3486 matches found
Microsoft Windows - 'RPC DCOM' Long Filename Overflow (MS03-026)
include include include include include include pragma commentlib,"ws232" unsigned char bindstr= 0x05,0x00,0x0B,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x7F,0x00,0x00,0x00, 0xD0,0x16,0xD0,0x16,0x00,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x01,0x00,0x01,0x00,...
MS Windows (RPC DCOM) Scanner (MS03-039)
Exploit for unknown platform in category remote exploits ======================================== MS Windows RPC DCOM Scanner MS03-039 ======================================== / dcom2scanner.c scan for second dcom vulnerability MS03-039 by Doke Scott, doke at udel.edu, 10 Sep 2003 based on work b...
Microsoft Windows - RPC DCOM Remote (1)
Microsoft Windows - RPC DCOM Remote 1 ////////////////////////////////////////////////////////////////////////////////////////////// // // Windows RPC DCOM Remote Exploit with 18 Targets // by pHrail and smurfy + some offsets by teos // // Targets: // 0 Win2k Polish nosp ver 5.00.2195 // 1 Win2k...
Linux NFS utils package (nfs-utils) mountd xlog Function Off-by-one Remote Overflow
The remote rpc.mountd daemon is vulnerable to an off-by-one overflow which could be exploited by an attacker to gain a root shell on this host. C Tenable Network Security, Inc. This check is destructive by its very nature, as we need to check for a off-by-one overflow. Very few distributions are...
[EXPL] GNATS Buffer Overflow Exploit Code Released (queue-pr)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security in Canada Toronto-based Sunrays Technologies is now Beyond Security's representative in Canada. We welcome ISPs, system...
[EXPL] Hummingbird's Exceed X Emulator Fonts Directive Mishandling
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security in Canada Toronto-based Sunrays Technologies is now Beyond Security's representative in Canada. We welcome ISPs, system...
BEA WebLogic FileServlet Source Code Disclosure
The version of the WebLogic web application installed on the remote host contains a flaw such that by inserting a /ConsoleHelp/ into a URL, critical source code files may be viewed. %NASLMINLEVEL 70300 This script was written by John [email protected] Modifications by Tenable Network...
NOVL-2003-2966181 - HTTPSTK DOS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2003-2966181 Title: HTTPSTK DOS Date: 03-Jun-2003 Revision: Original Product Name: Netware OS/Platforms: Netware 6.x Reference URL:...
SonicWall Pro DoS?
Came across an apparent problem on a SonicWall Pro running firmware version 6.4.0.1 ROM version 5.0.1.0 during a vulnerability assessment and couldn't find any other postings on this problem so fwiw.. the problem occurs when sending a large HTTP POST to the inside interface - may affect others ju...
Apache 2.x - Memory Leak
/ apache-massacre.c Test code for Apache 2.x Memory Leak By Matthew Murphy DISCLAIMER: This exploit tool is provided only to test networks for a known vulnerability. Do not use this tool on systems you do not control, and do not use this tool on networks you do not own without appropriate consent...
@(#)Mordred Labs advisory - Integer overflow in PHP array_pad() function
//@ Mordred Security Labs advisory Release date: April 1, 2003 Name: Integer overflow in PHP arraypad function Versions affected: all versions Risk: average Author: Sir Mordred [email protected] I. Description: PHP is a widely-used general-purpose scripting language that is especially suited for...
Web Server Office File Inventory
This plugin connects to the remote web server and attempts to find office-related files such as .doc, .ppt, .xls, .pdf etc. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11419; scriptversion"1.31";...
Kaspersky Antivirus, Dr. Web and Symantec Antivirus DoS
To whom it may concern, Mr. James C Slora Jr, contacted Symantec on this issue. We investigated and determined that our AntiVirus products where not vulnerable. Mr. James C Slora Jr, also determined independently that our product was not vulnerable. Can you update your the page linked below to...
Anti-Nessus Defense Detection
It appears that the remote web server rejects requests from Nessus. It is possibly protected by a reverse proxy. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11238; scriptversion "$Revision: 1.26 $"; scriptnameenglish: "Anti-Nessus Defense Detection";...
DNS Server Detection
The remote service is a Domain Name System DNS server, which provides a mapping between hostnames and IP addresses. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11002; scriptversion"$Revision: 1.22 $"; scriptcvsdate"$Date: 2017/05/16 19:35:38 $";...
IBM AIX vulnerable to buffer overflow in RPC routines
Overview IBM AIX contains a possible buffer-overflow vulnerability. Description Version 4.3 of IBM AIX has a possible buffer-overflow vulnerability in its RPC routines, due to use of an incorrect variable data type. No further information is available from the vendor. --- Impact The complete impa...
uuuppz.com - Advisory 002 - mIRC $asctime overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 General Info - ------------ Researched by: James Martin Full advisory: http://www.uuuppz.com/research/adv-002-mirc.htm Exploit: Proof of concept code available at above URL. Product: mIRC Website: http://www.mirc.com Version: V6.00, V6.01, V6.02. Fix:...
Directory Manager edit_image.php Arbitrary Command Execution
Directory Manager is installed and does not properly filter user input. A remote attacker may use this flaw to execute arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid11104; scriptversion"1.26";...