CVE-2008-1998

CVE-2008-1998 affects IBM DB2 prior to FP16 on 8.x, prior to FP4a on 9.1, and prior to FP1 on 9.5 (Windows). The NNSTAT (SYSPROC.NNSTAT) procedure can be abused by remote authenticated users to overwrite arbitrary files via the log file parameter. No explicit exploit details or in-the-wild status...

PT-2008-3518 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM DB2 versions 8.0 through 8.0 FP15 IBM DB2 versions 9.1 through 9.1 FP3 IBM DB2 versions 9.5 through 9.5 FP0 Description: The issue allows remote authenticated users to execute arbitrary code via unknown vectors in the ADMIN SP C2 procedur...

PT-2008-2569 · Emv · Emc Diskxtender

Name of the Vulnerable Software and Affected Versions: EMV DiskXtender version 6.20.060 Description: The issue allows remote attackers to bypass authentication due to a hard-coded login and password. This can be exploited via the RPC interface. Recommendations: For version 6.20.060, consider...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. Buffer overflow in the RPC library lib/rpc/rpcdtablesize.c used by libgssrpc and kadmind in MIT Kerberos 5 krb5 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the...

Preemptive Protection against Novell Client nwspool.dll EnumPrinters Function Buffer Overflow Vulnerability

A buffer overflow vulnerability has been discovered in the Novel Client for Windows. The flaw is due to a boundary error in Novell Client's Spooler service nwspool.dll. The vulnerable service is included with the Novell Client for Microsoft Windows, and provides access to remote printing services...

ClassCastException reported when stopping JIRA

When stopping tomcat wich hosts only Jira, there is always such stack trace in tomcat logs: code 2008-02-18 19:25:32,767: ERROR Thread-33 - org.apache.catalina.core.ContainerBase.Catalina.localhost./jira.release - ApplicationFilterConfig.doAsPrivilege java.lang.ClassCastException:...

CVE-2007-6701

Multiple stack-based buffer overflows in the Spooler service nwspool.dll in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long arguments to multiple unspecified RPC functions, aka Novell bug 287919, a different vulnerability than CVE-2007-2954...

CVE-2008-0699

Unspecified vulnerability in the ADMINSPC procedure SYSPROC.ADMINSPC in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors...

Code injection

Unspecified vulnerability in the ADMINSPC procedure SYSPROC.ADMINSPC in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors...

wireshark RPC Portmap flaws

Wireshark formerly Ethereal 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service crash via a malformed RPC Portmap packet...

Microsoft Windows Message Queuing Service - RPC Buffer Overflow (MS07-065) (2)

/ Windows Message Queuing Service Remote RPC BOF Exploit MS07-065 Mod of axis's code. CHANGELOG - added dnsname as a parameter, before it was hardcoded in the request data. Marcin Kozlowski Provided for legal security research and testing purposes ONLY Go through the code : / include include...

CVE-2007-6507

SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the DCE/RPC interface, which allows remote attackers to obtain "full file system access" and execute arbitrary code...

Oracle Java execCommand (Win32)

This module will create a java class which enables the execution of OS commands. Module Options msf use auxiliary/admin/oracle/post/exploitation/win32exec msf undefinedwin32exec show actions ...actions... msf undefinedwin32exec set ACTION msf undefinedwin32exec show options ...show and set...

Buffer overflow

Buffer overflow in OpenBase 10.0.5 and earlier might allow remote authenticated users to execute arbitrary code or cause a denial of service daemon crash by creating a stored procedure with a long name and invoking this procedure, which triggers heap corruption...

CVE-2007-5927

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...

Directory traversal

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...

CVE-2007-5927

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...

CVE-2007-5929

Buffer overflow in OpenBase 10.0.5 and earlier might allow remote authenticated users to execute arbitrary code or cause a denial of service daemon crash by creating a stored procedure with a long name and invoking this procedure, which triggers heap corruption...

PT-2007-6860 · Openbase · Openbase

Name of the Vulnerable Software and Affected Versions: OpenBase versions 10.0.5 and earlier Description: The issue allows remote authenticated users to create files with arbitrary contents by utilizing a .. dot dot in the first argument to the GlobalLog stored procedure, potentially leading to th...

Sql injection

SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 allows attackers to execute arbitrary SQL commands via the FINDRICSET procedure in the LT package. NOTE: this is probably covered by CVE-2007-5510, but there are...