CVE-2003-1407

The CVE-2003-1407 entry concerns a buffer overflow in cmd.exe on Windows NT 4.0 that can allow a local user to execute arbitrary code via a long pathname argument to the cd command. The NVD summary indicates a local-exploit scenario with no authentication and a high impact (confidentiality, integ...

CVE-2003-1407

Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command...

CVE-2003-1407: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command...

openSUSE 10 Security Update : samba (samba-2553)

A logic error in the deferred open code can lead to an infinite loop in Samba's smbd daemon CVE-2007-0452. In addition the following changes are included with these packages : - Move tdb utils to the client package. - Add version of the package subversion to Samba vendor version suffix. - Fix tim...

CVE-2003-1357: Undefined Security Weakness

ProxyView has a default administrator password of Administrator for Embedded Windows NT, which allows remote attackers to gain access...

dnewsweb-xss.txt

HSC DNewsWeb Softwares Cross Site Scripting Vulrnability The DNews News Server is advanced news server software that makes it easy for you to provide users with fast access to Internet Usenet news groups. Installing your own l ocal news server software also gives you complete control to create yo...

Important: kernel security update

2.6.18-8.1.14.0.2.el5 - Fix bonding primary=ethX Bert Barbe IT 101532 ORA 5136660 - Add entropy module option to e1000/bnx2 John Sobecki ORA 6045759 2.6.18-8.1.14.el5 - Revert changes back to 2.6.18-8.1.10. - x8664 Zero extend all registers after ptrace in 32bit entry path Anton Arapov 297871...

Microworld eScan (Multiple Products) - Local Privilege Escalation

source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful...

Microworld eScan (Multiple Products) - Local Privilege Escalation

Microworld eScan Multiple Products - Local Privilege Escalation source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to...

Windows平台的Cisco VPN客户端多个本地权限提升漏洞

BUGTRAQ ID: 25332 Cisco VPN客户端允许用户创建到支持Cisco VPN设备的IPSec VPN隧道。 Microsoft Windows的Cisco VPN客户端中存在两个漏洞，允许本地非特权用户提升权限。 1. 通过Microsoft Windows拨号网络接口的本地权限提升 非特权用户可以通过启用Start Before Logon（SBL）功能并配置VPN配置使用Microsoft拨号网络接口将权限提升到LocalSystem帐号用户的权限。如果同时启用并配置了这两个设置，就可以在Windows登录窗口中使用Cisco...

DEBIAN-CVE-2007-4200

ntfs.c in fsstat in Brian Carrier The Sleuth Kit TSK before 2.09 interprets a certain variable as a byte count rather than a count of 32-bit integers, which allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain NTFS files via a...

Windows rshd buffer overflow

Added: 08/03/2007 CVE: CVE-2007-4006 BID: 25044 OSVDB: 38572 Background The Windows implementation of RSHD is a remote shell daemon which has been adapted to run on Windows platforms. Problem A buffer overflow vulnerability in the Windows implementation of RSHD allows remote attackers to execute...

Windows rshd buffer overflow

Added: 08/03/2007 CVE: CVE-2007-4006 BID: 25044 OSVDB: 38572 Background The Windows implementation of RSHD is a remote shell daemon which has been adapted to run on Windows platforms. Problem A buffer overflow vulnerability in the Windows implementation of RSHD allows remote attackers to execute...

Windows rshd buffer overflow

Added: 08/03/2007 CVE: CVE-2007-4006 BID: 25044 OSVDB: 38572 Background The Windows implementation of RSHD is a remote shell daemon which has been adapted to run on Windows platforms. Problem A buffer overflow vulnerability in the Windows implementation of RSHD allows remote attackers to execute...

Advisory: Arbitrary kernel mode memory writes in AVG

======= Summary ======= Name: Arbitrary kernel mode memory writes in AVG Antivirus Release Date: 10 July 2007 Reference: NGS00500 Discover: Jonathan Lindsay john-lindsay ngssoftware com Vendor: Grisoft Vendor Reference: N/A Systems Affected: Windows NT based systems Risk: High Status: Fixed...

Microsoft Internet Explorer Document.Domain跨域同源覆盖漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在绕过同源策略问题，远程攻击者可以利用漏洞访问其他目标域或者进行内容伪造攻击。 攻击者可以通过修改document.domain中的值，构建恶意WEB页，诱使用户访问来触发。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Citrix ICA Client for Windows 4.0...

Fusetalk SQL injection submission.

Greetings, I have found sql injection in FuseTalk 2.0 during a legitmate audit. Resending because I got MIME errors to [email protected]. I have exchanged emails with [email protected] who needed more information when I originally sent an email to [email protected] Operating...

win32 IsDebuggerPresent ShellCode NT/XP 39 bytes

win32 IsDebuggerPresent ShellCode NT/XP 39 bytes. Shellcode exploit for win32 platform / Shellcode Length: 39 bytes / / sets PEB-BeingDebugged to 0 / / IsDebuggerPresent/BeingDebugged bypass / / by ex-pb @ [email protected] / / greets: xgx and all i forgot / include include char ShellCode = "\xEB"...

win32 IsDebuggerPresent ShellCode (NT/XP) 39 bytes

Exploit for win32 platform in category shellcode ================================================== win32 IsDebuggerPresent ShellCode NT/XP 39 bytes ================================================== / Shellcode Length: 39 bytes / / sets PEB-BeingDebugged to 0 / / IsDebuggerPresent/BeingDebugged...

Design/Logic Flaw

Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these...