2463 matches found
Adobe LiveCycle Data Services Information Disclosure Vulnerability
Adobe LiveCycle Data Services is the United States Odo than Adobe company's set of application servers deployed on and integrated with RIA applications and J2EE and other enterprise applications server software. The software provides remote procedure call RPC services, messaging services and data...
OpenAFS 'bos' Command Spoofing Vulnerability
OpenAFS is an open source distributed file system that allows sharing of files and resources between systems over local and wide area networks. A security vulnerability exists in OpenAFS 1.6.12 and earlier versions. An attacker can exploit the vulnerability to forge RPC commands in a network...
OpenAFS Denial of Service Vulnerability (CNVD-2015-05292)
OpenAFS is a distributed file system that allows sharing of archives and resources between systems over LANs and WANs. A security vulnerability exists in the pioctl support for the OSD FS command in IBM OpenAFS 1.6.12 and earlier versions, which stems from a program writing the result of an RPC...
Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2015-04666)
Microsoft Windows Server is a series of servers based on the windows operating system launched by the U.S. Microsoft Microsoft. A security vulnerability exists in the authentication implementation in the RPC subsystem of Microsoft Windows due to the program not restricting link reflection. A loca...
Microsoft Windows Remote Procedure Call Privilege Elevation Vulnerability (3067505)
This host is missing an important security update according to Microsoft Bulletin MS15-076. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS15-076: Vulnerability in Windows Remote Procedure Call Could Allow Elevation of Privilege (3067505)
The remote Windows host is affected by a privilege escalation vulnerability in the Microsoft Remote Procedure Call RPC due to incorrectly allowing DCE/RPC connection reflection. A remote, authenticated attacker can exploit this vulnerability, with a specially crafted application, to elevate...
The vulnerability of VMware Player allows a hacker to trigger a service failure in the guest or host operating system.
The vulnerability of VMware Player exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure for a 32-bit guest operating system or a 64-bit host operating system using a specially crafted RPC request...
python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding
It was discovered that the Python xmlrpclib did not restrict the size of a gzip compressed HTTP responses. A malicious XMLRPC server could cause an XMLRPC client using xmlrpclib to consume an excessive amount of memory...
Samba prs_append_some_prs_data() memory corruption denial of service vulnerability
Samba is a program that implements the SMB protocol, cross-platform for file sharing and print sharing services. A security vulnerability in the prsappendsomeprsdata function in Samba 'parseprs.c' could be exploited to allow remote attackers to crash the application by sending specially crafted R...
Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6-rpc package of the Debian GNU/Linux operating system can be exploited, which may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...
impacket
Impacket ======== !Latest Versionhttps://img.shields.io/pyp...
VMware Workstation 10.x < 10.0.5 Multiple Vulnerabilities (VMSA-2015-0001 / VMSA-2015-0004) (Windows)
The version of VMware Workstation installed on the remote Windows host is 10.x prior to 10.0.5. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that allows a local attacker to escalate privileges or cause a denial of service via an arbitrary write to a file...
CVE-2015-0430
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality via vectors related to RPC Utility...
CVE-2015-0429
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect integrity and availability via vectors related to RPC Utility...
Unspecified Vulnerability in Oracle Solaris (CNVD-2015-00491)
Oracle Solaris is a unix-based operating system. An unspecified vulnerability exists in Oracle Solaris. It allows attackers to exploit this vulnerability to compromise the 'RPC Utility' subcomponent...
Unspecified Vulnerability in Oracle Solaris (CNVD-2015-00486)
Oracle Solaris is a unix-based operating system. An unspecified vulnerability exists in Oracle Solaris. It allows attackers to exploit this vulnerability to compromise the 'RPC Utility' subcomponent...
Microsoft Host Integration Server Remote Command Execution (MS08-059) - Ver2 (CVE-2008-3466)
Microsoft Host Integration Server HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging, and security systems. . A remote code execution vulnerability has been...
Microsoft DNS Server RPC Management Interface Buffer Overflow (MS07-029) - Ver2 (CVE-2007-1748)
The DNS server service is a component that provides name resolution services to a network.A buffer overflow vulnerability has been reported in the Microsoft Windows Domain Name System DNS Server services.An attacker may exploit this vulnerability to execute arbitrary code on a target system via a...
DCOM the front of the pass to kill the vulnerability ms03-0 4 3 The use of code-vulnerability warning-the black bar safety net
Because you can go udp135 and UDP1024 more than one dynamic port, when many engage in an APT opening-day network firewall-black ice the white list of the machine is also easy to get. I often say that the inside of that MSG vulnerabilities. Aware of the RPC of the importance of after, a series of...
php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime()
An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash...