MS02-014:Windows Shell 未检查缓冲器 - NT4

CVE ID: CVE-2002-0070 Windows Shell 负责提供 Windows 使用者介面的基本架构, 例如 Windows 桌面, 也提供其他重要的功能辅助定义及掌握使用者的电脑使用情形, 包括使用的档案及目录, 提供开启档案该使用哪个应用程式等. Windows Shell 在一个帮助寻找系统上未被完全移除的应用程式功能存在未充分检查缓冲区的瑕疵, 这一个未经检查的缓冲区可以被攻击者用来进行缓冲区越位Buffer Overrun攻击, 原则上这个漏洞不能经由远端攻击, 但可以被网页及 HTML 格式的电子邮件攻击. 如果使用者安装应用程式後移除一些含有自订 URL...

DSquare Exploit Pack: D2SEC_JAVAWS2

Name| d2secjavaws2 ---|--- CVE| CVE-2008-3112 Exploit Pack| D2ExploitPack Description| Sun Java Web Start Sandbox Bypass Vulnerability Notes|...

Immunity Canvas: FIREFOX_DEFINESETTER

Name| firefoxdefinesetter ---|--- CVE| CVE-2008-2798 Exploit Pack| CANVAS Description| Firefox = 2.0.0.14 Javascript defineSetter Memory Corruption Notes| CVE Name: CVE-2008-2798 VENDOR: Mozilla Repeatability: Infinite client side - crash the browser CVS URL:...

DSquare Exploit Pack: D2SEC_SNPVW2

Name| d2secsnpvw2 ---|--- CVE| CVE-2008-2463 Exploit Pack| D2ExploitPack Description| Microsoft Office Snapshot Viewer ActiveX Vulnerability - Generic Version Notes|...

Immunity Canvas: MS08_034

Name| ms08034 ---|--- CVE| CVE-2008-1451 Exploit Pack| CANVAS Description| Microsoft WINS Server Vulnerability Notes| CVE Name: CVE-2008-1451 VENDOR: Microsoft MSADV: MS08-034 Repeatability: Infinite MSRC: http://www.microsoft.com/technet/security/Bulletin/MS08-034.mspx CVS URL:...

[security bulletin] HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01362558 Version: 1 HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted...

DSquare Exploit Pack: D2SEC_SUNASP2

Name| d2secsunasp2 ---|--- CVE| CVE-2008-2403 Exploit Pack| D2ExploitPack Description| Sun Java System Active Server Pages Directory Traversal Notes|...

DSquare Exploit Pack: D2SEC_SUNASP1

Name| d2secsunasp1 ---|--- CVE| CVE-2008-2402 Exploit Pack| D2ExploitPack Description| Sun Java System Active Server Pages Information Disclosure Notes|...

DSquare Exploit Pack: D2SEC_CREATIVE

Name| d2seccreative ---|--- CVE| CVE-2008-0955 Exploit Pack| D2ExploitPack Description| Creative Software AutoUpdate Engine ActiveX Stack Overflow Notes|...

DSquare Exploit Pack: D2SEC_SAMETIME

Name| d2secsametime ---|--- CVE| CVE-2008-2499 Exploit Pack| D2ExploitPack Description| IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability Notes|...

DSquare Exploit Pack: D2SEC_LOTUS_DOMINO_HTTP

Name| d2seclotusdominohttp ---|--- CVE| CVE-2008-2240 Exploit Pack| D2ExploitPack Description| IBM Lotus Domino Web Server Accept-Language HTTP Header Buffer Overflow Vulnerability Notes|...

Immunity Canvas: LOTUS_DOMINO_HTTP

Name| lotusdominohttp ---|--- CVE| CVE-2008-2240 Exploit Pack| CANVAS Description| Lotus Domino 8.0.0 HTTP Server - Accept-Language Overflow Notes| References: http://osvdb.org/show/osvdb/45415 CVE Name: CVE-2008-2240 VENDOR: IBM Notes: Repeatability: One-Shot Date public: 05/20/2008 CVE Url:...

GNUTLS-SA-2008-1-1 GnuTLS buffer overflow

The gnutlsservernamerecvparams function in lib/extservername.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service crash or...

Immunity Canvas: I2OMGMT

Name| i2omgmt ---|--- CVE| CVE-2008-0322 Exploit Pack| CANVAS Description| i2omgmt.sys I2OFltrParamsGetSet Privilege Escalation Notes| CVE Name: CVE-2008-0322 Repeatability: One Shot CVS URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-0322 Date public: 05/13/2008 CVE Url:...

Server: insufficient buffer size for search patterns

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service slapd crash and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression...

Critical: Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 6 security update

An updated redhat-ds package that addresses a security issue is now available as Red Hat Directory Server 7.1, Service Pack 6. This update has been rated as having critical security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3-compliant directory server. A...

DSquare Exploit Pack: D2SEC_AKAMAI

Name| d2secakamai ---|--- CVE| CVE-2007-6339 Exploit Pack| D2ExploitPack Description| Akamai Download Manager ActiveX Control Remote Code Execution Vulnerability Notes|...

PT-2008-3518 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM DB2 versions 8.0 through 8.0 FP15 IBM DB2 versions 9.1 through 9.1 FP3 IBM DB2 versions 9.5 through 9.5 FP0 Description: The issue allows remote authenticated users to execute arbitrary code via unknown vectors in the ADMIN SP C2 procedur...

Immunity Canvas: NEWSOFFICE_INCLUDE

Name| newsofficeinclude ---|--- CVE| CVE-2008-1903 Exploit Pack| CANVAS Description| NewsOffice 1.1 Remote File Include Vulnerabilitiy Notes| CVE Name: CVE-2008-1903 VENDOR: Newanz.com Repeatability: Infinite References: http://securityreason.com/exploitalert/3732 CVE Url:...

Immunity Canvas: VISUALPIC_INCLUDE

Name| visualpicinclude ---|--- CVE| CVE-2008-1876 Exploit Pack| CANVAS Description| VisualPic 0.3.1 Remote File Include Notes| CVE Name: CVE-2008-1876 VENDOR: Snarky.fr Repeatability: Infinite References: http://www.frsirt.com/english/advisories/2008/1127 CVE Url:...