Immunity Canvas: MS07_065

Name| ms07065 ---|--- CVE| CVE-2007-3039 Exploit Pack| CANVAS Description| Microsoft Message Queuing Service Overflow Notes| CVE Name: CVE-2007-3039 VENDOR: Microsoft MSADV: MS07-065 Repeatability: One shot Note: Windows XP needs a valid Username and Password. According to the SWI Weblog: " There...

Microsoft Message Queuing queue name buffer overflow

Added: 12/12/2007 CVE: CVE-2007-3039 BID: 26797 OSVDB: 39123 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow vulnerability in the Microsoft Message Queuing service allows remote attackers t...

Microsoft Security Bulletin MS07-065 – Important Vulnerability in Message Queuing Could Allow Remote Code Execution (937894)

Microsoft Security Bulletin MS07-065 – Important Vulnerability in Message Queuing Could Allow Remote Code Execution 937894 Published: December 11, 2007 Version: 1.0 General Information Executive Summary This important security update resolves a privately reported vulnerability in Message Queuing...

ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability

ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-076.html December 11, 2007 -- CVE ID: CVE-2007-3039 -- Affected Vendor: Microsoft -- Affected Products: Windows 2000 SP4 Windows XP SP2 -- TippingPointTM IPS...

Microsoft Message Queuing queue name buffer overflow

Added: 12/12/2007 CVE: CVE-2007-3039 BID: 26797 OSVDB: 39123 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow vulnerability in the Microsoft Message Queuing service allows remote attackers t...

Microsoft Message Queuing queue name buffer overflow

Added: 12/12/2007 CVE: CVE-2007-3039 BID: 26797 OSVDB: 39123 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow vulnerability in the Microsoft Message Queuing service allows remote attackers t...

CVE-2007-3039

Stack-based buffer overflow in the Microsoft Message Queuing MSMQ service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable...

CVE-2007-3039

CVE-2007-3039 describes a stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service RPC interface. A long string in an opnum 0x06 RPC call to port 2103 can allow remote code execution on affected systems. The vulnerable products and versions include Windows 2000 Server SP4, Wind...

Microsoft Message Queuing queue name buffer overflow

Added: 12/12/2007 CVE: CVE-2007-3039 BID: 26797 OSVDB: 39123 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow vulnerability in the Microsoft Message Queuing service allows remote attackers t...

MS07-065: Vulnerability in Message Queuing Could Allow Remote Code Execution (937894) (uncredentialed check)

The remote version of Windows is affected by a vulnerability in the Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. The non-credentialed check only works against Windows...

Microsoft Windows Message Queuing Service Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows with the Message Queuing Service enabled. Authentication is not required to exploit this vulnerability. The specific flaw exists in the RPC interface defined on port 2103 with UUI...

MS07-065: Vulnerability in Message Queuing Could Allow Remote Code Execution (937894)

The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29309;...

Microsoft Message Queuing Service Stack Buffer Overflow Vulnerability

Description Microsoft Message Queuing MSMQ is prone to a stack-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges, facilitating the...

CVE-2007-5331

Queue.dll for the message queuing service LQserver.exe in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malformed ONRPC protocol request for operation 0x76, which causes ARCserve Backup to dereference...

Stack overflow

Stack-based buffer overflow in the Message Queuing Server Cam.exe in CA formerly Computer Associates Message Queuing CAM / CAFT software before 1.11 Build 544 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, an...

CVE-2007-0060

Stack-based buffer overflow in the Message Queuing Server Cam.exe in CA formerly Computer Associates Message Queuing CAM / CAFT software before 1.11 Build 544 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, an...

CA Multiple Products Message Queuing Server (Cam.exe) Remote Overflow

The remote version of CA Message Queuing Service contains a stack overflow that may allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. vendor advisory: Affected...

CVE-2007-0060

CA CVE-2007-0060 affects CA Message Queuing (CAM/CAFT) Server. A stack-based buffer overflow in CAM/CAFT before version 1.11 Build 54_4 on Windows/NetWare allows remote code execution by sending a crafted message to TCP port 3104. Impact described as remote arbitrary code execution with potential...

CVE-2007-0060

Stack-based buffer overflow in the Message Queuing Server Cam.exe in CA formerly Computer Associates Message Queuing CAM / CAFT software before 1.11 Build 544 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, an...

[Full-disclosure] [CAID 35527]: CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 35527: CA Message Queuing CAM / CAFT Buffer Overflow Vulnerability CA Vuln ID CAID: 35527 CA Advisory Date: 2007-07-24 Reported By: Paul Mehta of ISS X-Force Impact: A remote attacker can execute arbitrary code. Summary: Multiple CA produc...