CVE-2005-3658

Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup SBU 6.0 and 6.1 and StorEdge Enterprise Backup Software EBS 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause ...

[VulnWatch] iDefense Security Advisory 01.17.06: EMC Legato Networker nsrd.exe DoS Vulnerability

EMC Legato Networker nsrd.exe DoS Vulnerability iDefense Security Advisory 01.17.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=375 January 17, 2006 I. BACKGROUND EMC Legato NetWorker is a cross-platform backup and recovery application. II. DESCRIPTION Remote exploitation ...

[VulnWatch] iDefense Security Advisory 01.17.06: EMC Legato Networker nsrexecd.exe Heap Overflow Vulnerability

EMC Legato Networker nsrexecd.exe Heap Overflow Vulnerability iDefense Security Advisory 01.17.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=374 January 17, 2006 I. BACKGROUND EMC Legato NetWorker is a cross-platform backup and recovery application. II. DESCRIPTION Remote...

CVE-2005-3659

nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup SBU 6.0 and 6.1 and StorEdge Enterprise Backup Software EBS 7.1 through 7.2L, allows remote attackers to cause a denial of service nsrd service crash via a malforme...

CVE-2005-3658

Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup SBU 6.0 and 6.1 and StorEdge Enterprise Backup Software EBS 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause ...

[SA17674] FreeMED XML_RPC PHP Code Execution Vulnerability

TITLE: FreeMED XMLRPC PHP Code Execution Vulnerability SECUNIA ADVISORY ID: SA17674 VERIFY ADVISORY: http://secunia.com/advisories/17674/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: FreeMED 0.x http://secunia.com/product/6190/ DESCRIPTION: A vulnerability has been...

[SA17693] vtiger CRM Multiple Vulnerabilities

TITLE: FreeMED XMLRPC PHP Code Execution Vulnerability SECUNIA ADVISORY ID: SA17674 VERIFY ADVISORY: http://secunia.com/advisories/17674/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: FreeMED 0.x http://secunia.com/product/6190/ DESCRIPTION: A vulnerability has been...

[SA17674] FreeMED XML_RPC PHP Code Execution Vulnerability

TITLE: FreeMED XMLRPC PHP Code Execution Vulnerability SECUNIA ADVISORY ID: SA17674 VERIFY ADVISORY: http://secunia.com/advisories/17674/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: FreeMED 0.x http://secunia.com/product/6190/ DESCRIPTION: A vulnerability has been...

CVE-2005-3644

PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...

CVE-2005-3644

CVE-2005-3644 describes a memory exhaustion/DoS condition in the Windows Plug and Play (PnP) service. The issue arises in UPnP handling via RPC calls (PNP_GetDeviceList) in Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, where a remote attacker can request a large output bu...

phpAdsNew XML-RPC Library Remote Code Injection

The remote host appears to be running phpAdsNew, an open source ad server written in PHP. The version of phpAdsNew installed on the remote host allows attackers to execute arbitrary PHP code subject to the privileges of the web server user id due to a flaw in its bundled XML-RPC library...

[SA17440] b2evolution XML-RPC PHP Code Execution Vulnerabilities

TITLE: b2evolution XML-RPC PHP Code Execution Vulnerabilities SECUNIA ADVISORY ID: SA17440 VERIFY ADVISORY: http://secunia.com/advisories/17440/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: b2evolution 0.x http://secunia.com/product/2126/ DESCRIPTION: Two...

Detect the HTTP RPC endpoint mapper

This detects the http-rpc-epmap service by connecting to the port 593 and processing the buffer received. This endpoint mapper provides CIS COM+ Internet Services parameters like port 135 epmap for RPC. SPDX-FileCopyrightText: 2005 Alert4Web.com Some text descriptions might be excerpted from a...

SSH Secure-RPC Weak Encrypted Authentication

You are running SSH Communications Security SSH 1.2.27 - 1.2.30. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

snmpXdmid overflow

The remote RPC service 100249 snmpXdmid is vulnerable to a heap overflow which allows any user to obtain a root shell on this host. OpenVAS Vulnerability Test $Id: snmpXdmid.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: snmpXdmid overflow Authors: Intranode Copyright: Copyright C 2001...

Unchecked Buffer in XP Redirector (Q810577)

The remote host is vulnerable to a flaw in the RPC redirector which can allow a local attacker to run code of its choice with the SYSTEM privileges. OpenVAS Vulnerability Test $Id: smbntms03-005.nasl 6040 2017-04-27 09:02:38Z teissa $ Description: Unchecked Buffer in XP Redirector Q810577 Authors...

Detect the HTTP RPC endpoint mapper

This detects the http-rpc-epmap service by connecting to the port 593 and processing the buffer received. This endpoint mapper provides CIS COM+ Internet Services parameters like port 135 epmap for RPC. OpenVAS Vulnerability Test $Id: http-rpc-epmap.nasl 8023 2017-12-07 08:36:26Z teissa $...

Zope Installation Path Disclosure

The remote web server contains an application server that is prone to information disclosure. Description : There is a minor security problem in all releases of Zope prior to version 2.5.1b1 - they reveal the installation path when an invalid XML RPC request is sent. OpenVAS Vulnerability Test $I...

Microsoft RPC Services null pointer reference DoS Vulnerability

MS Windows RPC service RPCSS crashes trying to dereference a null pointer when it receives a certain malformed request. All MS RPC-based services i.e. a large part of MS Windows 2000+ running on the target machine are rendered inoperable. SPDX-FileCopyrightText: 2002 Pavel Kankovsky Some text...

Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350)

An information disclosure and denial of service vulnerability exists when the RPC Runtime Library processes specially crafted messages. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...