CA BrightStor HSM Buffer Overflow

This module exploits one of the multiple stack buffer overflows in Computer Associates BrightStor HSM. By sending a specially crafted request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

HP Instant Support HPISDataManager.dll ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 29530 CVECAN ID: CVE-2007-5608 HP Instant Support是是基于网络的故障诊断和排除工具套件，适用于桌面计算和打印产品。 HP Instant Support所安装的HPISDataManager.dll ActiveX控件没有正确地过滤对DownloadFile函数的输入参数。如果用户受骗访问了恶意网页并向该函数传送了超长参数的话，就可能导致向本地系统下载任意文件。 HP Instant Support 1.0.0.22 临时解决方法：...

Lotus Notes Applix Graphics viewer BEGIN tag buffer overflow

Added: 06/06/2008 CVE: CVE-2007-5405 BID: 28454 OSVDB: 44194 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to display Applix Graphics .ag attachments. Problem A buffer overflow vulnerability when parsing the initial BEGIN tag in an...

Lotus Notes Applix Graphics viewer BEGIN tag buffer overflow

Added: 06/06/2008 CVE: CVE-2007-5405 BID: 28454 OSVDB: 44194 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to display Applix Graphics .ag attachments. Problem A buffer overflow vulnerability when parsing the initial BEGIN tag in an...

HP Online Support Services ActiveX ExtractCab() buffer overflow

Overview HP Online Support Services contains the function ExtractCab, which can be exploited to cause a buffer overflow. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system in the context of the local user. Description HP Services provides online...

HP Instant Support HPISDataManager.dll ActiveX控件ExtractCab函数缓冲区溢出漏洞

BUGTRAQ ID: 29529 CVECAN ID: CVE-2007-5604 HP Instant Support是是基于网络的故障诊断和排除工具套件，适用于桌面计算和打印产品。 HP Instant Support所安装的HPISDataManager.dll ActiveX控件没有正确地过滤对ExtractCab函数的输入参数。如果用户受骗访问了恶意网页并向该函数传送了超长参数的话，就可能触发缓冲区溢出，导致执行任意指令。 HP Instant Support 1.0.0.22 临时解决方法：...

CVE-2008-2559

Integer overflow in Borland Interbase 2007 SP2 8.1.0.256 allows remote attackers to execute arbitrary code via a malformed packet to TCP port 3050, which triggers a stack-based buffer overflow. NOTE: this issue might be related to CVE-2008-0467...

CVE-2007-5671

CVE-2007-5671 is a VMware Tools local privilege-escalation issue in the guest HGFS driver (HGFS.sys) present in VMware Workstation/Player/ACE/Server and ESX/ESXi components. The flaw arises from improper validation of arguments to user-mode IOCTLs to .\hgfs, enabling a guest user to modify kernel...

Buffer overflow

Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5606, and...

Hardcoded credentials

The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a differe...

CVE-2007-5604

HP Instant Support HPISDataManager.dll ActiveX control contains ExtractCab() with a buffer overflow that allows a remote attacker to execute arbitrary code in the context of the local user. HP recommends upgrading to HP Instant Support - v1.0.0.24 or later (or applying the kill-bit remediation fo...

CVE-2007-5610

HP Instant Support HPISDataManager.dll ActiveX control (before v1.0.0.24) exposes a DeleteSingleFile() method that a remote attacker could abuse via a crafted HTML page to delete arbitrary files on the target system. The same advisory family notes other functions (MoveFile, GetFileTime, AppendStr...

CVE-2007-5605

CVE-2007-5605 is a buffer overflow in HPISDataManager.dll's GetFileTime() function within the HP Instant Support ActiveX control. A remote attacker could cause arbitrary code execution by passing a long argument to the function. Affected product: HP Instant Support / HPISDataManager.dll ActiveX c...

CVE-2007-5607

CVE-2007-5607 is a buffer overflow in the HPISDataManager.dll HP Instant Support ActiveX control (RegistryString function) that could allow a remote attacker to execute arbitrary code via a long first argument. Connected documents corroborate that this family of HP ActiveX vulnerabilities centers...

CVE-2007-5606

HP Instant Support’s HPISDataManager.dll ActiveX control contains MoveFile() in the HPISDataManager, a buffer overflow that can be exploited by a remote attacker to execute arbitrary code. Public details indicate exploitation requires convincing a user to visit a malicious page to trigger the vul...

CVE-2007-5608

HP Instant Support HPISDataManager.dll ActiveX control contains the DownloadFile() function vulnerability (CVE-2007-5608). An unauthenticated remote attacker could force the ActiveX to download arbitrary files to a location on the victim’s system via a crafted URL and destination filename. Affect...

CVE-2007-5607

creationtimestamp| type| source ---|---|--- 2008-06-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31877...

CVE-2007-5604

creationtimestamp| type| source ---|---|--- 2008-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31873...

CVE-2007-5610

creationtimestamp| type| source ---|---|--- 2008-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31879...

Design/Logic Flaw

CFNetwork in Safari in Apple Mac OS X before 10.5.3 automatically sends an SSL client certificate in response to a web server's certificate request, which allows remote web sites to obtain sensitive information Subject data from personally identifiable certificates, and use arbitrary certificates...