ZDI-07-045: Novell Client NWSPOOL.DLL Stack Overflow Vulnerability

ZDI-07-045: Novell Client NWSPOOL.DLL Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-045.html August 6, 2007 -- CVE ID: Pending Assignment -- Affected Vendor: Novell -- Affected Products: Novell Netware Client -- TippingPointTM IPS Customer Protection: TippingPoin...

Novell Client NWSPOOL.DLL Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the Novell Netware Client. Authentication is not required to exploit this vulnerability. The specific flaw exists in nwspool.dll which is responsible for handling RPC requests through...

CVE-2007-4044

Rejected reason: The MS-RPC functionality in smbd in Samba 3 on SUSE Linux before 20070720 does not include "one character in the shell escape handling." NOTE: this issue was originally characterized as a shell metacharacter issue due to an incomplete fix for CVE-2007-2447, which was interpreted ...

Design/Logic Flaw

Rejected reason: The MS-RPC functionality in smbd in Samba 3 on SUSE Linux before 20070720 does not include "one character in the shell escape handling." NOTE: this issue was originally characterized as a shell metacharacter issue due to an incomplete fix for CVE-2007-2447, which was interpreted ...

CVE-2007-4044

CVE-2007-4044 entry is rejected/not used and does not represent an active vulnerability.

GLSA-200707-11 : MIT Kerberos 5: Arbitrary remote code execution

The remote host is affected by the vulnerability described in GLSA-200707-11 MIT Kerberos 5: Arbitrary remote code execution kadmind is affected by multiple vulnerabilities in the RPC library shipped with MIT Kerberos 5. It fails to properly handle zero-length RPC credentials CVE-2007-2442 and th...

lsa_transnames_heap-solaris.rb.txt

$Id: lsatransnamesheap.rb 5046 2007-07-12 00:41:00Z ramon $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

[CAID 35515]: CA Products Alert Service RPC Procedure Buffer Overflow Vulnerabilities

Title: CAID 35515: CA Products Alert Service RPC Procedure Buffer Overflow Vulnerabilities CA Vuln ID CAID: 35515 CA Advisory Date: 2007-07-17 Reported By: Anonymous researcher working with the iDefense VCP Impact: Remote attacker can cause a denial of service or execute arbitrary code. Summary:...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

CA eTrust Integrated Threat Management multiple buffer overflow

Buffer overflows in Alert Notification Server RPC interface...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Stack overflow

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA formerly Computer Associates Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allo...

CVE-2007-3825

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA formerly Computer Associates Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allo...

CVE-2007-3825

CA Alert Notification Server (alert.exe) is affected by multiple stack-based buffer overflows in its RPC handling, prior to version 8.0.255.0, used across Threat Manager for the Enterprise, Protection Suites, BrightStor ARCserve Backup, and BrightStor Enterprise Backup. The vulnerabilities allow ...

CVE-2007-3825

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA formerly Computer Associates Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allo...

CA产品警告通知服务器远程栈溢出漏洞

CVECAN ID: CVE-2007-3825 警告通知服务器（alert.exe）是很多CA产品都在使用的服务，用于为控制台用户提供通知。 警告通知服务器所注册的RPC接口（GUID 3d742890-397c-11cf-9bf1-00805f88cb72）存在栈溢出漏洞。如果远程攻击者向该服务接口提交了超长的RPC请求的话，就可能触发这个溢出，导致以系统权限执行任意指令。 可使用SMB协议到达有漏洞的代码，因此在Windows XP及之后系统上必须有效的认证凭据，而Windows 2000无须认证。 Computer Associates BrightStor ARCserve...

Symantec Backup Exec for Windows RPC Crafted ncacn_ip_tcp Request Remote Overflow

The remote host is running a version of VERITAS Backup Windows RPC server which is vulnerable to a remote buffer overflow. An attacker may exploit this flaw to execute arbitrary code on the remote host or to disable this service remotely. To exploit this flaw, an attacker would need to send a...

CVE-2007-3509

Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a denial of service process exit and possibly execute arbitrary code via crafted ncacniptcp requests...