CVE-2005-0044

The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."...

CVE-1999-1572

cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O archive or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files...

EEYE: Windows ANI File Parsing Buffer Overflow

Windows ANI File Parsing Buffer Overflow Systems Affected: Windows Me Windows 2000 Windows XP SP1 and earlier Windows 2003 Overview: eEye Digital Security has discovered a vulnerability in USER32.DLL's handling of Windows animated cursor .ani files that will allow a remote attacker to reliably...

[Full-Disclosure] [AppSecInc Team SHATTER Security Advisory] Microsoft Windows Improper Token Validation

Microsoft Windows Improper Token Validation AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/general/06-0001.html January 10, 2005 Credit: This vulnerability was discovered and researched by Cesar Cerrudo of Application Security, Inc. Risk Level: High Summary: A...

Solaris 2.5.12.678 rlogin (SPARC) - binlogin Remote Buffer Overflow

Solaris 2.5.12.678 rlogin SPARC - binlogin Remote Buffer Overflow / $Id: raptorrlogin.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorrlogin.c - rlogin, Solaris/SPARC 2.5.1/2.6/7/8 Copyright c 2004 Marco Ivaldi Buffer overflow in login in various System V based operating systems allows remote...

CVE-2004-0511

Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a null dereference...

win xp/2000/2003 Download File and Exec 241 bytes

win xp/2000/2003 Download File and Exec 241 bytes. Shellcode exploit for win32 platform / ----------------------------------------------------------------------- downloadurlv31.c - Download file and exec shellcode for Overflow exploit Copyright C 2000-2004 HUC All Rights Reserved. Author : lion :...

win xp/2000/2003 Connect Back shellcode for Overflow Exploit 275 bytes

win xp/2000/2003 Connect Back shellcode for Overflow exploit 275 bytes. Shellcode exploit for win32 platform / ----------------------------------------------------------------------- connectbackv32.c - Connect Back shellcode for Overflow exploit Copyright C 2000-2004 HUC All Rights Reserved. Auth...

[Full-Disclosure] EEYE: Windows VDM #UD Local Privilege Escalation

Windows VDM UD Local Privilege Escalation Release Date: October 12, 2004 Date Reported: March 18, 2004 Severity: Medium Local Privilege Escalation to Kernel Systems Affected: Windows NT 4.0 Windows 2000 Windows XP SP1 and earlier Windows Server 2003 Description: eEye Digital Security has discover...

bsd/x86 break chroot 45 bytes

Exploit for bsd/x86 platform in category shellcode ============================= bsd/x86 break chroot 45 bytes ============================= / BSD version FreeBSD, OpenBSD, NetBSD. email protected 45 bytes. -break chrooted / char shellcode= "\x68\x62\x2e\x2e\x2e" / pushl $0x2e2e2e62 / "\x89\xe7" ...

bsd/x86 - portbind port random 143 bytes

bsd/x86 portbind port random 143 bytes. Shellcode exploit for bsdx86 platform / Here is a BSD remote shellcode. Tested on NetBSD . SHould work on FreeBSD and OpenBSD . by MayheM ExileCrew www.exile2k.org / / 143 bytes / char shellcode = "\x31\xC0" "\x50" "\x50" "\xB0\x17" "\xCD\x80" // setuid...

Microsoft Windows - JPEG GDI+ Remote Heap Overflow (MS04-028)

Microsoft Windows - JPEG GDI+ Remote Heap Overflow MS04-028 / GDI+ JPEG Remote Exploit By John Bissell A.K.A. HighT1mes Exploit Name: ============= JpegOfDeath.c v0.5 Date Exploit Released: ====================== Sep, 23, 2004 Description: ============ Exploit based on FoToZ exploit but kicks the...

Buffer overflow in multiple OS telnetd

It's possible to overflow buffer with AYT telnet protocol command...

AOL Instant Messenger AIM - Away Message Remote (2)

AOL Instant Messenger AIM - Away Message Remote 2 / CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by John Bissell A.K.A. HighT1mes Exploit: ======== drizzit.c Vulnerable Software: ==================== - AIM 5.5.3588 - AIM 5.5.3590 Beta - AIM 5.5.3591 - AIM 5.5.3595 and a coup...

AOL Instant Messenger AIM - 'Away' Message Remote (2)

/ CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by John Bissell A.K.A. HighT1mes Exploit: ======== drizzit.c Vulnerable Software: ==================== - AIM 5.5.3588 - AIM 5.5.3590 Beta - AIM 5.5.3591 - AIM 5.5.3595 and a couple others versions... If you want to try other...

Cerbere HTTP Proxy Server Host: Header Remote DoS

The remote host is running Cerbere Proxy Server, a HTTP/FTP proxy server for Windows operating systems. It is reported that versions up to and including 1.2 are vulnerable to a remote denial of service in the 'Host:' HTTP field processing. An attacker may craft a malicious HTTP request with a lar...

IBM DB2 Semaphore Signaling - Denial of Service

IBM DB2 Semaphore Signaling - Denial of Service source: https://www.securityfocus.com/bid/11403/info A denial of service vulnerability has been reported in IBM DB2. This vulnerability is reported to only exist when DB2 is installed on Microsoft Windows operating systems. This issue is due to a...

IBM DB2 - Universal Database Information Disclosure

IBM DB2 - Universal Database Information Disclosure source: https://www.securityfocus.com/bid/11402/info An information disclosure vulnerability has been reported in IBM DB2. This vulnerability only exists when DB2 is installed on Microsoft Windows operating systems. This is due to a Windows...

IBM DB2 - Universal Database Information Disclosure

source: https://www.securityfocus.com/bid/11402/info An information disclosure vulnerability has been reported in IBM DB2. This vulnerability only exists when DB2 is installed on Microsoft Windows operating systems. This is due to a Windows permissions issue related to shared memory sections,...

IBM DB2 Semaphore Signaling - Denial of Service

source: https://www.securityfocus.com/bid/11403/info A denial of service vulnerability has been reported in IBM DB2. This vulnerability is reported to only exist when DB2 is installed on Microsoft Windows operating systems. This issue is due to a failure of the application to properly ensure that...