Microsoft Security Bulletin MS03-039: Buffer Overrun In RPCSS Service Could Allow Code Execution(824146)

-----BEGIN PGP SIGNED MESSAGE----- - - ----------------------------------------------------------------- Title: Buffer Overrun In RPCSS Service Could Allow Code Execution 824146 Date: September 10, 2003 Software: Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Serverr 4.0 Microsoft...

Windows 2000 RPC DoS and privilege escalation

Malformed DCOM RemoteGetClassObject request causes RPC mapper service to crash. After RPC crashes, it's possible for local attacker to hijack epmapper pipe and impersonate local system...

PT-2003-1555 · Microsoft · Windows 2000 +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows NT 4.0, 2000, XP, and Server 2003 Description: A buffer overflow issue in a certain DCOM interface for RPC allows remote attackers to execute arbitrary code via a malformed message. This issue has been exploited by the...

Coda DoS

DoS on invalid RPC packet...

Buffer overflow in Sun rpc

Buffer overflow in xdrarray primitive...

Integer overflow in Sun RPC XDR library routines

Overview The XDR library from Sun Microsystems is a widely used implementation for RPC services. Although the library was originally distributed by Sun Microsystems, multiple vendors have included the vulnerable code in their own implementations. Some implementations of standard functions in this...

CVE-2002-1873

Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call MSRPC, allows remote attackers to cause a denial of service crash or memory consumption via malformed MSRPC calls...

Advisory CA-2002-25 Integer Overflow In XDR Library

CERT Advisory CA-2002-25 Integer Overflow In XDR Library Original release date: August 05, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Applications using vulnerable implementations of SunRPC-derived XDR libraries, which...

FreeBSD-SA-02:36.nfs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:36.nfs Security Advisory The FreeBSD Project Topic: Bug in NFS server code allows remote denial of service Category: core Module: nfs Announced: 2002-08-05 Credits: Mike...

Integer overflow in xdr_array() function when deserializing the XDR stream

Overview There is an integer overflow present in the xdrarray function distributed as part of the Sun Microsystems XDR library. This overflow has been shown to lead to remotely exploitable buffer overflows in multiple applications, leading to the execution of arbitrary code. Although the library...

Microsoft Windows NT 4.0 - Invalid LPC Request Denial of Service (MS00-070)

Microsoft Windows NT 4.0 - Invalid LPC Request Denial of Service MS00-070 source: https://www.securityfocus.com/bid/1743/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedur...

Microsoft Windows NT 4.0/2000 - LPC Zone Memory Depletion Denial of Service

source: https://www.securityfocus.com/bid/1745/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between different hosts. LPC allocates memory from...

CVE-2000-0070

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

CVE-1999-0632

The RPC portmapper service is running...

PT-2000-1102 · Microsoft · Shtml.Dll +1

Name of the Vulnerable Software and Affected Versions: Frontpage Server Extensions affected versions not specified Description: The issue allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the / vti bin/ virtual directory. Recommendation...

CVE-2000-0070

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

PT-1999-1585 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT version 4.0 Description: The issue allows remote attackers to cause a denial of service, specifically resource exhaustion, by establishing a series of connections with malformed data. This is related to the improper shutdown of...

CVE-1999-0632

The RPC portmapper service is running...

PT-1999-1236

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to the RPC portmapper service being active. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerabilit...

PT-1997-1091 · Sgi +1 · Irix +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue allows attackers to perform a denial of service in the RPC portmapper, enabling them to register or unregister RPC services, or spoof RPC services by using a spoofed source IP...