Microsoft Security Bulletin MS10-066 - Important Vulnerability in Remote Procedure Call Could Allow Remote Code Execution (982802)

Microsoft Security Bulletin MS10-066 - Important Vulnerability in Remote Procedure Call Could Allow Remote Code Execution 982802 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Windows...

MS10-066: Vulnerability in Remote Procedure Call Could Allow Remote Code Execution (982802)

The RPC client implementation on the remote host has an unspecified memory corruption vulnerability. A specially crafted RPC response to a client-initiated RPC request can result in arbitrary code execution. A malicious RPC server could exploit this to take complete control of the host. C Tenable...

MS10-061 Microsoft Print Spooler Service Impersonation Vulnerability

This module exploits the RPC service impersonation vulnerability detailed in Microsoft Bulletin MS10-061. By making a specific DCE RPC request to the StartDocPrinter procedure, an attacker can impersonate the Printer Spooler service to create a file. The working directory at the time is...

Microsoft Windows - Local Procedure Call (LPC) Privilege Escalation

// source: https://www.securityfocus.com/bid/43860/info Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code and elevate their privileges to the NetworkService account level. Failed exploit attempts may cause a...

Mandriva Linux Security Advisory : ghostscript (MDVSA-2010:136)

Multiple vulnerabilities has been found and corrected in ghostscript : Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document containing a long name CVE-2009-4897...

Mandriva Update for ghostscript MDVSA-2010:134 (ghostscript)

Check for the Version of ghostscript OpenVAS Vulnerability Test Mandriva Update for ghostscript MDVSA-2010:134 ghostscript Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2010-1628

Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter...

Ghostscript Parser Buffer Overflow Vulnerabilities (Windows)

This host is installed with Ghostscript and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbghostscriptparserbofvulnwin.nasl 5306 2017-02-16 09:00:16Z teissa $ Ghostscript Parser Buffer Overflow Vulnerabilities Windows Authors: Antu Sanadi Updated By: Antu Sanadi on...

CVE-2010-1628: Improper Restriction of Operations within the Bounds of a Memory Buffer

Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter...

CVE-2010-1169

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrar...

Multiple memory corruption vulnerabilities in Ghostscript

=============================================================== Ghostscript, multiple arbitrary code execution vulnerabilities May 11, 2010 CVE-2010-1869 =============================================================== ==Description== Ghostscript www.ghostscript.com, an interpreter for the...

dedecms proof path for the latest vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: dedecms 5.5 procedure leaked site path information. Test address: http://www.dedecms.com/plus/paycenter/alipay/returnurl.php http://www.dedecms.com/plus/paycenter/cbpayment/autoreceive.php http://www.dedecms.com/plus/paycenter/nps/configpaynps.php...

dedecms proof path for the latest vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: dedecms 5.5 procedure leaked site path information. As shown in Figure: ! Test address: http://www.dedecms.com/plus/paycenter/alipay/retur... http://www.dedecms.com/plus/paycenter/cbpayment/au... http://www.dedecms.com/plus/paycenter/nps/configp...

Microsoft SQL Server Extended Procedure Detection

Binary data 5385.prm...

DB2 Audited Procedure Accessed

Binary data 5478.prm...

Sun MySQL Database PROCEDURE ANALYSE Denial of Service

MySQL is a popular open-source implementation of a relational database that supports the Structured Query Language SQL for querying and updating stored data. Communication with the database occurs using the MySQL protocol. As with other database implementations, MySQL has a number of built-in SQL...

Oracle Database DBMS_AQADM_SYS.GRANT_TYPE_ACCESS Procedure SQL Injection (CVE-2009-0977)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, e.g., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

CVE-2009-4328: Undefined Security Weakness

Unspecified vulnerability in the DRDA Services component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service server trap by calling a SQL stored procedure in unknown circumstances...

PT-2009-4927 · Microsoft · Windows 2000 Sp4 +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows 2000 SP4 Description: The issue allows remote attackers to execute arbitrary code via a specially crafted RPC message, which triggers a heap-based buffer overflow. This can be exploited by sending a specially crafted network...

CA BrightStor ARCserve Backup Message Engine Insecure Methods (CVE-2007-5328)

CA BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exist unsecured Remote...