Microsoft Windows TCP/IP CVE-2012-0179 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that affects the TCP/IP stack component 'tcpip.sys'. An attacker can exploit this issue to gain elevated privileges by executing arbitrary code in the context of another process. Failed exploit attempts may cause...

Failover or Surebackup Starts a Virtual Machine With an Incorrect Ethernet Interface

Article Applicability The issue discussed in this article is strictly related to the use of VMXNET3 network adapters with the following vSphere VM guest operating systems: Windows 7 Windows 7 SP1 Server 2008 R2 Server 2008 R2 SP1 Challenge When you back up/replicate/copy/clone a vSphere VM runnin...

HT Editor Spawning Root Shell

Exploit for linux platform in category remote exploits !/usr/bin/python Exploit Title: HT Editor Spawning Root Shell Date: 29-Mar-2012 Author: blusp10it Version: 2.0.18 Download: http://sourceforge.net/projects/hte/files/ht-source/ht-2.0.18.tar.gz Tested on: BackTrack 4 R2, Ubuntu 10.04 Run with:...

Microsoft Windows Service Pack Missing Multiple Vulnerabilities

Microsoft Windows is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dell Webcam CrazyTalk4Native.dll Buffer Overflow

Dell Webcam Software Bundled ActiveX Control CrazyTalk4Native.dll sprintf Remote Buffer Overflow Vulnerability Tested against: Microsoft Windows Vista SP2 Microsoft Windows XP SP3 Microsoft Windows 2003 R2 SP2 Internet Explorer 7/8/9 download url of a test version:...

SAP Business Objects XI R2 Infoview Multiple XSS

Class Input Validation Error Remote Yes Published 10 February 11:00AM Vulnerable XI R2 SAP Business Objects is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

CVE-2012-0156

CVE-2012-0156 relates to a denial-of-service in Windows DirectWrite. The issue is triggered when processing specially crafted Unicode characters, causing applications using DirectWrite to hang. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 (and R2 SP1), and Windows 7 SP1...

CVE-2012-0006: Undefined Security Weakness

The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during record lookup, which allows remote attackers to cause a denial of service daemon restart via a crafted query, aka "DNS Denial of Service Vulnerability."...

PT-2012-2353

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows 7 Gold and SP1 Description A denial of service issue exists in the Remote Desktop Protocol RDP service, allowing remote attackers to cause the application to hang via crafted packet...

MS12-020: Description of the security update for Terminal Server Denial of Service Vulnerability: March 13, 2012

None None...

CVE-2012-0152: Improper Input Validation

The Remote Desktop Protocol RDP service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service application hang via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."...

CVE-2012-0002

The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code ...

MS12-017: Vulnerability in DNS Server Could Allow Denial of Service (2647170)

The DNS server installed on the remote host does not properly handle objects in memory when looking up the resource record of a domain. By sending a specially crafted DNS query, an attacker may be able to exploit this flaw and cause the DNS server on the remote host to stop responding and...

SAP Business Objects XI R2 Cross Site Scripting

Class Input Validation Error Remote Yes Published 10 February 11:00AM Vulnerable XI R2 SAP Business Objects is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

SAP Business Objects InfoVew System - 'listing.aspx?searchText' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52361/info SAP Business Objects is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspectin...

BackTrack 5 R2 Released, New Kernel, New Tools

BackTrack 5 R2 Released, New Kernel, New Tools Hacker are your Ready ? Backtrack 5 R2 finally released with bug fixes, upgrades, and the addition of 42 new tools. With the best custom-built 3.2.6 kernel, the best wireless support available at maximum speed. This release have included Metasploit...

samba security, bug fix, and enhancement update

3.0.33-3.37.el5 - Regenerate manpage for 'wide links' and 'unix extensions' sections - related: 722553 3.0.33-3.36.el5 - Security Release, fixes CVE-2010-0926 - resolves: 722553 3.0.33-3.35.el5 - Fix smbclient return code - resolves: 768908 3.0.33-3.34.el5 - Fix support for Windows 2008 R2 domain...

CVE-2012-1223

RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack...

Directory traversal

Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the File command...

Code injection

RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack...