124 matches found
2007-06-03: PeerCast streaming server submits cleartext password
Hi there, peercast also submits the configured password in cleartext. e.g. http://www.domain.tld:7144/admin?cmd=login&pass=asdfg.jodi.org&submit=Login well, I have just played a bit around with it, so I assume this is already known. Solution might be to use stunnel. Have Fun : Greetz mpeg...
peercast01216.pm.txt
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
PeerCast 0.1216 - Remote Buffer Overflow (Metasploit)
PeerCast 0.1216 - Remote Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual...
PeerCast <= 0.1216 Remote Buffer Overflow Exploit (win32) (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
PeerCast <= 0.1216 Remote Buffer Overflow Exploit (win32) (meta)
Exploit for unknown platform in category remote exploits ================================================================ PeerCast 'PeerCast '$Revision: 1.2 $', 'Authors' = 'H D Moore ', , 'Arch' = 'x86' , 'OS' = 'win32' , 'Priv' = 0, 'AutoOpts' = 'EXITFUNC' = 'process' , 'UserOpts' = 'RHOST' = 1...
PeerCast 0.1216 - Remote Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
GLSA-200603-17 : PeerCast: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200603-17 PeerCast: Buffer overflow INFIGO discovered a problem in the URL handling code. Buffers that are allocated on the stack can be overflowed inside of nextCGIarg function. Impact : By sending a specially crafted request to...
PeerCast: Buffer overflow
Background PeerCast is a Peer to Peer broadcasting technology for listening to radio and watching video on the Internet. Description INFIGO discovered a problem in the URL handling code. Buffers that are allocated on the stack can be overflowed inside of nextCGIarg function. Impact By sending a...
PeerCast <= 0.1216 (nextCGIarg) Remote Buffer Overflow Exploit (2)
Exploit for linux platform in category remote exploits ================================================================== PeerCast include include include include include include char scode= // binds 4444 port "\x31\xc9\x83\xe9\xeb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x85"...
PeerCast <= 0.1216 (nextCGIarg) Remote Buffer Overflow Exploit (2)
No description provided by source. / \ PeerCast =0.1216 remote exploit / by Darkeagle \ / 09.03.06 \ / \ gr33tz: bl4ck guys, unl0ck guys, rst/ghc guys, 0x557 guys, ph4nt0m guys, sh0k and many otherz. / \ / http://unl0ck.net root@localhost darkeagle telnet localhost 36864 Trying 127.0.0.1...
PeerCast 0.1216 - 'nextCGIarg' Remote Buffer Overflow (2)
/ \ PeerCast include include include include include include char scode= // binds 4444 port "\x31\xc9\x83\xe9\xeb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x85" "\x4f\xca\xdf\x83\xeb\xfc\xe2\xf4\xb4\x94\x99\x9c\xd6\x25\xc8\xb5" "\xe3\x17\x53\x56\x64\x82\x4a\x49\xc6\x1d\xac\xb7\x94\x13\xac\x8c"...
PeerCast 0.1216 - nextCGIarg Remote Buffer Overflow (2)
PeerCast 0.1216 - nextCGIarg Remote Buffer Overflow 2 / \ PeerCast include include include include include include char scode= // binds 4444 port "\x31\xc9\x83\xe9\xeb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x85" "\x4f\xca\xdf\x83\xeb\xfc\xe2\xf4\xb4\x94\x99\x9c\xd6\x25\xc8\xb5"...
PeerCast <= 0.1216 (nextCGIarg) Remote Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ============================================================== PeerCast include sys/so...
PeerCast 0.1216 - 'nextCGIarg' Remote Buffer Overflow (1)
/ GNU PeerCast include include include include include include include include include struct target char name; int retaddr; ; struct shellcode char name; int port; int host;...
PeerCast 0.1216 - nextCGIarg Remote Buffer Overflow (1)
PeerCast 0.1216 - nextCGIarg Remote Buffer Overflow 1 / GNU PeerCast include include include include include include include include include struct target char name; int retaddr...
Stack overflow
Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long 1 parameter name or 2 value in a URL, which triggers the overflow in the nextCGIarg function in...
CVE-2006-1148
Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long 1 parameter name or 2 value in a URL, which triggers the overflow in the nextCGIarg function in...
CVE-2006-1148
Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long 1 parameter name or 2 value in a URL, which triggers the overflow in the nextCGIarg function in...
CVE-2006-1148
CVE-2006-1148 affects PeerCast vulnerable to a stack-based buffer overflow in the URL handling code (nextCGIarg) when processing long HTTP GET parameters. Affected versions include PeerCast = 0.1217 to mitigate. Additional context from Gentoo GLSA 200603-17 confirms the vulnerability and recommen...
CVE-2006-1148: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long 1 parameter name or 2 value in a URL, which triggers the overflow in the nextCGIarg function in...