CVE-2003-0757

Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264, which leaks the IP addresses in a reply packet...

Microsoft Windows fails to properly validate buffer size of incoming SMB packets

Overview Microsoft's implementation of Server Message Block SMB contains a buffer overflow vulnerability that could permit a remote attacker to execute arbitrary code or cause a denial of service. Description SMB and the Common Internet File System CIFS are closely related protocols used sharing...

CVE-2003-0845

CVE-2003-0845 is addressed by Red Hat/RHEL 5 security updates RHSA-2007:1048 for openoffice.org and hsqldb. The connected advisories state that HSQLDB could allow remote command execution via a port (tcp 9001) when used with OpenOffice.org Base, stemming from two issues: (1) HSQLDB lacking a pass...

NSFOCUS SA2003-06 : Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-06 Topic: Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability Release Date: 2003-09-11 CVE CAN ID: CAN-2003-0528 http://www.nsfocus.com/english/homepage/research/0306.htm Affected system: ==================...

CVE-2003-0757

CVE-2003-0757 affects Check Point FireWall-1 versions 4.0 and 4.1 prior to SP5. The issue allows remote attackers to obtain the IP addresses of internal interfaces by issuing certain SecuRemote requests to TCP ports 256 or 264 , with the IPs leaked in a reply packet. Publicly available sources (N...

CVE-2003-0757

Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264, which leaks the IP addresses in a reply packet...

ZoneAlarm 3.7.202/PRO 4.0/PRO 4.5 - Random UDP Flood Denial of Service (3)

source: https://www.securityfocus.com/bid/8525/info A denial of service vulnerability has been alleged in ZoneAlarm. It is reportedly possible to reproduce this condition by sending a flood of UDP packets of random sizes to random ports on a system hosting the vulnerable software. ;// This is...

CVE-2003-0464

The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services such as nfsd...

WapServ 1.0 - Denial of Service

source: https://www.securityfocus.com/bid/8472/info WapServ has been reported prone to multiple remote denial of service vulnerabilities. The issues present themselves when malicious data is received and processed over ports 9200 and 9201. A remote attacker may exploit these conditions to trigger...

Advisory 02/2003: emule/xmule/lmule vulnerabilities

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: eMule/lmule/xmule multiple remote vulnerabilities Release Date: 2003/08/17 Last Modified: 2003/08/17 Author: Stefan Esser [email protected] Application: eMule = 0.29c xmule = 1.4.3, = 1.5.6a lmule = 1.3.1 Severity: Several...

Microsoft Windows - DCOM RPC Interface Buffer Overrun

Microsoft Windows - DCOM RPC Interface Buffer Overrun source: https://www.securityfocus.com/bid/8205/info A buffer overrun vulnerability has been reported in Microsoft Windows that can be exploited remotely via a DCOM RPC interface that listens on TCP/UDP port 135. The issue is due to insufficien...

Microsoft Windows - 'RPC DCOM' Remote (Universal)

/ Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal targets, 1 for win2k, and 1 for winXP. This exploit uses ExitThread in its shellcode to prevent the RPC service from crashing upon successful exploitation. It also has several other options including definable bindshell and...

Microsoft Windows - RPC DCOM Remote (Universal)

Microsoft Windows - RPC DCOM Remote Universal / Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal targets, 1 for win2k, and 1 for winXP. This exploit uses ExitThread in its shellcode to prevent the RPC service from crashing upon successful exploitation. It also has several other...

CVE-2003-0464

CVE-2003-0464 affects the Linux kernel (2.4) where a change in the RPC code sets the reuse flag for newly created sockets. This could allow a local attacker to bind UDP ports that are normally used by privileged services such as nfsd. The connected Red Hat advisory RHSA-2003:238 notes this issue ...

CVE-2003-0464

The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services such as nfsd...

CVE-2003-0246

The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports...

(RHSA-2003:147) kernel security update

The Linux kernel handles the basic functions of the operating system. Two potential data corruption scenarios have been identified. These scenarios can occur under heavy, complex I/O loads. The first scenario only occurs while performing memory mapped file I/O, where the file is simultaneously...

BZFlag 1.7 g0 - Reconnect Denial of Service

// source: https://www.securityfocus.com/bid/7649/info BZFlag is prone to a denial of service vulnerability. Users that have established a session with BZFlag may cause a denial of service by reconnecting and flooding BZFlag ports with excessive amounts of data. This issue was reported in BZFlag...

CVE-2003-0246

The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports...

youbin local root exploit + advisory

I. BACKGROUND $ more /usr/ports/mail/youbin/pkg-descr ---- From README slightly modified --- youbin is a kind of biff in the network age. When youbin is used, the mail spool of a certain, specific machine mail server is observed to inform the arrival of mail to a user at an arbitrary machine...