7468 matches found
Samba 3.0.21 < 3.0.24 - LSA trans names Heap Overflow (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Samba...
Samba < 3.0.25 NDR MS-RPC Request Heap-Based Overflow
Binary data 3988.prm...
Trend Micro ServerProtect EarthAgent.exe远程栈缓冲区溢出漏洞
Trend ServerProtect是一款企业级反病毒程序。 Trend ServerProtect的DCE/RPC接口实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 ServerProtect默认绑定在TCP 3628端口上的EarthAgent.exe守护程序通过TmRpcSrv.dll暴露以下DCE/RPC接口： / opcode: 0x00, address: 0x65741030 / errorstatust sub65741030 in handlet arg1, in long arg2, insizeisarg4 byte arg3, in long...
php security update
CentOS Errata and Security Advisory CESA-2007:0348 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting langua...
RHEL 4 : php (RHSA-2007:0349)
Updated PHP packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A hea...
php security update
CentOS Errata and Security Advisory CESA-2007:0349 Updated PHP packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language...
Important: Red Hat Security Advisory: php security update
Updated PHP packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A hea...
CVE-2007-2533
Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary code via a crafted RPC message processed by the 1 the RPCFNActiveRollback function in a stcommon.dll, or the 2 ENGSetRealTimeScanConfigInfo or 3 ENGSendEmail...
Buffer overflow
Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary code via a crafted RPC message processed by the 1 the RPCFNActiveRollback function in a stcommon.dll, or the 2 ENGSetRealTimeScanConfigInfo or 3 ENGSendEmail...
Trend Micro ServerProtect EarthAgent RPC Request Remote Buffer Overflow
The remote version of Trend Micro ServerProtect is vulnerable to a stack overflow involving its EarthAgent service. An unauthenticated, remote attacker may be able to leverage this issue with specially- crafted RPC requests to execute arbitrary code on the remote host. Note that by default, Trend...
Trend Micro ServerProtect SpntSvc buffer overflow vulnerability
Overview Trend Micro ServerProtect contains a buffer overflow vulnerability. This vulnerability may allow an attacker to execute arbitrary code on a vulnerable system. Description Trend Micro ServerProtect is an anti-virus application that is designed to run on Windows-based servers. The...
Trend Micro ServerProtect AgRpcCln.dll Buffer Overflow
The remote version of Trend Micro ServerProtect is vulnerable to a stack overflow involving the 'wcscpy' function of the routine 'CAgRpcClient::CreateBinding' in AgRpcCln.dll library. An unauthenticated, remote attacker may be able to leverage this issue with specially crafted RPC requests to its...
CVE-2007-2533
Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary code via a crafted RPC message processed by the 1 the RPCFNActiveRollback function in a stcommon.dll, or the 2 ENGSetRealTimeScanConfigInfo or 3 ENGSendEmail...
CVE-2007-2533
Trend Micro ServerProtect 5.58 is affected by multiple buffer overflows exploitable via a crafted RPC message processed by (1) RPCFN_ActiveRollback in stcommon.dll, (2) ENG_SetRealTimeScanConfigInfo, or (3) ENG_SendEmail in eng50.dll. The vulnerabilities allow remote code execution with network a...
ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability
ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-025.html May 7, 2007 -- CVE ID: CVE-2007-2508 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection:...
Immunity Canvas: TM_SPROTECTAGENT
Name| tmsprotectagent ---|--- CVE| CVE-2007-2508 Exploit Pack| CANVAS Description| Trend Micro ServerProtect Agent RPC Overflow Notes| CVE Name: CVE-2007-2508 VENDOR: Trend Micro Notes: Platforms Tested: References: http://www.tippingpoint.com/security/advisories/TSRT-07-025.html CVE Url:...
Buffer overflow
Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerability than CVE-2007-2508...
CVE-2007-2528
Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerability than CVE-2007-2508...
Microsoft Security Bulletin MS07-029 Vulnerability in Windows DNS RPC Interface Could Allow Remote Code Execution (935966)
Microsoft Security Bulletin MS07-029 Vulnerability in Windows DNS RPC Interface Could Allow Remote Code Execution 935966 Published: May 8, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...
MS07-029: Vulnerability in Windows DNS RPC Interface Could Allow Remote Code Execution (935966)
The remote host has the Windows DNS server installed. There is a flaw in the remote version of this server that may allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. To exploit this flaw, an attacker needs to connect to the DNS server RPC interface and send...