598 matches found
Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6
Address Bar Spoofing Attacks against Microsoft Internet Explorer 6 Amit Klein, Trusteer Summary ======= IE6 is the second most popular web browser after IE7, with market share of around 25 according to recent surveys e.g. http://marketshare.hitslink.com/report.aspx?qprid=2. This write-up presents...
Anti-DNS Pinning and Java Applets with Opera and Firefox
Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for JavaScript outbound...
CVE-2007-5273
Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound...
Yahoo! Messenger (YVerInfo.dll <= 2007.8.27.1) ActiveX BoF Exploit
Exploit for unknown platform in category remote exploits ================================================================== Yahoo! Messenger YVerInfo.dll that functions are safely scriptable and exploitable by HeapSpray Technique Tested : Windows XP Professional SP2 all patched,Internet Explorer ...
CounterPath X-Lite 3.x - SIP phone Remote Denial of Service
/main.cpp/ include include using namespace std; ifdef WIN32 include pragma commentlib, "ws232.lib" define close closesocket define writea,b,c senda, b, c, 0 define writetoa,b,c,d,e sendtoa, b, c, 0, d, e define reada,b,c recva, b, c, 0 define readfroma,b,c,d,e recvfroma, b, c, 0, d, e else includ...
Remote DoS in libevent DNS parsing <= 1.2a
Author: Jon Oberheide [email protected] Date: Sun, February 18th, 2007 Summary ======= Application: libevent Affected Versions: 1.2 - 1.2a Vendor Website: http://monkey.org/provos/libevent/ Type of Vulnerability: Denial of Service - Remote Background ========== The libevent API provides a mechani...
Microsoft Windows - DNS Resolution Remote Denial of Service (PoC) (MS06-041)
Microsoft Windows - DNS Resolution Remote Denial of Service PoC MS06-041 !/usr/bin/python POC for MS06-041 Run the python script passing the local ip address as parameter. The DNS server will start listening on this ip address for DNS hostname resolution queries. This script is for testing and...
MS Windows DNS Resolution Remote Denial of Service PoC (MS06-041)
Exploit for unknown platform in category dos / poc ================================================================= MS Windows DNS Resolution Remote Denial of Service PoC MS06-041 ================================================================= !/usr/bin/python POC for MS06-041 Run the python...
Microsoft Windows - DNS Resolution Remote Denial of Service (PoC) (MS06-041)
!/usr/bin/python POC for MS06-041 Run the python script passing the local ip address as parameter. The DNS server will start listening on this ip address for DNS hostname resolution queries. This script is for testing and educational purpose and so to test this one will have to point the DNS...
Microsoft Winsock Gethostbyname远程缓冲区溢出漏洞（MS06-041）
Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的Winsock API Gethostbyname处理恶意的文件或WEB页面时存在溢出漏洞，如果用户受骗打开了恶意文件或访问了恶意的WEB站点的话就会触发这个漏洞，导致执行任意代码。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 Microsoft Windows 2000SP4...
Microsoft Security Bulletin MS06-041 Vulnerability in DNS Resolution Could Allow Remote Code Execution (920683)
Microsoft Security Bulletin MS06-041 Vulnerability in DNS Resolution Could Allow Remote Code Execution 920683 Published: August 8, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...
MS06-041: Vulnerability in DNS Resolution Could Allow Remote Code Execution (920683)
The remote host is vulnerable to a buffer overrun in the DNS client service that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. To exploit this vulnerability, an attacker would need to set up a rogue DNS server to reply to the client with a specially...
Code injection
180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent attackers to execute arbitrary code by subverting the DNS resolution of static.zangocash.com...
CVE-2006-2324
180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent attackers to execute arbitrary code by subverting the DNS resolution of static.zangocash.com...
CVE-2006-2324
180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent attackers to execute arbitrary code by subverting the DNS resolution of static.zangocash.com...
CVE-2006-2324: Undefined Security Weakness
180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent attackers to execute arbitrary code by subverting the DNS resolution of static.zangocash.com...
Mercur Mailserver 5.0 SP3 (IMAP) Remote Buffer Overflow Exploit
No description provided by source. / mercur.cpp Atrium Mercur IMAP 5.0 SP3 Messaging Multiple IMAP Commands Remote Exploit Copyright C 2006 Javaphile Group http://www.javaphile.org Exploits code by : pll Ellison.Tangatgmaildotcom Bug Reference: http://www.frsirt.com/bulletins/4332 / include stdio...
linux/x86 - TCP Proxy Shellcode 236 bytes
linux/x86 TCP Proxy Shellcode 236 bytes. Shellcode exploit for linx86 platform // proxylib.c - is located at http://www.milw0rm.com/id.php?id=1476 /str0ke / hey all.. this is my attempt at a very small very functional tcp proxy shellcode.. to pull this off i ignored the "socks" protocols and...
Ubuntu 4.10 : XML library vulnerabilities (USN-10-1)
Several buffer overflows have been discovered in libxml2's FTP connection and DNS resolution functions. Supplying very long FTP URLs or IP addresses might result in execution of arbitrary code with the privileges of the process using libxml2. Since libxml2 is used in packages like php4-imagick, t...
CVE-2005-0205
KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of...