CVE-2009-2227

Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810...

CVE-2009-2227

CVE-2009-2227 is a stack-based buffer overflow in Blabsoft Bopup Communication Server 3.2.26.5460. A crafted request sent to TCP port 19810 can allow a remote attacker to execute arbitrary code. Root cause is a stack overflow in the server process; public exploit activity exists (e.g., Metasploit...

CVE-2009-2227

Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810...

Details of the Nine-Ball Mass Injection Attack

From Websense Security Labs Early last week, we posted an alert about a mass injection attack in the wild we named Nine-Ball. This attack compromised over 40,000 legitimate Web sites in an ongoing campaign. The scale of the attack was spotted June 2, 2009, and since then the campaign has evolved...

Edraw PDF Viewer Component Code Execution

Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component target.FtpConnect "ftp://192.168.220.201", "test", "tester" target.FtpDownloadF...

Edraw PDF Viewer Component < 3.2.0.126 ActiveX Insecure Method vulnerability

No description provided by source. Edraw PDF Viewer Component ActiveX Remote code execution vulnerability By Jambalaya of Nevis Labs Date: 2009.06.16 Vender: EdrawSoft Affected: Edraw PDF Viewer Component 3.2.0.126 other version may also be affected Overview: "Edraw PDF Viewer Component is a ligh...

iDefense Security Advisory 06.11.09: Microsoft Windows 2000 Print Spooler Remote Stack Buffer Overflow Vulnerability

iDefense Security Advisory 06.09.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 09, 2009 I. BACKGROUND The Windows Print Spooler manages the printing process, and loads files to memory for later printing. For more information about Print Spooler, please visit following website:...

TELUS Security Labs VR - Microsoft Office Excel Malformed Records Stack Buffer Overflow

Microsoft Office Excel Malformed Records Stack Buffer Overflow TSL ID : FSC20090609-01 Reference: http://telussecuritylabs.com/threats/show/FSC20090609-01 1. Affected Software Microsoft Office Excel 2000 Microsoft Office Excel 2002 Reference: http://office.microsoft.com/en-us/excel/default.aspx 2...

Virtue Book Store (cid) Remote SQL Injection Vulnerability

No description provided by source. CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : ? $web = $argv1; $url =...

NSD vulnerable to one-byte overflow

Overview A vulnerability exists in the way NSD processes certain types of packets that may lead to a one-byte buffer overflow. Description Name server daemon NSD is an open source name server developed by NLnet Labs. NSD contains an off-by-one error that can cause a one-byte buffer overflow when...

New Windows netbooks may harbor malware

From Computerworld Gregg Keizer After discovering attack code on a brand new Windows XP netbook, anti-virus vendor Kaspersky Labs warned users yesterday that they should scan virgin systems for malware before connecting them to the Internet. When Kaspersky developers installed their...

How to defend against botnet attacks

Botnets have become one of the more insidious threats on the Internet in the last few years. Large-scale botnets such as the Storm, Asprox and Nugache networks have caused tremendous problems by serving as platforms for spamming operations, DDoS attacks and other mischief. In this podcast from...

iDefense Security Advisory 05.12.09: Microsoft PowerPoint Notes Container Heap Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 05.12.09 http://labs.idefense.com/intelligence/vulnerabilities/ May 12, 2009 I. BACKGROUND Microsoft PowerPoint is an application used for constructing presentations, and comes with the Microsoft Office suite. For more...

iDefense Security Advisory 05.12.09: Microsoft PowerPoint Build List Memory Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 05.12.09 http://labs.idefense.com/intelligence/vulnerabilities/ May 12, 2009 I. BACKGROUND Microsoft PowerPoint is an application used for constructing presentations, and comes with the Microsoft Office suite. For more...

Solaris 10 OpenSolaris - dtrace Local Kernel Denial of Service (PoC)

Solaris 10 OpenSolaris - dtrace Local Kernel Denial of Service PoC / solaris-dtrace-dos.c Copyright c 2008 by Solaris = 10/Opensolaris local kernel DoS POC by mu-b - Mon 17 Nov 2008 - Tested on: Sun Solaris 10 SPARC Sun OpenSolaris include include include include include include include include...

Solaris 10 OpenSolaris - fasttrap Local Kernel Denial of Service (PoC)

Solaris 10 OpenSolaris - fasttrap Local Kernel Denial of Service PoC / solaris-fasttrap-dos.c Copyright c 2008 by Solaris = 10/Opensolaris local kernel DoS POC by mu-b - Wed 19 Nov 2008 - Tested on: Sun Solaris 10 SPARC Sun OpenSolaris include include include include include include define...

Solaris 10 / OpenSolaris - 'dtrace' Local Kernel Denial of Service (PoC)

/ solaris-dtrace-dos.c Copyright c 2008 by Solaris = 10/Opensolaris local kernel DoS POC by mu-b - Mon 17 Nov 2008 - Tested on: Sun Solaris 10 SPARC Sun OpenSolaris include include include include include include include include include define DTRACEHELPER "/dev/dtrace/helper" static unsigned int...

Solaris 10 / OpenSolaris - 'fasttrap' Local Kernel Denial of Service (PoC)

/ solaris-fasttrap-dos.c Copyright c 2008 by Solaris = 10/Opensolaris local kernel DoS POC by mu-b - Wed 19 Nov 2008 - Tested on: Sun Solaris 10 SPARC Sun OpenSolaris include include include include include include define DTRACEFASTTRAP "/devices/pseudo/fasttrap@0:fasttrap" void hammer void addr...

Internet Download Manager language file parsing stack overflow vulnerability-vulnerability warning-the black bar safety net

Affects versions: Tonec Inc Internet Download Manager 5.15 Build 3 Test method: PoC Internet Download Manager v. 5. 1 5 Build 3 4 In December Works on Vista HellCode Labs || TCC Group || http://tcc.hellcode.net The Bug was found by "musashi" aka karak0rsan [email protected] thanx to murderkey...

Microsoft GDI Plugin .png Infinite Loop Denial of Service PoC

No description provided by source. ! /usr/bin/perl CALgdiplugpoc.pl MircosoftgdiplugpnginfinityloopD.o.S POC by Code Audit Labs public 2009-04-17 http://www.vulnhunt.com/ Affected ======== test on full updated winxp sp3 other version should be affected CVE: please assign to a CVE number DESCRIPTI...