CVE-2004-0124

The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."...

Immunity Canvas: MS04_011_LSASS

Name| ms04011lsass ---|--- CVE| CVE-2003-0533 Exploit Pack| CANVAS Description| Microsoft Windows LsaSs RPC Overflow Notes| CVE Name: CVE-2003-0533 VENDOR: Microsoft MSADV: MS04-011-LSASS VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/MS04-011.mspx...

RPC bootparamd NIS Domain Name Disclosure

Using the remote bootparamd service, it was possible to obtain the NIS domain of the network. A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12237; scriptversion"$Revision: 1.16 $";...

CVE-2004-0154

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...

CVE-2004-0154

CVE-2004-0154 affects nfs-utils rpc.mountd versions after 1.0.3 and before 1.0.6. The issue allows a denial of service (crash) when performing an NFS mount from a client whose reverse DNS lookup name does not match the forward lookup. Documented in multiple sources (Red Hat RHSA-2004:072, SUSE CV...

Microsoft Windows XP2000 - Lsasrv.dll Remote Universal (MS04-011)

Microsoft Windows XP2000 - Lsasrv.dll Remote Universal MS04-011 / HOD-ms04011-lsasrv-expl.c: MS04011 Lsasrv.dll RPC buffer overflow remote exploit Version 0.1 coded by .:: houseofdabus ::. ------------------------------------------------------------------- Usage: expl connectback IP options...

Microsoft Windows XP/2000 - 'Lsasrv.dll' Remote Universal (MS04-011)

/ HOD-ms04011-lsasrv-expl.c: MS04011 Lsasrv.dll RPC buffer overflow remote exploit Version 0.1 coded by .:: houseofdabus ::. ------------------------------------------------------------------- Usage: expl connectback IP options Targets: 0 0x01004600: WinXP Professional universal lsass.exe 1...

Microsoft Windows - Lsasrv.dll RPC Remote Buffer Overflow (MS04-011)

Microsoft Windows - Lsasrv.dll RPC Remote Buffer Overflow MS04-011 include pragma commentlib,"mpr.lib" pragma commentlib, "ws232" unsigned char scode = "\xEB\x10\x5B\x4B\x33\xC9\x66\xB9\x25\x01\x80\x34\x0B\x99\xE2\xFA" "\xEB\x05\xE8\xEB\xFF\xFF\xFF"...

MS Windows Lsasrv.dll RPC Remote Buffer Overflow Expl (MS04-011)

Exploit for unknown platform in category remote exploits =================================================================== MS Windows Lsasrv.dll RPC Remote Buffer Overflow Exploit MS04-011 =================================================================== include pragma commentlib,"mpr.lib"...

Microsoft Windows - 'Lsasrv.dll' RPC Remote Buffer Overflow (MS04-011)

include pragma commentlib,"mpr.lib" pragma commentlib, "ws232" unsigned char scode = "\xEB\x10\x5B\x4B\x33\xC9\x66\xB9\x25\x01\x80\x34\x0B\x99\xE2\xFA" "\xEB\x05\xE8\xEB\xFF\xFF\xFF" "\x70\x62\x99\x99\x99\xC6\xFD\x38\xA9\x99\x99\x99\x12\xD9\x95\x12"...

CVE-2004-0124

The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."...

CVE-2003-0807

CVE-2003-0807 : A denial-of-service vulnerability in Microsoft Windows where the COM Internet Services (CIS) and RPC over HTTP Proxy components can be overwhelmed by a crafted forwarded response, causing the backend to stop accepting requests. Related connected documents (MS04-012) identify this ...

CVE-2004-0124

CVE-2004-0124 describes an information disclosure flaw in how Microsoft Windows COM object identifiers are created, enabling an attacker to coax a system into opening network ports via specially crafted RPC messages. This is part of MS04-012 RPC/DCOM updates; the impact is described as enabling a...

CVE-2003-0807: Undefined Security Weakness

Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request...

CVE-2004-0124: Undefined Security Weakness

The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."...

Windows NT/2000/XP/2003 RPC buffer overflow

Multiple buffer overflows during RPC request parsing via TCP/135 and another RPC ports...

[Full-Disclosure] EEYE: Microsoft DCOM RPC Race Condition

Microsoft DCOM RPC Race Condition Release Date: April 13, 2004 Date Reported: September 10, 2003 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Server 4.0 Microsoft Windows NT Server 4.0, Terminal Server Edition...

[Full-Disclosure] EEYE: Microsoft DCOM RPC Memory Leak

Microsoft DCOM RPC Memory Leak Release Date: April 13, 2004 Date Reported: September 10, 2003 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Server 4.0 Microsoft Windows NT Server 4.0, Terminal Server Edition...

Microsoft Windows COM Internet Service/RPC Over HTTP Remote Denial Of Service Vulnerability

Description It has been reported that a denial of service condition exists in the COM Internet Service and RPC over HTTP services. This issue is due to a failure of the services to properly handle malformed network responses. Successful exploitation of this issue may allow a remote attacker to...

MS04-012: Microsoft Hotfix (credentialed check) (828741)

The remote host has multiple bugs in its RPC/DCOM implementation 828741. An attacker could exploit one of these flaws to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12206; scriptversion"1.45"; scriptcvsdate"Date:...