Multiple Printer Providers (Spooler Service) - Local Privilege Escalation

/Private exploit- internal use only Title: Universal exploit for vulnerable printer providers spooler service. Vulnerability: Insecure EnumPrintersW calls Author: Andres Tarasco Acuña - [email protected] Website: http://www.514.es This code should allow to gain SYSTEM privileges with the following...

Multiple Printer Providers (Spooler Service) - Local Privilege Escalation

Multiple Printer Providers Spooler Service - Local Privilege Escalation /Private exploit- internal use only Title: Universal exploit for vulnerable printer providers spooler service. Vulnerability: Insecure EnumPrintersW calls Author: Andres Tarasco Acuña - [email protected] Website:...

Citrix Presentation/MetaFrame Server cpprov.dll畸形参数栈缓冲区溢出漏洞

Citrix Presentation Server允许用户通过网络远程访问应用程序。 Citrix Presentation Server的打印提供程序（ccprov.dll）在处理传送给EnumPrintersW和OpenPrinter函数的参数时存在栈溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果攻击者能够通过本地API调用或RPC请求向OpenPrinter传送超过130字节的超长字符串做为其第一个参数的话，就可以触发这个溢出，导致在本地系统环境中执行任意代码。 Citrix MetaFrame XP 1.0 Citrix Presentation Server...

Citrix Metaframe Presentation Server Print Provider Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================================= Citrix Metaframe Presentation Server Print Provider Buffer Overflow PoC ======================================================================= / Proof of concept exploit for...

Citrix Metaframe Presentation Server Print Provider - Buffer Overflow (PoC)

Citrix Metaframe Presentation Server Print Provider - Buffer Overflow PoC / Proof of concept exploit for ZDI - Citrix Metaframe spooler service vulnerability Microsoft Windows - EnumPrinter & EnumPrinterW Fuzzer v0.1 Author: Andres Tarasco Acuña - [email protected] url: http://www.514.es This is an...

Citrix Metaframe Presentation Server Print Provider - Buffer Overflow (PoC)

/ Proof of concept exploit for ZDI - Citrix Metaframe spooler service vulnerability Microsoft Windows - EnumPrinter & EnumPrinterW Fuzzer v0.1 Author: Andres Tarasco Acuña - [email protected] url: http://www.514.es This is an intial version of EnumPrinter and OpenPrinter fuzzer. I hope that it will...

Citrix Metaframe Presentation Server / Javvin DiskAccess printer provider buffer overflow

Buffer overflow in cpprov.dll EnumPrintersW and OpenPrinter functions...

ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability

ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-006.html January 24, 2007 -- CVE ID: CVE-2007-0444 -- Affected Vendor: Citrix -- Affected Products: Citrix Presentation Server 4.0 Citrix MetaFrame...

Immunity Canvas: CITRIX_PP

Name| citrixpp ---|--- CVE| CVE-2007-0444 Exploit Pack| CANVAS Description| Citrix MetaFrame XP Print Provider Overflow Notes| CVE Name: CVE-2007-0444 VENDOR: Citrix Notes: Platforms Tested: References: http://www.zerodayinitiative.com/advisories/ZDI-07-006.html CVE Url:...

CVE-2007-0444

Stack-based buffer overflow in the print provider library cpprov.dll in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the 1 EnumPrintersW and 2 OpenPrinter functions...

Stack overflow

Stack-based buffer overflow in the print provider library cpprov.dll in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the 1 EnumPrintersW and 2 OpenPrinter functions...

CVE-2007-0444

CVE-2007-0444 affects Citrix Presentation Server 4.0, Citrix MetaFrame Presentation Server 3.0, and Citrix MetaFrame XP 1.0. It is a stack-based/buffer overflow in the print provider library (cpprov.dll) that occurs when long arguments are passed to EnumPrintersW or OpenPrinter, allowing executio...

CVE-2007-0444

Stack-based buffer overflow in the print provider library cpprov.dll in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the 1 EnumPrintersW and 2 OpenPrinter functions...

Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of Citrix Presentation Server, Metaframe Presentation Server or MetaFrame XP. Authentication is not required to exploit this vulnerability. The specific flaw exists in a print provider...

CVE-2007-0444: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the print provider library cpprov.dll in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the 1 EnumPrintersW and 2 OpenPrinter functions...

Citrix Presentation Server Client wfica.ocx Buffer Overflow (CVE-2006-6334)

Citrix Presentation Server, a remote access application publishing product, is prone to a buffer overflow vulnerability. By convincing a user to visit a malicious Web page or open a malicious HTML, a remote attacker could cause the victim's system to execute arbitrary commands and take complete...

CVE-2007-0108

nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles...

Novell Client NWGINA.DLL User档案文件安全绕过漏洞

Novell Client是一款Novell系统客户端。 Novell Client存在安全绕过问题，远程攻击者可以利用漏洞在Citrix环境中调用其他用户的档案文件，导致提权等攻击。 目前没有详细漏洞细节提供。 Novell Client 4.91 SP3 可联系供应商获得解决方案： http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974970.htm...

CVE-2007-0108

The CVE-2007-0108 issue affects nwgina.dll in Novell Client 4.91 SP3 for Windows (2000/XP/2003). It does not delete user profiles during Terminal Service or Citrix sessions, enabling a remote authenticated user to invoke alternate user profiles. The description does not specify additional technic...

[SA23619] Novell Client User Profile Restriction Bypass

TITLE: Novell Client User Profile Restriction Bypass SECUNIA ADVISORY ID: SA23619 VERIFY ADVISORY: http://secunia.com/advisories/23619/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From local network SOFTWARE: Novell Client for Windows NT/2000/XP 4.x http://secunia.com/product/1516/...