Microsoft Systems Management Server client memory corruption

Malcrafted data to TCP/2702 port causes memory corruption...

MS SMS DOS Proof-of-concept code and Snort sig

Advisory Name : Microsoft Systems Management Server Remote Denial Of Service Vulnerability Release Date : 22 July, 2004 Application : Microsoft Systems Management Server SMS Author : MacDefender / SRR Project Group of Ready Response [email protected] Overview In response to a remote denial of...

CVE-2004-0728

The Remote Control Client service in Microsoft's Systems Management Server SMS 2.50.2726.0 allows remote attackers to cause a denial of service crash via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address...

CVE-2004-0728

The CVE-2004-0728 entry describes a DoS in Microsoft SMS: the Remote Control Client Service (SMS 2.50.2726.0) can crash when receiving a specially crafted TCP packet to port 2702, causing invalid memory read/write. Documents confirm the component involved (Remote Control Service) and the vulnerab...

[HV-MED] DoS in Microsoft SMS Client

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Denial of Service DoS in Microsoft SMS Client Classification: =============== Level: low-MED-high-crit ID: HEXVIEW200407141 Overview: ========= Microsoft Systems Management Server provides configuration management solution for Windows platform. It is...

Microsoft Systems Management Server 1.22.0 - Remote Denial of Service

Microsoft Systems Management Server 1.22.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/10726/info Reportedly Microsoft Systems Management Server is vulnerable to a remote denial of service vulnerability. This issue is due to a failure of the affected server to handle...

Microsoft Systems Management Server 1.2/2.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10726/info Reportedly Microsoft Systems Management Server is vulnerable to a remote denial of service vulnerability. This issue is due to a failure of the affected server to handle exceptional conditions. Successful exploitation of this issue will allow a...

Dell OpenManage Server Administrator Detection

Dell OpenManage Server Administrator OMSA, a systems management server, is running on the remote host. %NASLMINLEVEL 70300 This script was rewritten by Tenable Network Security include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid12295; scriptversion"1.23";...

HP Web Jetadmin 7.5.2456 - Printer Firmware Update Script Arbitrary File Upload

source: https://www.securityfocus.com/bid/9971/info HP Web Jetadmin is prone to an issue which may permit remote users to upload arbitrary files to the management server. This issue exists in the printer firmware update script. Given the ability to place arbitrary files on the server to an...

Cisco IDS Device Manager Detection

This host is running the Cisco IDS device manager. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11689; scriptversion "1.16"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Cisco IDS Device Manager Detection"; scriptsummaryenglish:"Cisco IDS Management Web Serve...

CVE-2002-0718

Web authoring command in Microsoft Content Management Server MCMS 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function."...

CVE-2002-0700

Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server MCMS 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL...

CVE-2002-0718

CVE-2002-0718 affects Microsoft Content Management Server (MCMS) 2001. The vulnerability lies in the Web authoring function, allowing an attacker to authenticate and upload executable content by modifying the upload location (Program Execution via MCMS Authoring Function). Related data in the con...

CVE-2002-0719

SQL injection vulnerability in the function that services for Microsoft Content Management Server MCMS 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files...

CVE-2002-0700

This CVE concerns Microsoft Content Management Server (MCMS) 2001, where a buffer overflow in the Profile Service (an MDAC-related function used during user authentication) can allow an attacker to execute code in the Local System context by authenticating to a vulnerable web page. The issue is c...

Microsoft Content Management Server (MCMS) 2001 Multiple Remote Vulnerabilities

The remote host is running Microsoft Content Management Server. There is a buffer overflow in the Profile Service that could allow an attacker to execute arbitrary code on this host. C Tenable Network Security, Inc. Supercedes MS02-010 Thanks to Dave Aitel for the details. include"compat.inc"; if...

CVE-2003-0002

Cross-site scripting vulnerability XSS in ManualLogin.asp script for Microsoft Content Management Server MCMS 2001 allows remote attackers to execute arbitrary script via the REASONTXT parameter...

Microsoft Content Management Server crossite scripting

Crossite scripting in ManualLogin.asp...

Microsoft Security Bulletin MS03-002: Cumulative Patch for Microsoft Content Management Server (810487)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Cumulative Patch for Microsoft Content Management Server 810487 Date: 22 January 2003 Software: Microsoft Content Management Server 2001 Impact: Information Disclosure Max Risk:...

Microsoft Content Management Server 2001 - Cross-Site Scripting

Microsoft Content Management Server 2001 - Cross-Site Scripting source: https://www.securityfocus.com/bid/5922/info Microsoft Content Management Server 2001 is reported to be prone to cross-site scripting attacks. An attacker could construct a malicious link to a vulnerable host that contains...