; u...

MS Internet Explorer COM Objects File Download Exploit (MS05-038)

Exploit for unknown platform in category remote exploits ================================================================= MS Internet Explorer COM Objects File Download Exploit MS05-038 =================================================================...

CVE-2005-1981

Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service system crash via a crafted Kerberos message...

CVE-2005-0058

Buffer overflow in the Telephony Application Programming Interface TAPI for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message...

CVE-2005-1984

Buffer overflow in the Print Spooler service Spoolsv.exe for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message...

Microsoft Security Bulletin MS05-039 Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege (899588)

Microsoft Security Bulletin MS05-039 Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege 899588 Issued: August 9, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution and...

Microsoft Security Bulletin MS05-043 Vulnerability in Print Spooler Service Could Allow Remote Code Execution (896423)

Microsoft Security Bulletin MS05-043 Vulnerability in Print Spooler Service Could Allow Remote Code Execution 896423 Issued: August 9, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Ratin...