9443 matches found
GLSA-200609-13 : gzip: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200609-13 gzip: Multiple vulnerabilities Tavis Ormandy of the Google Security Team has reported multiple vulnerabilities in gzip. A stack buffer modification vulnerability was discovered in the LZH decompression code, where a...
Immunity Canvas: WS_FTPD_XCRC
Name| wsftpdxcrc ---|--- CVE| CVE-2006-5000 Exploit Pack| CANVAS Description| Ipswitch WSFTP Server XCRC Overflow Notes| CVE Name: CVE-2006-5000 VENDOR: IPSwitch Repeatability: One shot References: http://www.zerodayinitiative.com/advisories/ZDI-06-029.html CVE Url:...
Microsoft Security Bulletin MS06-052 Vulnerability in Pragmatic General Multicast (PGM) Could Allow Remote Code Execution (919007)
Microsoft Security Bulletin MS06-052 Vulnerability in Pragmatic General Multicast PGM Could Allow Remote Code Execution 919007 Published: September 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maxim...
Microsoft Security Bulletin MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (910729)
Microsoft Security Bulletin MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution 910729 Published: September 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Publisher Impact of Vulnerability: Remote Code Execution Maximum Severit...
Immunity Canvas: IMAIL_RCPTOVERFLOW
Name| imailrcptoverflow ---|--- CVE| CVE-2006-4379 Exploit Pack| CANVAS Description| IMail SMTPD32 Stack Overflow Notes| CVE Name: CVE-2006-4379 VENDOR: IPSwitch Post-exploitaion: Post-exploitation requires stoping and starting the IMail SMTP Server Service From a different process use...
Microsoft Security Advisory (923762) Microsoft Security Advisory (923762): Long URLs to sites using HTTP 1.1 and compression Could Cause Internet Explorer 6 Service Pack 1 to Unexpectedly Exit
Microsoft Security Advisory 923762 Microsoft Security Advisory 923762: Long URLs to sites using HTTP 1.1 and compression Could Cause Internet Explorer 6 Service Pack 1 to Unexpectedly Exit Published: August 22, 2006 On August 15, 2006 Microsoft announced that it would be re-releasing MS06-042...
BlackBerry Enterprise Server fails to properly handle Microsoft Word attachments
Overview A buffer overflow vulnerability in BlackBerry Enterprise Server may allow a remote attacker to execute arbitrary code. Description A buffer overflow vulnerability exists in the BlackBerry Attachment Service component of BlackBerry Enterprise Server. This vulnerability may allow a remote...
Immunity Canvas: MS06_040
Name| ms06040 ---|--- CVE| CVE-2006-3439 Exploit Pack| CANVAS Description| Windows Server Service Overflow MS06-040 Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS06-040.mspx CVE Name: CVE-2006-3439 VENDOR: Microsoft MSADV: MS06-040 Repeatability: Infinite Note: Due to th...
Microsoft Security Bulletin MS06-040 Vulnerability in Server Service Could Allow Remote Code Execution (921883)
Microsoft Security Bulletin MS06-040 Vulnerability in Server Service Could Allow Remote Code Execution 921883 Published: August 8, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...
CVE-2006-3723
Technical details for CVE-2006-3723 are not publicly available in the provided documents. Monitor for updates; no disclosed affected components, impact, or remediation are provided here.
MERCUR Messaging IMAP LOGIN command buffer overflow
Added: 07/10/2006 CVE: CVE-2006-1255 BID: 17138 OSVDB: 23950 Background MERCUR Messaging 2005 is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service when processing the LOGIN command allows remote...
MERCUR Messaging IMAP LOGIN command buffer overflow
Added: 07/10/2006 CVE: CVE-2006-1255 BID: 17138 OSVDB: 23950 Background MERCUR Messaging 2005 is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service when processing the LOGIN command allows remote...
MERCUR Messaging IMAP LOGIN command buffer overflow
Added: 07/10/2006 CVE: CVE-2006-1255 BID: 17138 OSVDB: 23950 Background MERCUR Messaging 2005 is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service when processing the LOGIN command allows remote...
MS Windows TCP/IP Protocol Driver Remote Buffer Overflow Exploit
Exploit for unknown platform in category dos / poc ================================================================ MS Windows TCP/IP Protocol Driver Remote Buffer Overflow Exploit ================================================================ / Windows TCP/IP source routing poc C version... by...
Microsoft Windows XP2000 - Mrxsmb.sys Local Privilege Escalation (MS06-030)
Microsoft Windows XP2000 - Mrxsmb.sys Local Privilege Escalation MS06-030 /////////////////////////////////////////////////////////////////////////////////////// // Mrxsmb.sys XP & 2K Ring0 Exploit 6/12/2005 // Tested on XP SP2 && 2K SP4 // Disable ReadOnly Memory protection //...
Immunity Canvas: MS06_025
Name| ms06025 ---|--- CVE| CVE-2006-2371 Exploit Pack| CANVAS Description| RasMan RPC Server Signedness Bug Notes| CVE Name: CVE-2006-2371 VENDOR: Microsoft Notes: If you choose the wrong version to attack, RasMan may stop responding with MSRPC Pipe Not Available errors, and will most likely not...
Immunity Canvas: MS06_024
Name| ms06024 ---|--- CVE| CVE-2006-0025 Exploit Pack| CANVAS Description| Microsoft Windows Media Player Malformed PNG Vulnerability Notes| CVE Name: CVE-2006-0025 VENDOR: Microsoft MSADV: MS06-024 Repeatability: One shot MSRC: http://www.microsoft.com/technet/security/bulletin/ms06-024.mspx CVS...
[SA20147] Sun ONE/Java System Web Server Cross-Site Scripting Vulnerability
TITLE: Sun ONE/Java System Web Server Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA20147 VERIFY ADVISORY: http://secunia.com/advisories/20147/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Sun Java System Application Server Sun ONE 7.x...
Default credentials
stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrator password to stdout when executed, which allows local users to obtain the password by viewing a local display...