2272 matches found
MS Windows DNS DnssrvQuery Remote Stack Overflow Exploit
No description provided by source. / Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows DNS DnssrvQuery Stack Overflow CVE-2007-1748 Description: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerabili...
Microsoft Windows - DNS DnssrvQuery Remote Stack Overflow
/ Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows DNS DnssrvQuery Stack Overflow CVE-2007-1748 Description: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary erro...
MS Windows Animated Cursor (.ANI) Stack Overflow Exploit
No description provided by source. / Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows .ANI LoadAniIcon Stack Overflow CVE-2007-1765 Description: A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to take complete...
MS Windows Animated Cursor (.ANI) Stack Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================== MS Windows Animated Cursor .ANI Stack Overflow Exploit ======================================================== / Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows .ANI LoadAniIcon...
MS02-012: Malformed Data Transfer Request can Cause Windows SMTP Service to Fail (313450)
The remote host contains a flaw in its SMTP service that could allow an attacker to crash it. Vulnerable services are SMTP service Windows XP/Windows 2000 and Exchange 2000 Windows 2000. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20885; scriptversion"1.29";...
Layered Defense Research Advisory: F-Secure Anti-Virus Client Security 6.02 Format String Vulnerability
================================================= Layered Defense Research Advisory 18 March 2007 ================================================= 1 Affected Software F-Secure Anti-Virus Client Security Version 6.02 ================================================= 2 Severity Rating: Low risk...
SOL7164 - Execution of UNIX shell commands from a URL without authentication
A URL that is accessible without first authenticating to the FirePass controller may be modified to inject UNIX shell commands. Under certain conditions, the commands can then be executed with user-level privileges. Any attacker with access to the FirePass logon page can theoretically launch this...
maildisable-v4.pl.txt
!/usr/bin/perl maildisable-v4.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Wed Nov 29 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.35 win32 Mail Enable Professional v2.37 win3...
SOL7147 - Execution of UNIX shell commands from the URL in the Admin UI
A URL that is accessible from the Device Management Maintenance Troubleshooting Tools page can be modified to inject UNIX shell commands, which are then executed with user-level privileges. Only FirePass Administrators with permission to access this URL can perform this action. Standard FirePass...
MailEnable Enterprise <= 2.32 - 2.34 Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl maildisable-v3.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Thu Nov 23 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.34 win32...
MailEnable IMAPD Enterprise 2.32 < 2.34 - Remote Buffer Overflow
!/usr/bin/perl maildisable-v3.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Thu Nov 23 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.34 win32 what does this remind you off? Note...
MailEnable Enterprise <= 2.32 - 2.34 Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl maildisable-v3.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Thu Nov 23 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.34 win32...
MailEnable Professional/Enterprise <= 2.35 Out of Bounds DoS Exploit
Exploit for unknown platform in category dos / poc ==================================================================== MailEnable Professional/Enterprise Connected\n"; sendSOCKET, "1 AUTHENTICATE NTLM\r\n", 0; sleep$senddelay; $buf = $PAD x 12. "\xfa\xff\xff\xff". $PAD x 12; sendSOCKET,...
SOL7053 - BIND 9 vulnerabilities - Dereferencing freed fetch context and DNSSEC Validation
This Solution describes vulnerability issues reported in BIND where a remote user can cause denial of service conditions by sending specifically crafted packets to the BIND server. The dereferencing freed fetch context issue results from an issue where the named daemon dereferences a freed fetch...
CVE-2007-0471
sre/params.php in the Integrity Clientless Security ICS component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie...
SQL Injection by using Cookie Poisoning for Website Baker Version 2.6.5 and before
Website Baker Version 2.6.5 and before contains a SQL injection. This can be exploited by using Cookie Poisoning Manufacturer was notified, but want to ignore the request pending release version 3.0 Poison the cookie for the login page with the REMEMBERKEY variable with a standard sql injection '...
[SA23855] Yana Framework Guestbook Profile Security Bypass
TITLE: Yana Framework Guestbook Profile Security Bypass SECUNIA ADVISORY ID: SA23855 VERIFY ADVISORY: http://secunia.com/advisories/23855/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Yana Framework 2.x http://secunia.com/product/13301/ DESCRIPTION: A vulnerability...
[SA23626] FirePass URL Restriction Bypass
TITLE: FirePass URL Restriction Bypass SECUNIA ADVISORY ID: SA23626 VERIFY ADVISORY: http://secunia.com/advisories/23626/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: FirePass 6.x http://secunia.com/product/13146/ FirePass 5.x...
SOL6806 - ClamAV UPX heap overflow Vulnerability - CVE-2006-4018
The FirePass controller can be configured to provide anti-virus scanning of files uploaded through Portal Access through the ClamAV open source software. A vulnerability in ClamAV 0.88.4 and earlier versions could allow a remote attacker to crash the scanner process or execute code remotely using...
SOL6923 - LDAP and RADIUS authentication failures can reveal a valid FirePass username
F5 Product Development tracked this issue as CR66767 for FirePass 5.5.1 and CR68628 for FirePass 6.0.0, and it was fixed in FirePass 5.5.2 and 6.0.1. For information about upgrading, refer to the FirePass release notes. Additionally, a hotfix has been issued for FirePass 5.5.1. Customers affected...