Unchecked Buffer in PPTP Implementation Could Enable DOS Attacks (Q329834)

Hotfix to fix Unchecked Buffer in PPTP Implementation Q329834 is not installed. A security vulnerability results in the Windows 2000 and Windows XP implementations because of an unchecked buffer in a section of code that processes the control data used to establish, maintain and tear down PPTP...

CVE-2005-2972

Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the 1 ParseLevelText, 2 getCharsInsideBrace, 3 HandleLists, 4 or 5 HandleAbiLis...

[Full-disclosure] iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability

Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.20.05 www.idefense.com/application/poi/display?id=323&type=vulnerabilities October 20, 2005 I. BACKGROUND Ethereal is a full featured open source network protocol analyzer. For more information, see...

CVE-2005-2120

CVE-2005-2120 is a stack-based buffer overflow in the Windows Plug and Play (PnP) service (UMPNPMGR.DLL) on Windows 2000 SP4 and Windows XP SP1/SP2. The overflow occurs when processing a registry key name containing a large number of backslashes, triggered in wsprintfW, allowing remote or local a...

Microsoft Windows Client Service For Netware Buffer Overflow Vulnerability

Description Microsoft Client Service for Netware is prone to a buffer overflow vulnerability that could permit the execution of arbitrary remote code. A remote attacker can exploit this vulnerability to execute arbitrary code and completely compromise the computer. This issue could also be...

CVE-2005-2772

Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via 1 a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and 2 certain arguments when launching third party programs such as...

DameWare Mini Remote Control 4.0 4.9 - Client Agent Remote Overflow

DameWare Mini Remote Control 4.0 4.9 - Client Agent Remote Overflow / / / / / / / / \ / / // / / / / // // / / / .// //// ///====================== DameWare Mini Remote Control Client Agent Service Another Pre-Authentication Buffer Overflow By Jackson Pollocks No5 www.jpno5.com Summary...

x_osh2.pl.txt

!/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at this until it's removed ;- EDUCATIONAL purposes only.... :- by Charles Stevenson core Description: The Operator Shell Osh is a setuid root, security enhanced, restricted shell. It allows the administrator to carefully limit the access of special...

Microsoft Windows Print Spooler Buffer Overflow Vulnerability

Description Microsoft Windows Print Spooler service is prone to a buffer-overflow vulnerability. Specifically, this issue occurs when the Print Spooler service handles malformed messages containing excessive data. Exploiting this vulnerability allows attackers to escalate their privileges and gai...

Microsoft Internet Explorer COM Object Instantiation Buffer Overflow Vulnerability

Description Microsoft Internet Explorer is prone to a buffer-overflow vulnerability that is exposed when certain COM objects are instantiated as ActiveX controls. A malicious webpage could pass content to these objects to trigger memory corruption. Successful exploits could let remote attackers...

VulnCheck KEV: CVE-2005-1983

Stack-based buffer overflow in the Plug and Play PnP service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob aka Mytob worm...

Lantronix Secure Console Server SCS820/SCS1620 - Multiple Local Vulnerabilities

source: https://www.securityfocus.com/bid/14486/info Lantronix Secure Console Server SCS820/SCS1620 devices are susceptible to multiple local vulnerabilities. The first issue is an insecure default permission vulnerability. Attackers may exploit this vulnerability to write data to arbitrary files...

Lantronix Secure Console Server SCS820SCS1620 - Multiple Local Vulnerabilities

Lantronix Secure Console Server SCS820SCS1620 - Multiple Local Vulnerabilities source: https://www.securityfocus.com/bid/14486/info Lantronix Secure Console Server SCS820/SCS1620 devices are susceptible to multiple local vulnerabilities. The first issue is an insecure default permission...

Computer Associates BrightStor ARCserve Backup Agents vulnerable to buffer overflow

Overview Several Computer Associates BrightStor ARCserve Backup Agents contain a buffer overflow, which may allow a remote attacker to execute arbitrary code. Description Computer Associates BrightStor ARCserve Backup is a cross-platform backup and recovery application. Backup Agents are availabl...

GoodTech SMTP Server < 5.17 'RCPT TO' Command Remote Overflow (deprecated)

Binary data 3106.prm...

IBM Lotus Domino Server time/date Fields Remote Overflow

According to its banner, the remote host is running a version of Lotus Domino Server that is prone to a buffer overflow attack triggered by submitting a POST request with large amounts of data for certain date / time fields. A remote attacker can reportedly exploit this issue to crash the web...

Core Security Technologies Advisory 2005.0629

Core Security Technologies - Corelabs Advisory http://www.coresecurity.com/corelabs/ MailEnable Buffer Overflow Vulnerability Date Published: 2005-07-12 Last Update: 2005-07-12 Advisory ID: CORE-2005-0629 Bugtraq ID: None currently assigned CVE Name: None currently assigned Title: MailEnable Buff...

CORE-2005-0629: MailEnable Buffer Overflow Vulnerability

Core Security Technologies - Corelabs Advisory http://www.coresecurity.com/corelabs/ MailEnable Buffer Overflow Vulnerability Date Published: 2005-07-12 Last Update: 2005-07-12 Advisory ID: CORE-2005-0629 Bugtraq ID: None currently assigned CVE Name: None currently assigned Title: MailEnable Buff...

[VulnWatch] Buffer overflow vulnerability in VERITAS Software Backup Exec Web Administration Console &#40;BEWAC&#41;

Mark Litchfield of NGSSoftware has discovered a high risk vulnerability in the in VERITAS Software Backup Exec Web Administration Console BEWAC which can allow for remote code execution. Affected Products include - Backup Exec 10.0 for Windows Servers rev. 5484 Backup Exec 9.1 for Windows Servers...

TFTPD small overflow

It is possible to crash the remote TFTP server by sending a small UDP packet. A remote attacker could exploit this to crash the service. This script was written by Josh Zlatin-Amishav GNU Public Licence GPLv2 This plugin is just a very slightly modified version of tftpdoverflow.nasl...