Exploit Labs Security Advisory 2006.1

------------------------------------------------------------ - EXPL-A-2006-001 exploitlabs.com Advisory 047 - ------------------------------------------------------------ - AspTopSites - AFFECTED PRODUCTS ================= AspTopSites http://www.maine-net.com/aspts.asp OVERVIEW ========...

CVE-2005-4703

Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto...

phpbb2.0.19 fixes security issues

re: http://www.phpbb.com/phpBB/viewtopic.php?t=352966 Sec fixed XSS issue only valid for Internet Explorer within the url bbcode Sec fixed XSS issue only valid for Internet Explorer if html tags are allowed and enabled Sec added configurable maximum login attempts to prevent dictionary attacks...

BrightStor ARCserve Backup agent for MS-SQL buffer overflow

Added: 12/20/2005 CVE: CVE-2005-1272 BID: 14453 OSVDB: 18501 Background BrightStor ARCserve Backup is a backup and recovery solution for multiple platforms. Problem A buffer overflow in the backup agent for Microsoft SQL Server allows remote attackers to execute arbitrary commands. Resolution App...

BrightStor ARCserve Backup agent for MS-SQL buffer overflow

Added: 12/20/2005 CVE: CVE-2005-1272 BID: 14453 OSVDB: 18501 Background BrightStor ARCserve Backup is a backup and recovery solution for multiple platforms. Problem A buffer overflow in the backup agent for Microsoft SQL Server allows remote attackers to execute arbitrary commands. Resolution App...

BrightStor ARCserve Backup agent for MS-SQL buffer overflow

Added: 12/20/2005 CVE: CVE-2005-1272 BID: 14453 OSVDB: 18501 Background BrightStor ARCserve Backup is a backup and recovery solution for multiple platforms. Problem A buffer overflow in the backup agent for Microsoft SQL Server allows remote attackers to execute arbitrary commands. Resolution App...

BrightStor ARCserve Backup agent for MS-SQL buffer overflow

Added: 12/20/2005 CVE: CVE-2005-1272 BID: 14453 OSVDB: 18501 Background BrightStor ARCserve Backup is a backup and recovery solution for multiple platforms. Problem A buffer overflow in the backup agent for Microsoft SQL Server allows remote attackers to execute arbitrary commands. Resolution App...

MS Internet Explorer 6.0 (pre tag multiple single tags) Denial of Service

No description provided by source. !DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd" html head titleLets IE crash/title style type="text/css" pre white-space:normal; /style /head body pre span /span / /pre /body /html milw0rm.c...

IISWorks ASP KnowledgeBase 2.x XSS vuln.

IISWorks ASP KnowledgeBase 2.x XSS vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/iisworks-asp-knowledgebase-2x-xss-vuln.html vendor:http://www.iisworks.com/aspkb/ affected version:2.x and prior Product Description: 100 ASP based Knowledge ba...

phpBB Blog 2.2.2 SQL inj. vuln.

phpBB Blog 2.2.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpbb-blog-222-sql-inj-vuln.html vendor:http://www.outshine.com/phpbbblog/ affected version:2.2.2 and prior Product Description: This is a blog system for phpBB. It...

MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)

No description provided by source. / Author: Winny Thomas Pune, INDIA The crafted metafile WMF from this code when viewed in explorer crashes it. The issue is seen when the field 'mtNoObjects' in the Metafile header is set to 0x0000. The code was tested on Windows 2000 server SP4. The issue does...

CVE-2005-3887

Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to 1 cause a denial of service hang via an image filename of AUX: sent twice hang, or 2 write to the LPT1 port via a filename of "LPT1:"...

CVE-2005-3887

Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to 1 cause a denial of service hang via an image filename of AUX: sent twice hang, or 2 write to the LPT1 port via a filename of "LPT1:"...

CVE-2005-3887

CVE-2005-3887 affects Gadu-Gadu 7.20. The vulnerability arises from improper handling of MS-DOS device names in filenames, enabling a remote attacker to cause a denial of service (hang) with an image filename like AUX: and potentially write to the LPT1 port using a filename such as "LPT1:". The c...

CVE-2003-1287

Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device...

CVE-2003-1270

AN HTTP 1.41e allows remote attackers to cause a denial of service borken pipe via an HTTP request to aux.cgi with a long argument, possibly triggering a buffer overflow or MS-DOS device vulnerability...

CVE-2003-1267

GuildFTPd 0.999 allows remote attackers to cause a denial of service crash via a GET request for MS-DOS device names such as lpt1...

CVE-2003-1270

CVE-2003-1270 is a remote-denial-of-service vulnerability where an HTTP 1.41e server may be triggered by sending a long argument to aux.cgi, potentially causing a buffer overflow or MS-DOS device vulnerability. The connected documents confirm the issue exists and describe the impact as an unauthe...

CVE-2003-1274

Winamp 3.0 allows remote attackers to cause a denial of service crash via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux...

MS Windows 2k UPNP (getdevicelist) Memory Leak DoS Exploit

Exploit for unknown platform in category dos / poc ========================================================== MS Windows 2k UPNP getdevicelist Memory Leak DoS Exploit ========================================================== / Author: Winny Thomas Nevis Labs, Pune, INDIA Details: While working o...