PHP DoS

Crash on XML-RPC requests processing...

Debian DSA-2018-1 : php5 - DoS (crash)

Auke van Slooten discovered that PHP 5, an hypertext preprocessor, crashes because of a NULL pointer dereference when processing invalid XML-RPC requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securit...

DSA-2018-1 php5 - null pointer dereference

Bulletin has no description...

PHP 5.3.2 'xmlrpc' Extension - Multiple Remote Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/38708/info PHP's xmlrpc extension library is prone to multiple denial-of-service vulnerabilities because it fails to properly handle crafted XML-RPC requests. Exploiting these issues allows remote attackers to cause denial-of-service conditions in the...

IBM Informix librpc.dll Multiple Remote Code Execution Vulnerabilities

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of both IBM Informix Dynamic Server. User interaction is not required to exploit this vulnerability. The specific flaws exist within the RPC protocol parsing library, librpc.dll, utilized by the ISM Portmapp...

Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of both IBM Informix Dynamic Server and EMC Legato Networker. User interaction is not required to exploit this vulnerability. The specific flaw exists within the RPC protocol parsing library, librpc.dll,...

Novell Client Print Provider Buffer Overflow (CVE-2006-6114)

Microsoft Windows operating systems include a Print Spooler service, spoolsv.exe, which is started up with the system on most default installations. The print spooler service exports an Remote Procedure Call RPC interface to the server side of the spooler's Win32 API. A buffer overflow...

Ubuntu Update for xmlrpc-c vulnerabilities USN-890-5

Ubuntu Update for Linux kernel vulnerabilities USN-890-5 OpenVAS Vulnerability Test $Id: gbubuntuUSN8905.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for xmlrpc-c vulnerabilities USN-890-5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 9.10 : xmlrpc-c vulnerabilities (USN-890-5)

USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for XML-RPC for C and C++. Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked against Expat were tricked into opening ...

USN-890-5: XML-RPC for C and C++ vulnerabilities

USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for XML-RPC for C and C++. Original advisory details: Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked against Expat...

SA-CONTRIB-2010-018 - Content Distribution - Multiple Vulnerabilities

Content Distribution module allows calling a method to delete particular nodes using a XML-RPC call. When this method is allowed to be called by anonymous users in user permissions, an attacker might delete a random node. In addition, certain actions require Content Distribution to temporarily...

CA BrightStor ARCserve Backup caloggerd.exe Null Hostname Denial of Service (CVE-2007-2772)

A Null dereference vulnerability exists in the CA BrightStor ARCserve Backup caloggerd process. The vulnerability is due to insufficient data validation when parsing strings in received RPC requests. A remote unauthenticated attacker may leverage this vulnerability by sending a specially crafted...

SMB Enumerate Services

This plugin implements the SvcOpenSCManager and SvcEnumServices calls to obtain the list of active and inactive services and drivers of the remote host, using the MS-DCE/RPC protocol over SMB. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, an...

SMB User Enumeration (SAM EnumUsers)

Determine what users exist via the SAM RPC service This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB User Enumeration SAM EnumUsers', 'Description' = 'Determine what users exist via the SAM R...

IBM AIX rpc.cmsd Stack Buffer Overflow Vulnerability

No description provided by source. / Rodrigo Rubira Branco BSDaemon - rodrigo noSPAM risesecurity . org http://www.kernelhacking.com/rodrigo http://www.risesecurity.org / include stdlib.h include stdio.h include string.h include unistd.h include rpc/rpc.h define CMSDPROG 100068 define CMSDVERS 4...

IBM AIX rpc.cmsd buffer overflow

Buffer overflow on RPC request parsing...

IT-Grundschutz M4.277: Absicherung der SMB-, LDAP- und RPC-Kommunikation unter Windows Server 2003(Windows)

IT-Grundschutz M4.277: Absicherung der SMB-, LDAP- und RPC-Kommunikation unter Windows Server 2003Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94223 Diese...

IT-Grundschutz M4.277: Absicherung der SMB-, LDAP- und RPC-Kommunikation unter Windows Server 2003(Windows)

IT-Grundschutz M4.277: Absicherung der SMB-, LDAP- und RPC-Kommunikation unter Windows Server 2003Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94223 Diese...

IT-Grundschutz M4.277: Absicherung der SMB-, LDAP- und RPC-Kommunikation unter Windows Server 2003

IT-Grundschutz M4.277: Absicherung der SMB-, LDAP- und RPC-Kommunikation unter Windows Server 2003Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94223 Diese...

Solaris 7 8 9 sadmind RPC Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...