3801 matches found
CVE-2007-2730
Technical details about CVE-2007-2730 are not publicly provided in the supplied documents. No explicit affected products, root cause, or fixes are described here. Monitor for updates from official advisories.
CVE-2007-2730
Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified...
CVE-2007-2729
CVE-2007-2729 affects Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81 (and likely older Comodo firewall versions). The issue arises from improper testing of equivalence of process identifiers for certain Windows API functions in the NT kernel (version 5.0 and greater). This a...
CVE-2007-2729: Undefined Security Weakness
Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these...
CVE-2007-1973
Race condition in the Virtual DOS Machine VDM in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206...
Race condition
Race condition in the Virtual DOS Machine VDM in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206...
CVE-2007-1973
CVE-2007-1973 describes a race condition in the Windows NTVDM (VDM) path where incorrect permissions on a mapped memory segment (PAGE_READWRITE to a PhysicalMemory view) allow a local user to modify memory and gain privileges via the \Device\PhysicalMemory handle. The related details indicate aff...
EEYE: Windows VDM Zero Page Race Condition Privilege Escalation
Windows VDM Zero Page Race Condition Privilege Escalation Release Date: April 10, 2007 Date Reported: December 12, 2006 Severity: Medium Local Privilege Escalation to Kernel Systems Affected: Windows NT 4.0 SP6 Windows 2000 SP4 Windows XP SP2 x86 Windows Server 2003 SP2 x86 Overview: eEye Digital...
CVE-2007-1973: Undefined Security Weakness
Race condition in the Virtual DOS Machine VDM in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206...
Race condition
The Virtual DOS Machine VDM in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions PAGEREADWRITE for a physical memory view, which allows local users to gain privileges by modifying th...
CVE-2007-1206
CVE-2007-1206 describes a Windows Kernel local privilege elevation due to incorrect permissions on a mapped memory segment (PAGE_READWRITE) for a physical memory view, enabling an unprivileged user to modify the zero page and gain privileges. Affected systems include Windows NT 4.0; 2000 SP4; XP ...
Corel Wordperfect X3 13.0.0.565 (.PRS) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ==================================================================== Corel Wordperfect X3 13.0.0.565 .PRS Local Buffer Overflow Exploit ==================================================================== / wp13exp.c - Wordperfect X3 remote...
FrontBase关系数据库服务器create procedure远程栈溢出漏洞
FrontBase是一款企业级的关系数据库服务器。 FrontBase在创建存储过程时存在栈溢出漏洞，允许攻击者获得NT AUTHORITY\SYSTEM或root用户权限。 如果攻击者通过“create procedure” SQL语句传送了超长参数的话，就可以触发这个溢出，导致内存破坏。例如，以下SQL语句： create procedure "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa...
Windows2000 under the administrator account really insecure-vulnerability warning-the black bar safety net
If you have an ordinary user account,there is a very simple method to get the NT Administrator account: One of: first c:\winnt\system32 under logon. the scr was renamed as logon. old backup Then put the usrmgr. exe renamed to logon. scr Then restart the logon. the scr is loaded at startup of the...
Microsoft Windows - DCE-RPC svcctl ChangeServiceConfig2A() Memory Corruption
!/usr/bin/python MS Windows DCE-RPC svcctl ChangeServiceConfig2A 0day Memory Corruption PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Windows 2000 SP4 Polish all patches Requires.. - Impacket : http://oss.coresecurity.com/projects/impacket.html - PyCrypto :...
ProSysInfo TFTP Server TFTPDWIN 0.4.2 - UDP Denial of Service
ProSysInfo TFTP Server TFTPDWIN 0.4.2 - UDP Denial of Service !/usr/bin/perl TFTPDWIN Server UDP DOS 0.4.2 POC written By : Umesh Wanve [email protected] ------------------------------------------------------------------------------- TFTPDWIN Server is a Freeware TFTP server for Windows 9x/NT/XP...
ProSysInfo TFTP Server TFTPDWIN 0.4.2 - 'UDP' Denial of Service
!/usr/bin/perl TFTPDWIN Server UDP DOS 0.4.2 POC written By : Umesh Wanve [email protected] ------------------------------------------------------------------------------- TFTPDWIN Server is a Freeware TFTP server for Windows 9x/NT/XP. http://www.tftpserver.prosysinfo.com.pl A vulnerability has...
Snort 2.6.1 - DCERPC Preprocessor Remote Buffer Overflow
Snort 2.6.1 - DCERPC Preprocessor Remote Buffer Overflow !/usr/bin/python Snort DCE/RPC Preprocessor Buffer Overflow Command Execution Version Author: Trirat Puttaraksa http://sf-freedom.blogspot.com For educational purpose only This exploit call calc.exe on Windows XP SP2 + Snort 2.6.1 Note: thi...
Snort 2.6.1 - DCE/RPC Preprocessor Remote Buffer Overflow
!/usr/bin/python Snort DCE/RPC Preprocessor Buffer Overflow Command Execution Version Author: Trirat Puttaraksa http://sf-freedom.blogspot.com For educational purpose only This exploit call calc.exe on Windows XP SP2 + Snort 2.6.1 Note: this exploit use Scapy http://www.secdev.org/projects/scapy/...
CVE-2002-2224
Buffer overflow in PGPFreeware 7.03 for Windows NT 4.0 SP6 can be triggered by crafted Internet Key Exchange (IKE) response packets (e.g., large SPI, many payloads, long payload), enabling remote DoS and potentially arbitrary code execution. No explicit remediation is provided in the available do...