Microsoft Windows Workstation服务双重释放代码执行漏洞（MS09-041）

BUGTRAQ ID: 35972 CVECAN ID: CVE-2009-1544 Microsoft Windows是微软发布的非常流行的操作系统。 Workstation RPC服务在处理发送给NetrGetJoinInformation函数的参数时没有正确地释放内存，可能出现“双重释放”的情况。成功利用此漏洞的攻击者可以使用提升的权限运行任意指令。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2...

Samba lsa_io_trans_names Heap Overflow

This module triggers a heap overflow in the LSA RPC service of the Samba daemon. This module uses the TALLOC chunk overwrite method credit Ramon and Adriano, which only works with Samba versions 3.0.21-3.0.24. Additionally, this module will not work when the Samba "log level" parameter is higher...

rpc.nisd overflow

The remote RPC service 100300 nisd is vulnerable to a buffer overflow which allows any user to obtain a root shell on this host. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

yppasswdd overflow

The remote RPC service 100009 yppasswdd is vulnerable to a buffer overflow which allows any user to obtain a root shell on this host. OpenVAS Vulnerability Test $Id: yppasswdd.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: yppasswdd overflow Authors: Renaud Deraison Copyright: Copyright C...

irix rpc.passwd overflow

The remote RPC service 100009 yppasswdd is vulnerable to a buffer overflow which allows any user to obtain a root shell on this host. OpenVAS Vulnerability Test $Id: sgirpcpasswd.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: irix rpc.passwd overflow Authors: Renaud Deraison Copyright:...

yppasswdd overflow

The remote RPC service 100009 yppasswdd is vulnerable to a buffer overflow which allows any user to obtain a root shell on this host. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

iDefense Security Advisory 10.14.08: Microsoft Host Integration Server 2006 Command Execution Vulnerability

iDefense Security Advisory 10.14.08 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 14, 2008 I. BACKGROUND The Host Integration Server is an application suite that is used to communicate with IBM mainframe servers. One of the components of the suite is a remote management interface. Th...

Host Integration Server RPC Service Remote Code Execution Vulnerability (956695)

This host is missing a critical security update according to Microsoft Bulletin MS08-059. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Security Bulletin MS08-059 – Critical Vulnerability in Host Integration Server RPC Service Could Allow Remote Code Execution (956695)

Microsoft Security Bulletin MS08-059 – Critical Vulnerability in Host Integration Server RPC Service Could Allow Remote Code Execution 956695 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsof...

Microsoft Host Integration Server Remote Command Execution (MS08-059; CVE-2008-3466)

Microsoft Host Integration Server HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging, and security systems. A remote code execution vulnerability has been...

NULL pointer in the HTTP/XML-RPC service of Crysis 1.21

Luigi Auriemma Application: Crysis http://www.ea.com/crysis/home.jsp Versions: = 1.21 1.1.1.6156 showed as gamever Platforms: Windows Bug: NULL pointer in the HTTP/XML-RPC service Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

CA ARCserve Backup caloggerd opcode 79 buffer overflow

Added: 05/30/2008 CVE: CVE-2008-2242 BID: 29283 OSVDB: 45368 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. The logger daemon caloggerd is an RPC service which handles event logs. Problem A buffer overflow vulnerability in caloggerd allows...

CA ARCserve Backup caloggerd opcode 79 buffer overflow

Added: 05/30/2008 CVE: CVE-2008-2242 BID: 29283 OSVDB: 45368 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. The logger daemon caloggerd is an RPC service which handles event logs. Problem A buffer overflow vulnerability in caloggerd allows...

MS07-0 6 5 Message Queuing Service RPC remote overflow analysis-vulnerability warning-the black bar safety net

Author: axis Date: 2007-12-17 Team: http://www.ph4nt0m.org Microsoft's patch link http://www.microsoft.com/technet/security/bulletin/ms07-065.mspx According to ZDI vulnerability description: The specific flaw exists in the RPC interface defined on port 2 to 1 0 3 with UUID...

CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability

This vulnerability allows attackers to arbitrarily access and modify the file system and registry of vulnerable installations of Computer Associates BrightStor ARCserve Backup. Authentication is not required to exploit this vulnerability. The specific flaws exists in the Message Engine RPC servic...

BrightStor ARCserve Message Engine opnum 0x10d buffer overflow

Added: 10/18/2007 CVE: CVE-2007-5327 BID: 26015 OSVDB: 41369 Background CA ARCserve Bac kup formerly BrightStor ARCserve Backup is a backup and recovery solution. It runs a Message Engine RPC service on port 6504/TCP by default. Problem A buffer overflow in BrightStor ARCserve Backup allows remot...

Stack overflow

The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to 1 execute arbitrary code via stack-based buffer overflows in unspecified RPC procedures, and 2 trigger memory corruption related to the use of "handle" RPC arguments...

CVE-2007-5330

The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to 1 execute arbitrary code via stack-based buffer overflows in unspecified RPC procedures, and 2 trigger memory corruption related to the use of "handle" RPC arguments...

CVE-2007-5330

CVE-2007-5330 affects CA BrightStor ARCserve Backup and BrightStor Enterprise Backup on Windows. The cadbd RPC service is vulnerable to remote code execution via stack-based buffer overflows in unspecified RPC procedures, and to memory corruption from handling of RPC arguments as pointers. Exploi...

CVE-2007-5328

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."...