Symantec Enterprise Security Manager远程升级远程代码执行漏洞

Symantec Enterprise Security Manager ESM可以在整个企业范围内为关键性应用程序和服务器自动搜索发现其漏洞隐患和不符合安全策略的设定。 Symantec Enterprise Security Manager存在设计问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于ESM代理端的远程升级接口中，ESM代理端接收从熟悉升级协议的任意实体上的升级请求，并没有对源头进行任何可信认证。熟悉代理端协议的攻击者可以以应用程序进程权限执行任意指令。ESM代理端一般以管理员权限执行。 Symantec Enterprise Security...

CVE-2007-1879

The StartUploading function in KL.SysInfo ActiveX control AxKLSysInfo.dll in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command...

Microsoft Windows动画光标ANI格式处理远程代码执行漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器，Microsoft Windows是一款流行的操作系统。 Microsoft Windows在处理畸形的动画图标文件.ani时存在缓冲区溢出问题，远程攻击者可利用此漏洞以 当前用户进程权限执行任意指令。 Microsoft Windows在处理畸形动画光标文件.ani时没有正确地验证ANI头字段中所指定的大小，可导致基 于栈溢出漏洞。攻击者可以构建恶意WEB页或者包含ANI文件的EMAIL消息来触发，就会触发这个溢出，导致...

Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow

..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build 6000 default installation and UAC enabled Windows Vista Ultimate...

CVE-2005-4833

The affected product is IBM WebSphere Application Server 6.0 prior to 20050201, vulnerable when serving pages in an Application WAR or an Extended Document Root. The root cause is lack of URL normalization, allowing remote attackers to access the JSP source code and other sensitive information vi...

Apache Tomcat 5.x6.0.x - Directory Traversal

Apache Tomcat 5.x6.0.x - Directory Traversal source: https://www.securityfocus.com/bid/22960/info Apache HTTP servers running with the Tomcat servlet container are prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issu...

MS Internet Explorer (FTP Server Response) DoS Exp

No description provided by source. !/usr/bin/perl MS 07-016 FTP Server Response PoC Usage: ./ms07016ftp.pl LISTENIP Tested Against: MSIE 6.02900.2180 SP2 Details: The response is broken into buffers, either at length 1024, or at '\r\n'. Each buffer is apended with \x00, without...

Solaris 9 (sparc) : 124520-05

N1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : Sep/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 124519-05

N1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : Sep/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 124520-05

N1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : Sep/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 7 (sparc) : 124520-05

N1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : Sep/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 124519-05

N1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : Sep/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Mandrake Linux Security Advisory : ImageMagick (MDKSA-2006:223)

Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image. Updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Microsoft Internet Explorer多个ActiveX控件拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer包含的多个ActiveX控件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Determina Security Research发现当部分对象属性通过JavaScript访问时，多个控件会由于非法内存访问异常而导致应用程序崩溃。多数受影响ActiveX控件存在于MSHTML.dll中，这些ProgIDs包括如下： giffile htmlfile jpegfile mhtmlfile ODCfile pjpegfile pngfile...

Crack the freezing point reduction 6. 0 The method and the freezing point reduction works-vulnerability warning-the black bar safety net

Deep Freeze & How to crack Deep Freeze 6.0 The author of the article:old yellow article source:CNOOC gas One, first the way freezing works. Without the patience of friends can jump directly to the second part to see how to crack the freezing point reduction 6. 0 in. Probably a lot of people have...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 LogoffMessage parameter to logofflast.aspx or the 2 txtUsername parameter to Default.aspx. NOTE: The provenance of this informatio...

CVE-2007-0468

CVE-2007-0468 describes a stack-based buffer overflow in rcdll.dll inside msdev.exe (Visual C++ MSVC) of Microsoft Visual Studio 6.0 SP6. The vulnerability is triggered by a long file path in the RC file’s 1 TYPELIB MOVEABLE PURE option, allowing a user-assisted attacker to execute arbitrary code...

mssploit.txt

Advisory: //////////// Microsoft Visual C++ 6.0 is prone to stack based memory corruption vulnerability during processing .RC resource files, caused by the lack of input data boundary check. Vulnerable software: //////////////////// Microsoft Visual Studio 6.0 SP6 Impact: /////// Remote code...

Microsoft Visual C++ (.RC) resource files buffer overflow vulnerability

Advisory: //////////// Microsoft Visual C++ 6.0 is prone to stack based memory corruption vulnerability during processing .RC resource files, caused by the lack of input data boundary check. Vulnerable software: //////////////////// Microsoft Visual Studio 6.0 SP6 Impact: /////// Remote code...

cnt-exploit.txt

Description: There is a stack based memory corruption in Microsoft Help Workshop while processing .CNT Help Contents files, The tool is standard component of Microsoft Visual Studio 6.0 and 2003 .NET for building and managing help projects and could be also downloaded alone from the Microsoft...