7477 matches found
Solaris 9 PortBind XDR-DECODE taddr2uaddr() Remote DoS Exploit
Exploit for solaris platform in category dos / poc ============================================================== Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS Exploit ============================================================== /...
Solaris 9 PortBind - XDR-DECODE taddr2uaddr() Remote Denial of Service
Solaris 9 PortBind - XDR-DECODE taddr2uaddr Remote Denial of Service / //////////////////////////////////////////////////////////// // Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS //////////////////////////////////////////////////////////// // // Federico L. Bossi Bonin //...
Microsoft Host Integration Server RPC远程命令执行漏洞（MS08-059）
BUGTRAQ ID: 31620 CVECAN ID: CVE-2008-3466 Host Integration Server通过提供应用、数据和网络集成特性，将Microsoft Windows扩展至其它系统。 Host Integration Server的RPC接口所暴露的一些方式允许未经认证的攻击者在服务器上执行任意程序。RPC opcodes 1和6都允许攻击者调用CreateProcess函数并向其传送命令行，这可能导致完全入侵服务器。 Microsoft Host Integration Server 2006 Microsoft Host Integration...
Microsoft Host Integration Server 2006 Command Execution Vulnerability
This module exploits a command-injection vulnerability in Microsoft Host Integration Server 2006. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Host Integration Server 2006 Command...
CVE-2008-3466
Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...
CVE-2008-3479
Heap-based buffer overflow in the Microsoft Message Queuing MSMQ service mqsvc.exe in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing...
Authentication flaw
Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...
Immunity Canvas: MS08_059
Name| ms08059 ---|--- CVE| CVE-2008-3466 Exploit Pack| CANVAS Description| Microsoft Host Integration Server RPC Interface Vulnerability Notes| References: http://www.microsoft.com/technet/security/Bulletin/ms08-059.mspx CVE Name: CVE-2008-3466 VENDOR: Microsoft Notes: MSADV: MS08-059 Date public...
CVE-2008-3479
Heap-based buffer overflow in the Microsoft Message Queuing MSMQ service mqsvc.exe in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing...
MS08-059: Microsoft Host Integration Server (HIS) SNA RPC Request Remote Overflow (956695) (uncredentialed check)
The remote host has HIS Host Integration Server installed. The remote version of this product is affected by a code execution vulnerability in its RPC interface. An attacker could exploit this flaw to execute arbitrary code on the remote host by making rogue RPC queries. C Tenable Network Securit...
MS08-065: Microsoft Windows Message Queuing Service RPC Request Handling Remote Code Execution (951071)
The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with the SYSTEM privileges. Tenable Network Security, Inc. include"compat.inc"; if description scriptid34410;...
Microsoft Host Integration Server SNA RPC authentication bypass
Added: 10/15/2008 CVE: CVE-2008-3466 BID: 31620 OSVDB: 49068 Background Microsoft Host Integration Server is an enabling technology which allows integration of applications and data with new Windows solutions. Problem A vulnerability in Microsoft Host Integration Server allows remote...
Microsoft Windows消息队列服务RPC查询堆溢出漏洞（MS08-065）
BUGTRAQ ID: 31637 CVECAN ID: CVE-2008-3479 Microsoft Windows是微软发布的非常流行的操作系统。 Windows没有正确地解析发送给消息队列服务（mqsvc.exe）的RPC请求，如果远程攻击者发送了特制的RPC请求的话，就可能在字符串拷贝操作中触发堆溢出，导致以SYSTEM权限执行任意指令。 Microsoft Windows 2000SP4 临时解决方法： 在周边防火墙中屏蔽端口号大于1024的端口上的所有非法入站通信和任何其他特殊配置的RPC端口。 禁用消息队列服务。 厂商补丁： Microsoft ---------...
MS08-059: Microsoft Host Integration Server (HIS) SNA RPC Request Remote Overflow (956695)
The remote host has HIS Host Integration Server installed. The version of this product contains a code execution vulnerability in its RPC interface. An attacker could exploit this flaw to execute arbitrary code on the remote host by making rogue RPC queries. C Tenable Network Security, Inc...
[Full-disclosure] Assurent VR - CA ARCserve Backup Tape Engine Denial of Service
CA ARCserve Backup Tape Engine Denial of Service Assurent ID: FSC20081009-11 1. Affected Software CA ARCserve Backup 11.1 Windows CA ARCserve Backup 11.5 Windows CA ARCserve Backup 12.0 Windows Reference: http://www.ca.com/us/data-loss-prevention.aspx 2. Vulnerability Summary A vulnerability has...
Message Queuing Remote Code Execution Vulnerability (951071)
This host is missing important security update according to Microsoft Bulletin MS08-065. OpenVAS Vulnerability Test $Id: secpodms08-065900224.nasl 5344 2017-02-18 17:43:17Z cfi $ Description: Message Queuing Remote Code Execution Vulnerability 951071 Authors: Veerendra GG Copyright: Copyright C...
CVE-2008-3466
Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...
Microsoft Host Integration Server SNA RPC authentication bypass
Added: 10/15/2008 CVE: CVE-2008-3466 BID: 31620 OSVDB: 49068 Background Microsoft Host Integration Server is an enabling technology which allows integration of applications and data with new Windows solutions. Problem A vulnerability in Microsoft Host Integration Server allows remote...
CVE-2008-3466
CVE-2008-3466 affects Microsoft Host Integration Server 2000, 2004, and 2006. The flaw resides in the SNA RPC service which does not properly restrict administrative RPC calls, enabling a remote attacker to bypass authentication and execute arbitrary code via a crafted SNA RPC message that calls ...