MS Jet Database (msjet40.dll) DB File Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================= MS Jet Database msjet40.dll DB File Buffer Overflow Exploit ============================================================= / -------------------------------------- Microsoft Jet...

CVE-2005-0799

MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service application crash via a use command followed by an MS-DOS device name such as 1 LPT1 or 2 PRN...

CVE-2005-0799

MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service application crash via a use command followed by an MS-DOS device name such as 1 LPT1 or 2 PRN...

MS Internet Explorer "mshtml.dll" CSS Parsing Buffer Overflow

Exploit for unknown platform in category remote exploits ============================================================= MS Internet Explorer "mshtml.dll" CSS Parsing Buffer Overflow ============================================================= / The exploit will create a .CSS file that should be...

CVE-2004-0466

WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service hang via a URL containing an MS-DOS device name such as 1 AUX, 2 CON, 3 PRN, 4 COM1, or 5 LPT1...

OpenConnect Webconnect MS-DOS device name denial-of-service

Overview OpenConnect WebConnect may stop responding after processing an HTTP request with an MS-DOS device name in it. Description OpenConnect Webconnect provides secured web access and emulation services for backend mainframes and UNIX servers. Versions of Webconnect prior to 6.4.5 and 6.5.1...

CVE-2004-1675

Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service application crash via a STORE UNIQUE STOU command with an MS-DOS device name argument such as 1 COM1, 2 LPT1, 3 PRN, or 4 AUX...

CVE-2004-1514

04WebServer 1.42 is affected by a DoS vulnerability triggered by an HTTP request for an MS-DOS device name (e.g., COM2), causing the server to fail to restart properly. The CVE entry notes a partial availability impact. No additional exploit details or fixes are provided in the connected documents.

Microsoft Windows COM/OLE multiple bugs

Privilege escalation during parsing files with COM structure e.g. MS Office, buffer overflow on OLE objects, including MS Exchange MS-TNEF data format...

MS-SQL Server Protocol - General Settings (CAN-2000-1209; CVE-2002-1123)

...

MS-SQL Monitor Protocol (CVE-2002-0649; CVE-2002-0650)

...

CVE-2004-1514

04WebServer 1.42 allows remote attackers to cause a denial of service fail to restart properly via an HTTP request for an MS-DOS device name such as COM2...

CVE-2004-2224

Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service crash via an HTTP GET request that contains MS-DOS device names such as com1...

CVE-2004-2316

Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via a GET request containing an MS-DOS device name such as COM1...

CVE-2004-1841

SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request...

MS Internet Explorer Remote Code Execution with Parameters - PoC

Exploit for unknown platform in category remote exploits ================================================================ MS Internet Explorer Remote Code Execution with Parameters - PoC ================================================================ CMDExe - Windows Exploit - Remote code...

MS Windows Kernel ANI File Parsing Crash Vulnerability

Exploit for unknown platform in category dos / poc ====================================================== MS Windows Kernel ANI File Parsing Crash Vulnerability ====================================================== 111111111111111111111111111111 0day.today 2018-04-08...

Samba: Integer overflow

Background Samba is a freely available SMB/CIFS implementation which allows seamless interoperability of file and print services to other SMB/CIFS clients. Description Samba contains a bug when unmarshalling specific MS-RPC requests from clients. Impact A remote attacker may be able to execute...

Hydra: MS SQL

This plugin runs Hydra to find MS SQL passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

MS06-019 Exchange MODPROP Heap Overflow

This module triggers a heap overflow vulnerability in MS Exchange that occurs when multiple malformed MODPROP values occur in a VCAL request. Module Options msf use auxiliary/dos/windows/smtp/ms06/019exchange msf undefined019exchange show actions ...actions... msf undefined019exchange set ACTION...