4131 matches found
Microsoft Windows Kernel Unchecked LPC Buffer Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a locally exploitable privilege escalation vulnerability. This is reportedly due to an unchecked buffer that is exposed through the LPC Local Procedure Call interface in the Windows kernel. Successful exploitation would permit a local attacker to compromi...
CVE-2002-1199: Undefined Security Weakness
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments...
RPC status Service In Use
Binary data 1084.prm...
CVE-2004-1371
Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure...
Mandrake Linux Security Advisory : apache2 (MDKSA-2004:064)
A Denial of Service Dos condition was discovered in Apache 2.x by George Guninski. Exploiting this can lead to httpd consuming an arbitrary amount of memory. On 64bit systems with more than 4GB of virtual memory, this may also lead to a heap-based overflow. The updated packages contain a patch fr...
RHEL 2.1 : glibc (RHSA-2003:090)
Updated glibc packages are available to fix an integer overflow in the XDR decoder. The glibc package contains standard libraries which are used by multiple programs on the system. Sun RPC is a remote procedure call framework which allows clients to invoke procedures in a server process over a...
Microsoft CIS and RPC over HTTP Proxy components fail to properly handle responses
Overview A vulnerability in a Microsoft HTTP Proxy component may lead to a denial of service. Description Microsoft's COM Internet Sevices CIS and Remote Procedure Call RPC over HTTP Proxy contain a vulnerability that could permit an attacker to cause a denial of service. When a forwarded request...
EUVD-2003-0985
Buffer overflow in the Microsoft Message Queue Manager MSQM allows remote attackers to cause a denial of service RPC service crash via a queue registration request...
CVE-2003-0938
vos24u.c in SAP database server SAP DB 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure...
MS Windows XP/2000 RPC Remote (non exec memory) Exploit
No description provided by source. / have you recently bought one of those expensive new windows security products on the market? do you think you now have strong protection? Look again: rpc!exec by ins1der trixterjack yahoo com windows remote return into libc exploit! remote rpc exploit breaking...
Microsoft Windows XP2000 - RPC Remote Non Exec Memory
Microsoft Windows XP2000 - RPC Remote Non Exec Memory / have you recently bought one of those expensive new windows security products on the market? do you think you now have strong protection? Look again: rpc!exec by ins1der trixterjack yahoo com windows remote return into libc exploit! remote r...
MS Windows (RPC2) Universal Exploit & DoS (RPC3) (MS03-039)
漏洞描述：Remote Procedure Call RPC是Windows操作系统使用的一种远程过程调用协议，RPC提供进程间交互通信机制，允许在某台计算机上运行程序无缝的在远程系统上执行代码。协议本身源自OSF RPC协议，但增加了Microsoft特定的扩展。MS RPC在处理畸形消息时存在问题，远程攻击者可以利用这个漏洞进行拒绝服务攻击，在RPC服务崩溃后，可用来权限提升攻击。 攻击者发送畸形消息给DCOM RemoteGetClassObject接口，RPC服务就会崩溃，所有依靠RPC服务的应用程序和服务就会变的不正常。...
DEBIAN-CVE-2003-0776
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences...
PT-2003-1696 · Microsoft · Windows 2000 +3
Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 Blaster/Nachi and CVE-2003-0715...
PT-2003-1814 · Microsoft · Windows 2000 +3
Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352...
Microsoft Security Bulletin MS03-039: Buffer Overrun In RPCSS Service Could Allow Code Execution(824146)
-----BEGIN PGP SIGNED MESSAGE----- - - ----------------------------------------------------------------- Title: Buffer Overrun In RPCSS Service Could Allow Code Execution 824146 Date: September 10, 2003 Software: Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Serverr 4.0 Microsoft...
CVE-2003-0619
Integer signedness error in the decodefh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service kernel panic via a negative size value within XDR data of an NFSv3 procedure call...
CVE-2003-0232
Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls LPC port that leads to a buffer overflow...
ZH2003-24SA (security advisory): ChitChat.NET XSS Vulnerability
ZH2003-24SA security advisory: ChitChat.NET XSS Vulnerability Published: 13 august 2003 Released: 13 august 2003 Name: ChitChat.NET Affected Systems: 2.0 Issue: Remote attackers can inject XSS script Author: [email protected] Vendor: http://clickcess.com/ Description Zone-h Security Team has...