FreeBSD Remote NFS RPC Request Denial of Service

This module sends a specially-crafted NFS Mount request causing a kernel panic on host running FreeBSD 6.0. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FreeBSD Remote NFS RPC Request Denial...

MS Windows Wkssvc NetrJoinDomain2 Stack Overflow Exploit (MS06-070)

No description provided by source. / Microsoft Windows Wkssvc NetrJoinDomain2 Stack OverflowMS06-070 Exploit by cocoruderfrankruderathotmail.com,2006.11.15 page:http://ruder.cdut.net/default.asp Code fixed by S A Stevens - 17.11.2006 - changed shellcode, Changed code to correct jmp EBX address an...

Microsoft Windows - Wkssvc NetrJoinDomain2 Stack Overflow (MS06-070)

/ Microsoft Windows Wkssvc NetrJoinDomain2 Stack OverflowMS06-070 Exploit by cocoruderfrankruderathotmail.com,2006.11.15 page:http://ruder.cdut.net/default.asp Code fixed by S A Stevens - 17.11.2006 - changed shellcode, Changed code to correct jmp EBX address and fixed exploit output status. Gree...

Immunity Canvas: MS06_066

Name| ms06066 ---|--- CVE| CVE-2006-4688 Exploit Pack| CANVAS Description| Microsoft Netware RPC Interface Overflow Notes| References: http://www.microsoft.com/technet/security/bulletin/ms06-066.mspx CVE Name: CVE-2006-4688 VENDOR: Microsoft MSADV: MS06-066 Repeatability: One shot Note: Date...

CVE-2006-4691

Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service wkssvc.dll in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname...

CVE-2006-4691

CVE-2006-4691 is a stack-based buffer overflow in the NetpManageIPCConnect function of wkssvc.dll (Workstation service) on Microsoft Windows 2000 SP4 and Windows XP SP2. The vulnerability is triggered by long NetrJoinDomain2 RPC hostname parameters over the network, allowing remote code execution...

[Full-disclosure] EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow

eEye Research - http://research.eeye.com Workstation Service NetpManageIPCConnect Buffer Overflow Release Date: November 14, 2006 Date Reported: July 25, 2006 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Remote Code Execution Windows XP SP1 Local Privilege...

BrightStor ARCserve Message Engine RPC server buffer overflow

Added: 11/09/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29535 Background The BrightStor ARCserve Backup family of products includes a Message Engine which listens for connections on port 6503/TCP. Problem A buffer overflow in the ASCORE.dll library allows remote attackers to execute arbitrary...

BrightStor ARCserve Message Engine RPC server buffer overflow

Added: 11/09/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29535 Background The BrightStor ARCserve Backup family of products includes a Message Engine which listens for connections on port 6503/TCP. Problem A buffer overflow in the ASCORE.dll library allows remote attackers to execute arbitrary...

Computer Associates BrightStor ARCserv and Protection Suite products RPC buffer overflow vulnerabilities

Overview Multiple vulnerabilities exist in Computer Associates backup products. If successfully exploited, these vulnerabilities may allow an attacker to execute arbitrary code. Description BrightStor ARCserve Backup is a backup and data retention tool that integrates with other BrightStor Data...

Microsoft Windows MSDTC无效内存访问拒绝服务漏洞（MS06-018）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统的MSDTC处理某些畸形DCE-RPC请求时存在内存分配漏洞，远程攻击者可能利用此漏洞对服务器执行拒绝服务攻击。 MS05-051中所述的MSDTC RPC漏洞利用的是MSDTCPRX.DLL中MIDLuserallocate函数实现内存管理器的方式。该函数接收任何分配大小，但最多只能分配4KB的内存。然后RPCRT4会试图将管理数据储存到memory address + requested size，这就可能导致修改任意内存，因为任意大小的分配尝试都会成功，但所保留的内存最多只有4KB。...

Microsoft Windows MSDTC堆溢出漏洞（MS06-018）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统的MSDTC进程处理畸形的DCE-RPC请求时存在漏洞，远程攻击者可能利用此漏洞对服务器执行拒绝服务攻击。 在MSDTC.EXE进程中MSDTCPRX.DLL起到了RPC Server的作用，使用动态TCP端口做为其RPC端点，906B0CE0-C70B-1067-B317-00DD010662DA...

CA多个产品消息引擎RPC服务器多个缓冲区溢出漏洞

Computer Associates是世界领先的安全厂商，产品包括多种杀毒软件及备份恢复系统。 CA多个产品的消息引擎处理用户请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 ASCORE.dll是CA多个产品的消息引擎RPC服务器所使用的DLL。当消息引擎（msgeng.exe）在处理TCP 6503端口ID为dc246bf0-7a7a-11ce-9f88-00805fe43838的端点上的RPC请求时，可能会触发一个堆溢出和一个栈溢出。有漏洞的操作分别是由这个端口上的Opnum 43和Opnum...

Microsoft Windows RPC相互认证服务欺骗漏洞（MS06-031）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows在通过SSL进行相互认证时没有正确的验证RPC服务器，允许攻击者欺骗RPC服务器，诱骗用户连接到看起来好像有效的恶意RPC服务器。 Microsoft Windows 2000SP4 MS06-031：Vulnerability in RPC Mutual Authentication Could Allow Spoofing 917736 链接：http://www.microsoft.com/technet/security/Bulletin/MS06-031.mspx 补丁下载：...

Microsoft Windows路由和远程访问服务溢出漏洞（MS06-025）

Microsoft Windows是微软发布的非常流行的操作系统。 远程攻击者可以通过特制的RPC请求触发Microsoft Windows路由和远程访问服务（RRAS）中的缓冲区溢出，导致执行任意指令。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 Microsoft Windows 2000 临时解决方法： 禁用远程访问连接管理器服务。 在防火墙阻断：...

MS Windows RPC Locator Service Remote Exploit

No description provided by source. / rpcexp.c RPC LOCATOR Exploit Autor: Marcin Wolak mail: [email protected] Last update: 30 march 2003 / / About Compilation: What You need to compile rpcexp.c ? 1. MS Platform SDK August SDK is sufficient. 2. Compilator f.e. MS Visual C++ 6.0. rpcns4.lib is needed...

MS Windows NetpIsRemote() Remote Overflow Exploit (MS06-040)

No description provided by source. / MS06-040 Remote Code Execution Proof of Concept Ported by ub3r st4r aka iRP --------------------------------------------------------------------- Tested Against: Windows XP SP1 Windows 2000 SP4 Systems Affected: Microsoft Windows 2000 SP0-SP4 Microsoft Windows...

Debian DSA-1049-1 : ethereal - several vulnerabilities

Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1932 The OID printing routine is susceptible to an off-by-one error. - CVE-2006-1933 The UMA and BER...

Immunity Canvas: BRIGHTSTOR_MESSAGE

Name| brightstormessage ---|--- CVE| CVE-2006-5143 Exploit Pack| CANVAS Description| CA BrightStor ARCserve Backup RPC Interface Overflow Notes| CVE Name: CVE-2006-5143 VENDOR: Computer Associates Notes: Platforms Tested: References: http://dvlabs.tippingpoint.com/advisory/TPTI-06-11 CVE Url:...

CVE-2006-5143

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via craft...