Oracle Database sys.pbsde.init Procedure Buffer Overflow (CVE-2005-3438)

Stored procedures are a powerful feature of an Oracle database server. They are essentially a set of SQL statements that are stored server-side, which are called by name and optionally passed a set of parameters. Stored procedures provide improved performance, because only data specific to the...

CA BrightStor Universal Agent Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'CA BrightSto...

SentinelLM UDP Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SentinelLM U...

MySQL CREATE FUNCTION init_syms Buffer Overflow (CVE-2005-2558)

MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. To extend the functionality of SQL, MySQL provides a mechanism to call C/C++ functions in external binary libraries. This mechanism is known...

Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Windows...

Apple QuickTime and iTunes Movie File Heap Memory Corruption (CVE-2005-4092)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The QuickTime product is also installed as a component with the Apple iTunes product. The software supports parsing and displaying picture files as well as numerous video formats. QuickTime is capable of processin...

CVE-2005-4882

Summary (CVE-2005-4882) TFTPD32/Tftpd32 2.74 and earlier (as used in Wyse Simple Imager and related products) is vulnerable to a denial of service caused by a long filename in a TFTP read request, triggering a daemon crash. This issue is related to, but distinct from, CVE-2002-2226 (buffer overfl...

CVE-2005-4883

CVE-2005-4883 describes a race condition in Philippe Jounin’s Tftpd32 prior to version 2.80. The issue allows remote attackers to trigger a denial of service (daemon crash) by sending invalid transfer/“connect” frames, exploiting the server’s handling of such frames. Affected software is the Tftp...

Microsoft IIS ASP Scripts Source Code Disclosure (CVE-2005-2678)

The Internet Information Server IIS is a Web server packaged with several versions of the Windows operating system. The server is capable of serving static, as well as dynamic content. The server is equipped with the Active Server Pages ASP technology which is utilized for dynamic content...

IBM WebSphere Application Server Buffer Overflow (CVE-2005-1872)

The IBM WebSphere Application Server is a Java 2 Enterprise Edition J2EE and Web Services-based application server. The software is made available for various vendor operating systems. There exists a buffer overflow vulnerability in IBM's WebSphere Application Server. The vulnerability is caused ...

kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7

The tcffillnode function in net/sched/clsapi.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcmpad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified...

Squid Authentication Headers Handling Denial of Service (CVE-2005-2917)

The Squid proxy server is an open source, Internet proxy and caching application. It supports the proxying of FTP, HTTP, SSL, and DNS services. The default proxy service port is 3128/TCP. A vulnerability exists in the Squid proxy server in the processing of authentication requests. The flaw is...

Multiple Products Runtime Environment GIF Parsing Memory Corruption (CVE-2005-1106; CVE-2009-1097; CVE-2009-1098; CVE-2015-5096)

A memory corruption vulnerability has been reported the GIF processing component in multiple products. Graphics Interchange Format GIF is a bitmap image format that is widely use over HTTP...

HP Openview connectedNodes.ovpl Remote Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP Openview...

Simple PHP Blog 0.4.0 Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Simple PHP...

WordPress cache_lastpostdate Arbitrary Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'WordPress...

PHP XML-RPC Arbitrary Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'PHP XML-RPC...

vBulletin misc.php Template Name Arbitrary Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'vBulletin...

Mozilla Firefox JavaScript Engine Information Disclosure (CVE-2005-0989)

The Mozilla web browser and its derivatives, Firefox, Netscape, and K-Meleon are applications designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, etc. These applications have a built in functionality to interpret JavaScript code. One of the...

Arkeia Backup Client Type 77 Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Arkeia Backu...