7469 matches found
CVE-2007-4218
Trend Micro ServerProtect for Windows is affected by a buffer overflow in the SpntSvc RPC interface (port 5168) triggered via RPCFN_CMON_SetSvcImpersonateUser in Stcommon.dll, allowing remote code execution. Public sources detail this vulnerability as CVE-2007-4218 and identify the vulnerable com...
iDefense Security Advisory 08.21.07: Trend Micro ServerProtect Multiple Buffer Overflow Vulnerabilities
Trend Micro ServerProtect Multiple Buffer Overflow Vulnerabilities iDefense Security Advisory 08.21.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 21, 2007 I. BACKGROUND Trend Micro Inc.'s ServerProtect is an anti-virus software for Microsoft Windows and Novell NetWare servers. It...
Trend Micro ServerProtect Multiple Remote Overflows
The remote version of Trend Micro ServerProtect is vulnerable to multiple buffer overflows in the RPC interface. By sending specially crafted requests to the remote host, an attacker may be able to exploit those overflows and execute arbitrary code on the remote host with SYSTEM privileges. C...
Update Protection against Trend Micro ServerProtect EarthAgent DCE-RPC Buffer Overflow Vulnerability
A buffer overflow vulnerability has been reported in Trend Micro ServerProtect. Trend Micro ServerProtect is a centrally managed virus protection console for enterprise-class servers. A remote attacker may exploit this issue to execute arbitrary code on a vulnerable system via a specially crafted...
Update Protection against Trend Micro ServerProtect CreateBinding DCE-RPC Buffer Overflow Vulnerability
A buffer overflow vulnerability has been reported in Trend Micro ServerProtect. Trend Micro ServerProtect is a centrally managed virus protection console for enterprise-class servers. A remote attacker may exploit this issue to execute arbitrary code on a vulnerable system via a specially crafted...
Exploits Diskeeper Remote Memory Read
No description provided by source. //Diskeeper Remote Memory Read //By: Pravus define WIN32LEANANDMEAN define PORT 31038 define DELAY 50 define CRTSECURENODEPRECATE define USE32BITTIMET define servername "127.0.0.1" pragma comment lib,"ws232" include winsock2.h include windows.h include stdlib.h...
Diskeeper information leak
Anonymously accessible RPC functions allows to read higher addresses of processes address space...
Remote Memory Read in Diskeeper 9 - 2007
Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function that is remotely, anonymously...
Diskeeper 9 Remote Memory Disclosure Exploit
Exploit for unknown platform in category remote exploits ============================================ Diskeeper 9 Remote Memory Disclosure Exploit ============================================ / Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for...
Diskeeper 9 - Remote Memory Disclosure
Diskeeper 9 - Remote Memory Disclosure / Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison...
Design/Logic Flaw
The administrative interface aka DkService.exe in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to 1 obtain sensitive information process memory contents, as demonstrated by an attack th...
CVE-2007-4375
The administrative interface aka DkService.exe in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to 1 obtain sensitive information process memory contents, as demonstrated by an attack th...
CVE-2007-4375
The CVE-2007-4375 entry concerns the administrative interface (DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and likely other versions. A memory comparison function is exposed via RPC over TCP, enabling remote attackers to (1) read process memory contents (e.g., obtain module base...
diskeeper-disclose.txt
Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function that is remotely, anonymously...
Novell Client 4.91 SP4 nwspool.dll buffer overflow
Added: 08/10/2007 CVE: CVE-2007-6701 BID: 25092 OSVDB: 37319 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by buffer overflow vulnerabilities in several different functions, allowing remote...
Novell Client 4.91 SP4 nwspool.dll buffer overflow
Added: 08/10/2007 CVE: CVE-2007-6701 BID: 25092 OSVDB: 37319 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by buffer overflow vulnerabilities in several different functions, allowing remote...
Novell Client 4.91 SP4 nwspool.dll buffer overflow
Added: 08/10/2007 CVE: CVE-2007-6701 BID: 25092 OSVDB: 37319 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by buffer overflow vulnerabilities in several different functions, allowing remote...
Novell Client 4.91 SP4 nwspool.dll buffer overflow
Added: 08/10/2007 CVE: CVE-2007-6701 BID: 25092 OSVDB: 37319 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by buffer overflow vulnerabilities in several different functions, allowing remote...
Novell客户端nwspool.dll远程栈缓冲区溢出漏洞
BUGTRAQ ID: 25092 Novell Client是允许NetWare连接到Windows的工作站软件。 Novell Client在处理spoolss命名管道上的RPC数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制客户端。 Novell客户端所安装的nwspool.dll库负责处理通过spoolss命名管道所发送的RPC请求。这个DLL库所暴露的一些RPC函数没有正确地验证参数大小便将用户提供的数据拷贝到了栈缓冲区，这可能触发缓冲区溢出，导致执行任意指令。 Novell Client 4.91 SP4 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...