2195 matches found
CVE-2017-6599
A vulnerability in Google-defined remote procedure call gRPC handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash due to a system memory leak, resulting in a denial of service DoS condition. This vulnerability...
Integer overflow
Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...
UBUNTU-CVE-2016-9772
OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the 1 client cache partition, 2 fileserver vice partition, or 3 certain RPC responses...
Rpcbind 'rpcb_svc_com.c' Remote Memory Corruption Vulnerability
Rpcbind is a service that translates RPC program numbers into generic addresses. A memory corruption vulnerability exists in the xprtsetcaller in the rpcbsvccom.c file in Rpcbind 0.2.1 and earlier versions. A remote attacker can exploit this vulnerability by sending specially crafted packets to...
BSA-2016-008
Summary Security Advisory ID : BSA-2016-008 Component : RPC Revision : 1.0 N/A...
samba: Client side SMB2/3 required signing can be downgraded
A flaw was found in the way Samba initiated signed DCE/RPC connections. A man-in-the-middle attacker could use this flaw to downgrade the connection to not use signing and therefore impersonate the server...
samba: Client side SMB2/3 required signing can be downgraded
A flaw was found in the way Samba initiated signed DCE/RPC connections. A man-in-the-middle attacker could use this flaw to downgrade the connection to not use signing and therefore impersonate the server...
Multiple Command Injection Vulnerabilities in Veil-Evasion RPC
Veil-Evasion is a suite of tools designed specifically for generating kill-free MSFPAYLOAD. A command injection vulnerability exists in Veil-Evasion versions 2.5.2 through 2.24, which can be exploited by an attacker to execute arbitrary commands in an affected application...
Apache XML-RPC Remote Code Execution Vulnerability
Apache XML-RPC is the United States Apache Apache Software Foundation of a simple, lightweight set of RPC communication through the HTTP protocol specification. A remote code execution vulnerability exists in Apache XML-RPC, which can be exploited by an attacker to execute arbitrary code in an...
The vulnerability of the Windows operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the Remote Procedure Call LRPC of Microsoft allows attackers to circumvent security restrictions. This vulnerability relates to the leakage of messages sent by the LRPC server to clients, if those messages contain data that is not intended for such messages. RPC considers suc...
The vulnerability of the Linter Bastion database management system allows a malicious individual to cause errors in the program’s operation or execute arbitrary code.
The design of the RPC server linstmgr.exe is based on the assumption that client applications will always send valid data and behave as expected. Sending invalid data may cause errors in the program’s operation or may execute arbitrary code...
The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.
In the procedure “sub40FF03” at address “0x004100E0”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of RPC calls numbered 0x11 “0x0040C4CB”. This vulnerability allows a malicious attacker to execute arbitrary code with...
The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.
In the procedure “sub40FBE6” at address “0x0040FC0A”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x1A “0x0040DB0F”. This vulnerability allows a malicious attacker to execute arbitrary code with...
The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.
In the procedure “sub0040F059” at address “0x0040F092”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x15 “0x0040CD91”. This vulnerability allows a malicious attacker to execute arbitrary code wi...
The vulnerability of the Linter Bastion database management system allows a malicious individual to control any service on a remote computer.
The RPC call with number 0x0A "0x0040AF25" allows a malicious individual to control any Windows service on a remote computer where linstmgr.exe is running, even though they have no authority to do so. This could enable the malicious individual to interfere with the normal operation of the service...
The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges or to disrupt the operation of the program.
In the procedure “sub410855” for addresses “0x00410C32”, “0x00410D0C”, “0x00410D4B”, “0x00410DCF”, “0x00410EB1”, “0x00410F98”, “0x00410FEC”, “0x00411141”, there is no verification of the correctness of the input data. This may lead to buffer overflows during the processing of RPC calls with numbe...
The vulnerability of the Linter Bastion database management system allows a malicious individual to disrupt the normal operation of the database management system.
The RPC call with number 0x12 "0x0040C73C" allows a malicious individual to alter the configuration of the kernel startup file of the Linter Bastion database management system, thereby potentially disrupting the normal operation of the database management system...
The vulnerability of the Linter Bastion database management system allows a malicious individual to increase their privileges.
The vulnerability in the RPC server linstmgr.exe was due to an erroneous assumption that only users with administrative privileges have access to connect to the server. This oversight, combined with the fact that the RPC server operates with the “SYSTEM” user account, allows for an increase in...
The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.
In the procedure “sub41162C” at address “0x00411688”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x13 “0x0040C95C”. This vulnerability allows a malicious attacker to execute arbitrary code with...
The vulnerability of the Linter Bastion database management system allows a malicious individual to disrupt the normal operation of the database management system.
The RPC call with number 0x19 "0x0040D8F0" allows a malicious individual to alter the configuration of the kernel startup file of the Linter Bastion database management system, thereby potentially disrupting the normal operation of the database management system...