CVE-2005-1792

Memory leak in Windows Management Instrumentation WMI service allows attackers to cause a denial of service memory consumption and crash by creating security contexts more quickly than they can be cleared from the RPC cache...

CVE-2005-1792

Memory leak in Windows Management Instrumentation WMI service allows attackers to cause a denial of service memory consumption and crash by creating security contexts more quickly than they can be cleared from the RPC cache...

CVE-2005-1792: Undefined Security Weakness

Memory leak in Windows Management Instrumentation WMI service allows attackers to cause a denial of service memory consumption and crash by creating security contexts more quickly than they can be cleared from the RPC cache...

msmq_deleteobject_ms05_017.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

postnuke -- multiple vulnerabilities

Postnuke Security Announcementss reports of the following vulnerabilities: missing input validation within /modules/Messages/readpmsg.php possible path disclosure within /user.php possible path disclosure within /modules/News/article.php possible remote code injection within /includes/pnMod.php...

PT-2005-2673 · Postnuke · Postnuke

Name of the Vulnerable Software and Affected Versions: PostNuke versions 0.750 through 0.760RC3 Description: The issue allows remote attackers to obtain sensitive information via direct requests to various files, including theme.php and Xanthia.php in the Xanthia module, multiple files in the...

CVE-2005-1468

CVE-2005-1468 affects Ethereal (before 0.10.11) where multiple dissectors (including WSP, Q.931, H.245, KINK, MGCP, RPC, SMBMailslot, SMB NETLOGON, and others) may crash the analyzer via crafted network traffic, causing a denial of service due to a null dereference. Multiple advisories (RHSA-2005...

CVE-2005-1468: Undefined Security Weakness

Multiple unknown vulnerabilities in the 1 WSP, 2 Q.931, 3 H.245, 4 KINK, 5 MGCP, 6 RPC, 7 SMBMailslot, and 8 SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service crash via unknown vectors that lead to a null dereference...

CVE-2005-0089

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the registerinstance method to register an object without a dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute...

CVE-2005-0089

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the registerinstance method to register an object without a dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute...

rpc3telnet.txt

Vulnerability found by Flare@CiSO Greets to nolimit, COREiSO, news, and class101. Versions Tested: RPC-3 Telnet Host - Revision F 3.05, C 1998 This is a basic login-bypass vulnerability found in the RPC-3 Telnet Host v 3.05 made by "Bay Technical Associates". This telnet daemon is used by many...

Microsoft Windows Message Queuing Remote Buffer Overflow Vulnerability

Description A remote buffer overflow vulnerability affects Microsoft Windows. This issue is due to a failure of the affected functionality to properly validate the length of user-supplied strings prior to copying them into static process buffers. This vulnerability may be exploited over RPC. An...

MS05-017 Microsoft Message Queueing Service Path Overflow

This module exploits a stack buffer overflow in the RPC interface to the Microsoft Message Queueing service. The offset to the return address changes based on the length of the system hostname, so this must be provided via the 'HNAME' option. Much thanks to snort.org and Jean-Baptiste Marchand's...

CVE-2005-0957

The CVE-2005-0957 entry concerns BayTech RPC-3 Telnet Daemon (3.05) where an attacker can bypass authentication by sending a specific keystroke sequence at the username prompt. The vulnerability arises from an input sequence that allows access without valid credentials, enabling remote access to ...

CVE-2005-0957

Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt...

CVE-2005-0957: Undefined Security Weakness

Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt...

Bay Technical Associates telnet server logon bypass

Vulnerability found by Flare@CiSO Greets to nolimit, COREiSO, news, and class101. Versions Tested: RPC-3 Telnet Host - Revision F 3.05, C 1998 This is a basic login-bypass vulnerability found in the RPC-3 Telnet Host v 3.05 made by "Bay Technical Associates". This telnet daemon is used by many...

CVE-2002-1622

CVE-2002-1622 describes a buffer overflow in certain RPC routines in IBM AIX 4.3, caused by a vulnerability in a variable data type. The impact stated is the potential execution of arbitrary code by a remote attacker with network access and no authentication required (per the CVE description). Th...

CVE-2002-1622

Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a "variable data type."...

CVE-2002-1622: Undefined Security Weakness

Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a "variable data type."...