RHEL 2.1 : stunnel (RHSA-2003:223)

Updated stunnel packages are now available. These updates correct a potential vulnerability in stunnel's signal handling. Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over a secure connection encrypted using SSL or TLS or to provide a...

Rlpr 2.04 - msg() Remote Format String

Rlpr 2.04 - msg Remote Format String by jaguar !/usr/bin/python import os, sys, socket, struct, time, telnetlib class rlprd: fd = None pad = 2 00000000 31DB xor ebx,ebx 00000002 F7E3 mul ebx 00000004 B003 mov al,0x3 00000006 80C304 add bl,0x4 00000009 89E1 mov ecx,esp 0000000B 4A dec edx 0000000C...

Important: Red Hat Security Advisory: stunnel security update

Updated stunnel packages are now available. These updates address problems stemming from improper use of non-reentrant functions in signal handlers. Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over an encrypted connection encrypted usin...

CCBILL CGI Remote Exploit for whereami.cgi (ccbillx.c)

Exploit for cgi platform in category web applications ====================================================== CCBILL CGI Remote Exploit for whereami.cgi ccbillx.c ====================================================== / ===================================== CCBILL CGI Remote Exploit for...

CCBILL CGI Remote Exploit for whereami.cgi (ccbillx.c)

No description provided by source. / ===================================== CCBILL CGI Remote Exploit for /ccbill/whereami.cgi By: Knight420 7/07/03 spawns a shell with netcat and attempts to connect into the server on port 6666 to gain access of the webserver uid C COPYRIGHT Blue Ballz , 2003 all...

Apache 2.0.44 (Linux) - Remote Denial of Service

/ th-apachedos.c Remote Apache DoS exploit ------------------------- Written as a poc for the: This program sends 8000000 \n's to exploit the Apache memory leak. Works from scratch under Linux, as opposed to apache-massacre.c . Daniel Nyström - www.telhack.tk - th-apachedos.c / include include...

CVE-2002-0720

A handler routine for the Network Connection Manager NCM in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code...

CVE-2002-0720

A handler routine for the Network Connection Manager NCM in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code...

MS02-042: Flaw in Network Connection Manager Could Enable Privilege Elevation (326886)

The remote host contains a flaw in the Network Connection Manager that may allow a local user to elevate his privileges. To exploit this vulnerability, a user needs to send a specially- crafted code to the Network Manager handle to execute arbitrary code with the privileges of the SYSTEM. C Tenab...

Windows 2000 Network Connection Manager privelege escalation

Callback function is called with system priveleges...

Security Bulletin MS02-042: Flaw in Network Connection Manager Could Enable Privilege Elevation (Q326886)

---------------------------------------------------------------------- Title: Flaw in Network Connection Manager Could Enable Privilege Elevation Q326886 Date: 14 August 2002 Software: Microsoft Windows 2000 Impact: Privilege elevation Max Risk: Critical Bulletin: MS02-042 Microsoft encourages...

Microsoft Windows Network Connection Manager (NCM) handler routine may execute code with LocalSystem privileges

Overview A locally exploitable vulnerability exists in the Microsoft Windows 2000 Network Connection Manager NCM. Exploitation of this vulnerability may permit a local user to gain full privileges on the system. Description Microsoft Windows 2000 Network Connection Manager NCM provides routines t...

CVE-2001-1435

inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service network connection loss by causing one of the services handled by inetd to core dump during startup, which causes inetd to stop accepting connections to all of its services...

Netscape Enterprise Server 4.0sparcSunOS 5.7 - Remote Command Execution

Netscape Enterprise Server 4.0sparcSunOS 5.7 - Remote Command Execution !/usr/bin/perl Remote sploit for Netscape Enterprise Server 4.0/sparc/SunOS 5.7 usage: ns-shtml.pl 'command line' | nc victim port Sometimes server may hang or coredump.. eek ;- [email protected] $cmdline="echo 'ingresloc...

Re: A funny way to DOS pcANYWHERE8.0 and 9.0

I also found on PCAnywhere version 8.0, if you accidently terminate a session e.g. unplug your network cable from your PC, get dropped from a dialup network connection, etc. that you hang up web, ftp, telnet, indexing, PCAnywhere and several other services on the host PC. The easiest way to recov...

Security Update (326886)

This update resolves the "Flaw in Network Connection Manager" security vulnerability in Windows 2000. Download now to help prevent a malicious user from gaining elevated privileges through the Network Connection Manager, and then running code of his or her choice on your computer...