2159 matches found
Motorola Timbuktu login request buffer overflow
Added: 05/15/2008 CVE: CVE-2007-4221 BID: 25454 OSVDB: 40124 Background Motorola Timbuktu is remote control software for Windows and Mac. It runs a service which listens for connections on port 407/TCP or 407/UDP. Problem A buffer overflow vulnerability when processing login requests allows remot...
CA Unicenter DSM ITRM Legends ActiveX integer overflow
Overview The CA Unicenter DSM ITRM Legends ActiveX control contains an integer overflow vulnerability, which can allow a remote attacker to execute arbitrary code on a vulnerable system. Description CA Unicenter DSM ITRM Legends is an ActiveX control that is included with multiple CA products. Th...
CA DSM gui_cm_ctrls ActiveX Control Vulnerability
Title: CA DSM guicmctrls ActiveX Control Vulnerability CA Advisory Date: 2008-04-15 Reported By: Greg Linares of eEye Digital Security Impact: A remote attacker can execute arbitrary code or cause a denial of service condition. Summary: CA products that implement the DSM guicmctrls ActiveX contro...
Explain in detail the hacker used a remote control Trojan horse-vulnerability warning-the black bar safety net
Like browsing online the news people will often see someone privacy is hack theft, or in order to blackmail the victim thing. Here we might ask, How do they do it? In fact, the answer is very simple, but is the use of a remote Trojan to achieve control, the following the author will for the hacki...
CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability
Title: CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability CVE: CVE-2008-1472 CA Advisory Date: 2008-03-28 Reported By: Exploit code posted at milw0rm.com Impact: A remote attacker can cause a denial of service or execute arbitrary code. Summary: CA products that...
Vulnerabilities in Timbuktu Pro 8.6.5
Luigi Auriemma Application: Timbuktu Pro Remote Control Software http://www.netopia.com/software/products/tb2/ Versions: = 8.6.5 RC 229 Platforms: Windows Mac OS X has not been tested Bugs: A Denial of Service B limited upload directory traversal Exploitation: remote Date: 10 Mar 2008 Author: Lui...
Move Networks Quantum Streaming Player Control - Remote Buffer Overflow
Move Networks Quantum Streaming Player Control - Remote Buffer Overflow function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...
Move Networks Quantum Streaming Player Control - Remote Buffer Overflow
function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...
VNCviewer in Listen Mode Detection
The remote service is a VNC viewer in listen mode, allowing VNC servers to initiate reverse connections back to the client running on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid30150;...
CVE-2008-0383
CVE-2008-0383 affects MyBB 1.2.10 and earlier. The vulnerability is a set of SQL injection flaws exploitable via specific parameters: mergepost in do_mergeposts, rid in allreports, threads in do_multimovethreads (moderation.php), and gid in admin/usergroups.php. Root cause is improper handling of...
UPnP enabled by default in multiple devices
Overview Multiple vendors ship devices with UPnP enabled by default. By convincing a user to open a malicious URL, an attacker may be able to remotely control or configure UPnP enabled devices. Description Universal Plug and Play UPnP is a collection of protocols maintained and distributed by the...
Avocent KVM Over IP Switch Detection
The remote host is an Avocent KVM over IP switch that provides for control of connected servers and devices. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29923; scriptversion"1.12"; scriptnameenglish:"Avocent KVM Over IP Switch Detection"; scriptsummaryenglish:"Loo...
Microsoft Windows FTP客户端多个远程溢出漏洞
Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统自带的FTP客户端实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制客户端。 Windows操作系统所捆绑的FTP客户端没有正确地验证mget、dir、user、password、ls等命令，如果用户使用FTP客户端连接到了FTP服务器上带有超长文件夹名或文件名的目录并发布了上述命令的话，就可以触发缓冲区溢出，导致拒绝服务或执行任意指令。但这个漏洞较难利用，因为需要社会工程学且必须以有漏洞命令参数的形式注入shellcode。 Microsoft Windows XP Microsoft Windo...
HP OVCM/Radia Notify Daemon Detection
The remote service is an HP OVCM/Radia Notify Daemon, a component of an endpoint management solution. The presence of this service typically indicates the host is a managed device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid27627; scriptversion"1.12";...
Firebird process_packet() Remote Stack Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Firebird SQL server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the database service fbserver.exe, which binds to TCP port 3050. When processing a...
Magic magiclink-vulnerability warning-the black bar safety net
Magic control MagicLink1. 4 remote control software Version 1.4 update 1. Using a more complex encryption algorithm, the encrypted message information. 2. You can set the Message ID to make the connection more secure,1.4the previous Server version, the message identity is set toCMJSPY2INFO 1....
NetSupport NSM / NSS Initial Connection Setup Configuration Exchange Remote Overflow
NetSupport Manager NSM, a multi-platform remote control application, is installed on the remote host. According to its version, the NetSupport Manager client component on the remote host fails to properly validate input during the initial client connection sequence. An unauthenticated, remote...
NetSupport Manager Client Spoofing Remote Authentication Bypass
NetSupport Manager NSM, a multi-platform remote control application, is installed on the remote host. According to its version, the NetSupport Manager client component on the remote host does not properly handle authentication sessions. A remote attacker may be able to leverage this issue to pose...
Tencent QQ scene vulnerability to the hack of the law-vulnerability and early warning-the black bar safety net
According to analysys international released the 2 0 0 7 in the first 2 quarters of China im market quarterly monitoring report shows, Chinese active IM software account has reached 3. 7 6 million, which has 2. 9 million active user accounts for Tencent QQ is well deserved IM the king. But did yo...
Timbuktu Detection (UDP)
The remote service is the UDP port for Timbuktu, a remote control software application for Windows and Mac OS X. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25953; scriptversion"1.10"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Timbuktu Detection UDP";...