CVE-2007-3039

Stack-based buffer overflow in the Microsoft Message Queuing MSMQ service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable...

ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability

ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-076.html December 11, 2007 -- CVE ID: CVE-2007-3039 -- Affected Vendor: Microsoft -- Affected Products: Windows 2000 SP4 Windows XP SP2 -- TippingPointTM IPS...

Microsoft Windows Message Queuing Service Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows with the Message Queuing Service enabled. Authentication is not required to exploit this vulnerability. The specific flaw exists in the RPC interface defined on port 2103 with UUI...

[CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities

Title: CAID 35724, 35725, 35726: CA BrightStor ARCserve Backup Multiple Vulnerabilities CA Vuln ID CAID: 35724, 35725, 35726 CA Advisory Date: 2007-10-10 CA Advisory Updated: 2007-12-05 Reported By: Anonymous researcher working with the iDefense VCP CVE-2007-5325 Dyon Balding of Secunia Research...

DEBIAN-CVE-2007-5902

Integer overflow in the svcauthgssgetprincipal function in lib/rpc/svcauthgss.c in MIT Kerberos 5 krb5 allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request...

CVE-2007-5902

Integer overflow in the svcauthgssgetprincipal function in lib/rpc/svcauthgss.c in MIT Kerberos 5 krb5 allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request...

Integer overflow

Integer overflow in the svcauthgssgetprincipal function in lib/rpc/svcauthgss.c in MIT Kerberos 5 krb5 allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request...

CVE-2007-5902

Integer overflow in the svcauthgssgetprincipal function in lib/rpc/svcauthgss.c in MIT Kerberos 5 krb5 allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request...

CVE-2007-5902

Integer overflow in the svcauthgssgetprincipal function in lib/rpc/svcauthgss.c in MIT Kerberos 5 krb5 allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request...

CVE-2007-5902

CVE-2007-5902 is a Krb5 (MIT Kerberos 5) vulnerability: an integer overflow in svcauth_gss_get_principal (lib/rpc/svc_auth_gss.c) can be triggered by a large GSS client name in an RPC request, reported across multiple advisories (e.g., USN-940-1 / SUSE CVE page). Connected sources indicate mitiga...

CVE-2007-5902

Integer overflow in the svcauthgssgetprincipal function in lib/rpc/svcauthgss.c in MIT Kerberos 5 krb5 allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request...

[Full-disclosure] [UPDATE]CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability

UPDATECA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net, updated on 2007.12.06 Summary: A remote stack overflow vulnerability exist in the RPC interface of CA BrightStor ARCServe BackUp. An arbitrary anonymou...

CA BrightStor ARCserve Backup unauthorized RPC access

Multiple unsafe methods are available with RPC interface...

CVE-2007-5902

Integer overflow in the svcauthgssgetprincipal function in lib/rpc/svcauthgss.c in MIT Kerberos 5 krb5 allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request...

Sun Solaris RPC模块未明本地拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的RPC模块存在竞争条件错误，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 Sun Solaris 10x86 Sun Solaris 10 补丁下载： Sun Solaris 9x86 Sun 119439-11 http://sunsolve.sun.com/pdownload.do?target=119439-11&method=hs Sun Solari...

MIT Kerberos 5 RPC library RPCSEC_GSS buffer overflow

Added: 12/03/2007 CVE: CVE-2007-3999 BID: 25534 OSVDB: 37324 Background Kerberos is a network authentication protocol which provides strong authentication for client/server applications. MIT Kerberos 5 is a free implementation of this protocol. Problem A buffer overflow in the svcauthgssvalidate...

MIT Kerberos 5 RPC library RPCSEC_GSS buffer overflow

Added: 12/03/2007 CVE: CVE-2007-3999 BID: 25534 OSVDB: 37324 Background Kerberos is a network authentication protocol which provides strong authentication for client/server applications. MIT Kerberos 5 is a free implementation of this protocol. Problem A buffer overflow in the svcauthgssvalidate...

MIT Kerberos 5 RPC library RPCSEC_GSS buffer overflow

Added: 12/03/2007 CVE: CVE-2007-3999 BID: 25534 OSVDB: 37324 Background Kerberos is a network authentication protocol which provides strong authentication for client/server applications. MIT Kerberos 5 is a free implementation of this protocol. Problem A buffer overflow in the svcauthgssvalidate...

MIT Kerberos 5 RPC library RPCSEC_GSS buffer overflow

Added: 12/03/2007 CVE: CVE-2007-3999 BID: 25534 OSVDB: 37324 Background Kerberos is a network authentication protocol which provides strong authentication for client/server applications. MIT Kerberos 5 is a free implementation of this protocol. Problem A buffer overflow in the svcauthgssvalidate...

Race condition

Race condition in the Remote Procedure Call kernel module rpcmod in Sun Solaris 8 through 10 allows local users to cause a denial of service NULL dereference and panic via unspecified vectors...