Authorization

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a stats method action to /xml-rpc with 1 an empty Authorization header line, which triggers a crash in the wsdecodepassword function; or 2 a...

CVE-2007-5824

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a stats method action to /xml-rpc with 1 an empty Authorization header line, which triggers a crash in the wsdecodepassword function; or 2 a...

CVE-2007-5825

Format string vulnerability in the wsaddarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute arbitrary code via a stats method action to /xml-rpc with format string specifiers in the 1 username or 2 password portion of base64-encoded...

CVE-2007-5824

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a stats method action to /xml-rpc with 1 an empty Authorization header line, which triggers a crash in the wsdecodepassword function; or 2 a...

Firefly Media Server <= 0.2.4 Remote Denial of Service Exploit

Exploit for linux platform in category dos / poc ============================================================== Firefly Media Server = 0.2.4 Remote Denial of Service Exploit ============================================================== !C:\python25\python25.exe """ Advisory : UPH-07-02...

CVE-2002-2360

The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remoteforeignrequire and remoteforeigncall requests...

CVE-2002-2360

CVE-2002-2360 affects Webmin 0.21–0.99. The RPC module, when installed without root/admin privileges, allows remote attackers to read and write arbitrary files and to execute arbitrary commands via remote_foreign_require and remote_foreign_call requests. The vulnerability is associated with remot...

BrightStor ARCserve Message Engine opnum 0x10d buffer overflow

Added: 10/18/2007 CVE: CVE-2007-5327 BID: 26015 OSVDB: 41369 Background CA ARCserve Bac kup formerly BrightStor ARCserve Backup is a backup and recovery solution. It runs a Message Engine RPC service on port 6504/TCP by default. Problem A buffer overflow in BrightStor ARCserve Backup allows remot...

Sun Solaris RPC服务库librpcsvc(3LIB)拒绝服务漏洞

BUGTRAQ ID: 26071 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 如果用户调用了automountd1M服务去访问导出了大量文件系统的远程NFS服务器的话，Solaris RPC服务库（librpcsvc3LIB）中的安全漏洞可能允许本地非特权用户在系统上导致automountd1M守护程序崩溃。如果这个漏洞被利用，则用户可能看到访问autofs4加载点的进程变得没有响应并挂起。在Solaris 8、Solaris 9和Solaris 10系统上，控制台会打印且syslogd1M守护程序会记录类似于以下的消息： Sep 7 08:50:20...

openSUSE 10 Security Update : krb5 (krb5-3820)

This update fixes a stack-based buffer overflow in kadmind which can be exploited by authenticated remote users to gain root. CVE-2007-2798 Additionally two bugs in the RPC library of kadmind were fixed that can lead to remote system compromise. CVE-2007-2442, CVE-2007-2443 Note that third-party...

openSUSE 10 Security Update : samba (samba-3350)

Specially crafted MS-RPC packets could overwrite heap memory and therfore could potentially be exploited to execute code CVE-2007-2446. Authenticated users could leverage specially crafted MS-RPC packets to pass arguments unfiltered to /bin/sh CVE-2007-2447. A bug in the local SID/Name translatio...

openSUSE 10 Security Update : samba (samba-1830)

Prevent potential crash in winbindd's credential cache handling; 184450. - Fix memory exhaustion DoS; CVE-2006-3403; 190468. - Fix the munlock call, samba.org svn rev r16755 from Volker. - Change the kerberos principal for LDAP authentication to netbios-name$@realm from host/name@realm; 184450. -...

openSUSE 10 Security Update : samba (samba-3349)

Specially crafted MS-RPC packets could overwrite heap memory and therfore could potentially be exploited to execute code CVE-2007-2446. Authenticated users could leverage specially crafted MS-RPC packets to pass arguments unfiltered to /bin/sh CVE-2007-2447. %NASLMINLEVEL 70300 C Tenable Network...

Code injection

Unspecified vulnerability in the Sun Solaris RPC services library librpcsvc on Solaris 8 through 10 allows remote attackers to cause a denial of service mountd crash via unspecified packets to a server that exports many filesystems, and allows local users to cause a denial of service automountd...

CVE-2007-5462

Unspecified vulnerability in the Sun Solaris RPC services library librpcsvc on Solaris 8 through 10 allows remote attackers to cause a denial of service mountd crash via unspecified packets to a server that exports many filesystems, and allows local users to cause a denial of service automountd...

CVE-2007-5462

CVE-2007-5462 affects Sun Solaris librpcsvc (RPC services library) on Solaris 8–10, enabling a remote attacker to crash mountd (and locally automountd via requests) through unspecified packets when the server exports many filesystems. Patch information in connected documents shows Solaris patch 1...

CVE-2007-5462

Unspecified vulnerability in the Sun Solaris RPC services library librpcsvc on Solaris 8 through 10 allows remote attackers to cause a denial of service mountd crash via unspecified packets to a server that exports many filesystems, and allows local users to cause a denial of service automountd...

DSA-1387-1 librpcsecgss

Bulletin has no description...

CVE-2007-5327

Stack-based buffer overflow in the RPC interface for the Message Engine mediasvr.exe in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a long argument in the 0x10d opnum...

CVE-2007-5328

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."...