CVE-2006-5961

CVE-2006-5961 concerns a buffer overflow in Mercury Mail Transport System (MercuryS) for Windows, specifically in the Mercury Mail Transport System 4.01b era. The connected records indicate a possible overlap with related issues (e.g., CVE-2007-4440) describing a stack-based/remote overflow in Me...

Microsoft XMLHTTP ActiveX control setRequestHeader vulnerability

Added: 11/17/2006 CVE: CVE-2006-5745 BID: 20915 OSVDB: 30208 Background Microsoft XML Core Services includes the XMLHTTP ActiveX control, which allows web pages to send and receive XML data. Problem A memory corruption vulnerability in the XMLHTTP ActiveX control allows command execution when a...

Immunity Canvas: MS06_066

Name| ms06066 ---|--- CVE| CVE-2006-4688 Exploit Pack| CANVAS Description| Microsoft Netware RPC Interface Overflow Notes| References: http://www.microsoft.com/technet/security/bulletin/ms06-066.mspx CVE Name: CVE-2006-4688 VENDOR: Microsoft MSADV: MS06-066 Repeatability: One shot Note: Date...

Immunity Canvas: MS06_070

Name| ms06070 ---|--- CVE| CVE-2006-4691 Exploit Pack| CANVAS Description| Microsoft Workstation Service Overflow Notes| CVE Name: CVE-2006-4691 VENDOR: Microsoft Notes: This exploit actually needs a domain reachable from the attacked machine Platforms Tested: MSADV: MS06-070 References:...

DSquare Exploit Pack: D2SEC_NOTES_USERID

Name| d2secnotesuserid ---|--- CVE| CVE-2006-5835 Exploit Pack| D2ExploitPack Description| IBM Lotus Notes User.ID File Key Information Disclosure Vulnerability Notes|...

Omni-NFS Server 5.2 (nfsd.exe) Remote Stack Overflow Exploit (meta)

No description provided by source. vdxlink.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it under the terms of the...

OpenLDAP 2.2.29 Remote Denial of Service Exploit (meta)

No description provided by source. vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it under the terms of th...

Immunity Canvas: PUNBB_LANGEXEC

Name| punbblangexec ---|--- CVE| CVE-2006-5735 Exploit Pack| CANVAS Description| punbblangexec Notes| CVE Name: CVE-2006-5735 VENDOR: informer.com Repeatability: Infinite References: http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities CVE Url:...

Omni-NFS Server 5.2 - nfsd.exe Remote Stack Overflow (Metasploit)

Omni-NFS Server 5.2 - nfsd.exe Remote Stack Overflow Metasploit vdxlink.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to us...

OpenLDAP 2.2.29 - Remote Denial of Service (Metasploit)

OpenLDAP 2.2.29 - Remote Denial of Service Metasploit vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it...

Microsoft Office Excel畸形公式大小栈溢出漏洞（MS06-012）

Microsoft Office Excel是非常流行的电子表格办公软件。 Microsoft Office Excel在处理Excel文档中的畸形描述时存在漏洞，攻击者可能利用此漏洞在客户机器上执行任意代码。 Microsoft Excel对opcode 0x0218的管理存在栈溢出漏洞。如果提供了特别大的公式大小，攻击者就可以触发此漏洞，可能允许远程执行代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pa...

MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit

Exploit for unknown platform in category remote exploits =================================================================== MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit ===================================================================...

Debian DSA-1181-1 : gzip - several vulnerabilities

Tavis Ormandy from the Google Security Team discovered several vulnerabilities in gzip, the GNU compression utility. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4334 A NULL pointer dereference may lead to denial of service if gzip is used in an...

MS06-0 1 1 vulnerability details, alleviating factors and associated with this FAQ-vulnerability warning-the black bar safety net

Vulnerability details: the May result in elevation of Privilege license of Windows Services DACLS: Windows XP Service Pack 1 On there is a privilege elevation vulnerability. By default, Windows XP Service Pack 1 on the identified Windows Services set the permission level may allow a low privilege...

Immunity Canvas: BRIGHTSTOR_MESSAGE

Name| brightstormessage ---|--- CVE| CVE-2006-5143 Exploit Pack| CANVAS Description| CA BrightStor ARCserve Backup RPC Interface Overflow Notes| CVE Name: CVE-2006-5143 VENDOR: Computer Associates Notes: Platforms Tested: References: http://dvlabs.tippingpoint.com/advisory/TPTI-06-11 CVE Url:...

GLSA-200609-13 : gzip: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200609-13 gzip: Multiple vulnerabilities Tavis Ormandy of the Google Security Team has reported multiple vulnerabilities in gzip. A stack buffer modification vulnerability was discovered in the LZH decompression code, where a...

Immunity Canvas: WS_FTPD_XCRC

Name| wsftpdxcrc ---|--- CVE| CVE-2006-5000 Exploit Pack| CANVAS Description| Ipswitch WSFTP Server XCRC Overflow Notes| CVE Name: CVE-2006-5000 VENDOR: IPSwitch Repeatability: One shot References: http://www.zerodayinitiative.com/advisories/ZDI-06-029.html CVE Url:...

Microsoft Security Bulletin MS06-052 Vulnerability in Pragmatic General Multicast (PGM) Could Allow Remote Code Execution (919007)

Microsoft Security Bulletin MS06-052 Vulnerability in Pragmatic General Multicast PGM Could Allow Remote Code Execution 919007 Published: September 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maxim...

Microsoft Security Bulletin MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (910729)

Microsoft Security Bulletin MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution 910729 Published: September 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Publisher Impact of Vulnerability: Remote Code Execution Maximum Severit...

Immunity Canvas: IMAIL_RCPTOVERFLOW

Name| imailrcptoverflow ---|--- CVE| CVE-2006-4379 Exploit Pack| CANVAS Description| IMail SMTPD32 Stack Overflow Notes| CVE Name: CVE-2006-4379 VENDOR: IPSwitch Post-exploitaion: Post-exploitation requires stoping and starting the IMail SMTP Server Service From a different process use...