OS Identification : MSRPC

This plugin attempts to identify the operating system type and version by connecting to the remote Microsoft Remote Procedure Call MSRPC server. C Tenable, Inc. include"compat.inc"; if description scriptid25248; scriptversion"1.45"; scriptsetattributeattribute:"pluginmodificationdate",...

GLSA-200705-15 : Samba: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200705-15 Samba: Multiple vulnerabilities Samba contains a logical error in the smbd daemon when translating local SID to user names CVE-2007-2444. Furthermore, Samba contains several bugs when parsing NDR encoded RPC parameters...

Oracle E-Business Suite Arbitrary Node Deletion Vulnerability

This vulnerability allows remote attackers to delete any existing Document Management node on vulnerable installations of Oracle E-Business Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists in the APPLSYS.FNDDMNODES package. The procedure to delete node...

Hack attack: in a WEB application hidden Backdoor-vulnerability warning-the black bar safety net

In many commercial programs,the programmer might, for some purposes, in the program left by the back door. We do not discuss the purpose of doing so is what, just talk about how in the program to hide an“ultimate back door.” First of all for everyone to see an example, last year I wrote an articl...

Microsoft DNS Server RPC Management Interface Buffer Overflow (MS07-029; CVE-2007-1748)

The DNS server service is a component that provides name resolution services to a network.A buffer overflow vulnerability has been reported in the Microsoft Windows Domain Name System DNS Server services.An attacker may exploit this vulnerability to execute arbitrary code on a target system via a...

CVE-2007-1993: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the pfsmountd.rpc RPC daemon in the Portable File System PFS in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by sending "a call to procedure 5, followed by a crafted payload to procedure 2."...

FrontBase关系数据库服务器create procedure远程栈溢出漏洞

FrontBase是一款企业级的关系数据库服务器。 FrontBase在创建存储过程时存在栈溢出漏洞，允许攻击者获得NT AUTHORITY\SYSTEM或root用户权限。 如果攻击者通过“create procedure” SQL语句传送了超长参数的话，就可以触发这个溢出，导致内存破坏。例如，以下SQL语句： create procedure "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa...

Buffer overflow

Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privileges for creating a stored procedure, to execute arbitrary code via a CREATE PROCEDURE request with a long procedure name...

CVE-2007-1511

Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privileges for creating a stored procedure, to execute arbitrary code via a CREATE PROCEDURE request with a long procedure name...

CVE-2007-1511

Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privileges for creating a stored procedure, to execute arbitrary code via a CREATE PROCEDURE request with a long procedure name...

CVE-2007-1511: Undefined Security Weakness

Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privileges for creating a stored procedure, to execute arbitrary code via a CREATE PROCEDURE request with a long procedure name...

Memory corruption

The Tape Engine in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC procedure arguments, which result in memory corruption, a different vulnerability than...

CVE-2007-1447

The Tape Engine in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC procedure arguments, which result in memory corruption, a different vulnerability than...

Novell Client Print Provider Multiple Functions Buffer Overflow (CVE-2006-5854)

Novell NetWare is a network operating system for Microsoft Windows and Linux workstations/servers. Novell NetWare client's Spooler service nwspool.dll is included with the Novell Client for Microsoft Windows, and provides access to remote printing services via Remote Procedure Call RPC. A remote...

CA BrightStor ARCserve 11.5.2.0 (catirpc.dll) RPC Server DoS Exploit

No description provided by source. !/usr/bin/ruby Computer Associates CA Brightstor Backup Remote Procedure Call Server DoS catirpc.dll Catirpc.exe - Provides the endpoint mapper and enables RPC services for BrightStor Backup products. 7c.350: Access violation - code c0000005 !!! second chance !!...

CA BrightStor ARCserve 11.5.2.0 - catirpc.dll RPC Server Denial of Service

CA BrightStor ARCserve 11.5.2.0 - catirpc.dll RPC Server Denial of Service !/usr/bin/ruby Computer Associates CA Brightstor Backup Remote Procedure Call Server DoS catirpc.dll Catirpc.exe - Provides the endpoint mapper and enables RPC services for BrightStor Backup products. 7c.350: Access...

CA BrightStor ARCserve 11.5.2.0 - 'catirpc.dll' RPC Server Denial of Service

!/usr/bin/ruby Computer Associates CA Brightstor Backup Remote Procedure Call Server DoS catirpc.dll Catirpc.exe - Provides the endpoint mapper and enables RPC services for BrightStor Backup products. 7c.350: Access violation - code c0000005 !!! second chance !!! eax=007ef924 ebx=2e009560...

Oracle 10g SYS.KUPW$WORKER.MAIN PL/SQL Injection Exploit

No description provided by source. / Exploit for Oracle10g R1 and R2 prior to CPU Oct 2006 Joxean Koret [email protected] Privileges needed: - CREATE SESSION - CREATE PROCEDURE / select from userroleprivs ; CREATE OR REPLACE FUNCTION F1 RETURN NUMBER AUTHID CURRENTUSER IS PRAGMA...

Oracle 10g SYS.KUPV$FT.ATTACH_JOB PL/SQL Injection Exploit

No description provided by source. / Exploit for Oracle10g R1 and R2 prior to CPU Oct 2006 Joxean Koret [email protected] Privileges needed: - EXECUTECATALOGROLE - CREATE PROCEDURE / select from userroleprivs ; CREATE OR REPLACE FUNCTION F1 RETURN NUMBER AUTHID CURRENTUSER IS PRAGMA...

Oracle 10g SYS.KUPW$WORKER.MAIN PL/SQL Injection Exploit

Exploit for multiple platform in category local exploits ======================================================== Oracle 10g SYS.KUPW$WORKER.MAIN PL/SQL Injection Exploit ======================================================== / Exploit for Oracle10g R1 and R2 prior to CPU Oct 2006 Joxean Koret...