CentOS 5 : krb5 (CESA-2009:0408)

Updated krb5 packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authentica...

Youngzsoft CMailServer CMailCOM ActiveX Control Buffer Overflow

Youngzsoft CMailServer is a mail server and web mail server software, aimed for small to medium size companies. CMailServer enables sending and receiving emails over the Internet or within the LAN and has support for client email applications such as Outlook, Eudora etc. Also, it supports...

the iis left the back door method-vulnerability warning-the black bar safety net

The company mail server using jsp+mysql on windows is bound to use to the tomcat. However tomcat is installed later on windows the default is system permissions, as long as the Get a shell, the server will be done. So in the service inside had taken down the right way, make the tomcat service to...

Apache APR-util xml/apr_xml.c文件拒绝服务漏洞

BUGTRAQ ID: 35253 CVECAN ID: CVE-2009-1955 Apr-util是Apache所使用的Apache可移植运行时工具库。 APR-util库所使用的expat XML解析器（位于xml/aprxml.c文件的aprxml接口）在处理实体定义中包含有大量嵌套实体引用的XML文件时可能会耗尽所有可用的内存，导致拒绝服务的情况。所有使用APR-util库的expat wrapper接口解析不可信任XML文档的网络服务都受这个漏洞影响，如Apache httpd WebDAV模块moddav。 Apache Group APR-util 1.3.x 厂商补丁：...

krb5 security update

CentOS Errata and Security Advisory CESA-2009:0410-01 Updated krb5 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication...

RedHat Security Advisory RHSA-2009:0410

The remote host is missing updates announced in advisory RHSA-2009:0410. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center KDC. An input validation flaw was...

RedHat Security Advisory RHSA-2009:0410

The remote host is missing updates announced in advisory RHSA-2009:0410. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center KDC. An input validation flaw was...

PT-2009-2778 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from the Windows Management Instrumentation WMI provider not properly isolating processes running under the NetworkService or LocalService accounts. This coul...

RedHat Security Advisory RHSA-2009:0409

The remote host is missing updates announced in advisory RHSA-2009:0409. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center KDC. An input validation flaw was...

VulnCheck KEV: CVE-2009-0079

The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that 1 all run under the NetworkService account or 2 all run under the LocalService account, which allows local users to gain privileges by...

VulnCheck KEV: CVE-2008-1436

Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the 1 NetworkService and 2 LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second...

CentOS 3 : krb5 (CESA-2009:0410)

Updated krb5 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authentica...

Dns2TCP Service Detection

The remote service supports the DNS-to-TCP protocol. This protocol hides network traffic protocols by embedding the traffic within seemingly innocuous DNS queries. This service can be used to bypass firewalls or proxies by obfuscating the true protocol within the DNS protocol. %NASLMINLEVEL 70300...

Gentoo Security Advisory GLSA 200611-13 (avahi)

The remote host is missing updates announced in advisory GLSA 200611-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

cmailserver-seh.txt

0 strUID = arrStringi objPOP3.MoveToFolder strUID ' ---------------- bof ... By attaching olly to the w3wp.exe sub-process you will see the usual dump with ecx and eip owned, with a buffer of approxymately 13000 chars. Exploitation is post-auth but you can have a user account by simply browsing t...

CMailServer 5.4.6 (CMailCOM.dll) Remote SEH Overwrite Exploit

Exploit for unknown platform in category remote exploits ============================================================= CMailServer 5.4.6 CMailCOM.dll Remote SEH Overwrite Exploit ============================================================= 0 strUID = arrStringi...

Youngzsoft CMailServer 5.4.6 - CMailCOM.dll Remote Overwrite (SEH)

Youngzsoft CMailServer 5.4.6 - CMailCOM.dll Remote Overwrite SEH 0 strUID = arrStringi objPOP3.MoveToFolder strUID ' ---------------- bof ... By attaching olly to the w3wp.exe sub-process you will see the usual dump with ecx and eip owned, with a buffer of approxymately 13000 chars...

MDAP Service Detection

The remote service supports the Multi Directory Access Protocol MDAP, which is used to multicast commands to certain types of network devices, such as Thompson ADSL modems. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid32399; scriptversion"1.7"; scriptcvsdate"Date:...

Microsoft Security Bulletin MS08-006 – Important Vulnerability in Internet Information Services Could Allow Remote Code Execution (942830)

Microsoft Security Bulletin MS08-006 – Important Vulnerability in Internet Information Services Could Allow Remote Code Execution 942830 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This important update resolves a privately reported vulnerability in Internet...

Zoidcom 0.6.x - Malformed Packet Denial of Service

Zoidcom 0.6.x - Malformed Packet Denial of Service // source: https://www.securityfocus.com/bid/25326/info The Zoidcom network library is prone to a denial of service vulnerability when handling malformed packets. An attacker could exploit this to crash a network service that is implemented with...