CVE-2009-1544

Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3 or Server 2003 SP2 system, or cause a denial of service via a crafted RPC message to a Vista Gold, SP1, or SP2 or...

CVE-2009-1544

CVE-2009-1544 affects the Windows Workstation (wkssvc) service where improper memory handling during RPC processing (NetrGetJoinInformation) causes a double-free. Affected: Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2 (Gold), Server 2008 (Gold/SP2). Impact per sources: remote authenticated ...

Vulnerability in Workstation Service Could Allow Elevation of Privilege (971657)

This host is missing a critical security update according to Microsoft Bulletin MS09-041. OpenVAS Vulnerability Test $Id: secpodms09-041.nasl 5934 2017-04-11 12:28:28Z antu123 $ Vulnerability in Workstation Service Could Allow Elevation of Privilege 971657 Authors: Antu Sanadi Updated By: Madhuri...

Vulnerability in Workstation Service Could Allow Elevation of Privilege (971657)

This host is missing a critical security update according to Microsoft Bulletin MS09-041. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Workstation服务双重释放代码执行漏洞（MS09-041）

BUGTRAQ ID: 35972 CVECAN ID: CVE-2009-1544 Microsoft Windows是微软发布的非常流行的操作系统。 Workstation RPC服务在处理发送给NetrGetJoinInformation函数的参数时没有正确地释放内存，可能出现“双重释放”的情况。成功利用此漏洞的攻击者可以使用提升的权限运行任意指令。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2...

PT-2009-4038 · Microsoft · Windows Xp +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Vista Gold Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions Gold through SP2 Microsoft Windows Server 2008 versions Gold through SP2...

Microsoft Windows Workstation service memory corruption

Memory corruption on RPC message parsing...

Microsoft Workstation Service NetrGetJoinInformation Corruption (MS09-041; CVE-2009-1544)

Microsoft Windows Workstation Service routes local file system requests and remote file or print network requests via Remote Procedure Call RPC. RPC is a protocol that a program can use to request a service from another program which is located on another computer in a network. An elevation of...

Microsoft Windows Workstation Service Double Free Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by sending specially crafted Remote Procedure Call RPC messages to a vulnerable computer. Successfully exploiting this issue will allow the attacker to execute arbitrary code with...

Stack overflow

Stack-based buffer overflow in the ttinternalrealpath function in the ToolTalk library libtt.a in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long...

Novell Client NetIdentity Agent XTIERRPCPIPE pointer dereference vulnerability

Added: 07/24/2009 CVE: CVE-2009-1350 BID: 34400 OSVDB: 53351 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem A vulnerability in the xtagent.exe program allows remote, authenticated attackers to execute arbitrary commands by sending a specially crafted...

Update Protection against Novell Client NetIdentity Agent Remote Code Execution

A remote code execution vulnerability exists in Novell Client NetIdentity Agent. The Novell NetIdentity agent works with eDirectory authentication to provide background authentication to Windows Web-based applications that require eDirectory authentication. The flaw is due to insufficient sanity...

Novell Client NetIdentity Agent XTIERRPCPIPE pointer dereference vulnerability

Added: 07/24/2009 CVE: CVE-2009-1350 BID: 34400 OSVDB: 53351 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem A vulnerability in the xtagent.exe program allows remote, authenticated attackers to execute arbitrary commands by sending a specially crafted...

Novell Client NetIdentity Agent XTIERRPCPIPE pointer dereference vulnerability

Added: 07/24/2009 CVE: CVE-2009-1350 BID: 34400 OSVDB: 53351 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem A vulnerability in the xtagent.exe program allows remote, authenticated attackers to execute arbitrary commands by sending a specially crafted...

Novell Privileged User Manager远程库注入漏洞

Bugraq ID: 35752 Novell Privileged User Manager是一款特殊权限用户管理工具，用于加强身份验证。 Novell Privileged User Manager包含的unifid.exe服务存在缺陷，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 unifid.ex服务绑定29010端口提供通过SSL封装的类RPC功能的协议，这个协议允许客户端把方法调用成一个模块。'spf' RPC调用实现不安全的允许远程攻击者通过网络装载任意模块，而导致以服务安全上下文执行任意代码。 Novell Privileged User Manager 2.2...

CA ARCserve Backup Message Engine Denial of Service (CVE-2009-1761)

Computer Associates CA provides a group of security and management products for enterprise as well as individual clients. A denial of service vulnerability exists in CA ARCserve Backup Message Engine. The vulnerability exists in CA ARCserve Message Engine. The vulnerability is due to insufficient...

IBM AIX ToolTalk RPC Server Remote Buffer Overflow

ToolTalk is an inter-application communications system developed by Sun Microsystems in order to allow applications to communicate with each other at runtime. The ToolTalk service is designed to facilitate the development of inter-operating applications that serve individuals and work groups. A...

ToolTalk rpc.ttdbserverd buffer overflow

Buffer overflow in ttinternalrealpath RPC procedure...

Crysis 1.211.5 - HTTPXML-RPC Service Access Violation Remote Denial of Service

Crysis 1.211.5 - HTTPXML-RPC Service Access Violation Remote Denial of Service source: https://www.securityfocus.com/bid/35735/info Crysis is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to cra...

Crysis 1.21/1.5 - HTTP/XML-RPC Service Access Violation Remote Denial of Service

source: https://www.securityfocus.com/bid/35735/info Crysis is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected application, denying further service to legitimate users. Given...