DEBIAN-CVE-2012-1182

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call...

samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call...

glibc: svc_run() produces high cpu usage when accept() fails with EMFILE error

A denial of service flaw was found in the remote procedure call RPC implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time...

glibc: svc_run() produces high cpu usage when accept() fails with EMFILE error

A denial of service flaw was found in the remote procedure call RPC implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time...

glibc: svc_run() produces high cpu usage when accept() fails with EMFILE error

A denial of service flaw was found in the remote procedure call RPC implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time...

Moderate: Red Hat Security Advisory: glibc security and bug fix update

Updated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

DEBIAN-CVE-2011-3369

The addconversation function in conversations.c in EtherApe before 0.9.12 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an RPC packet, related to the getrpc function in decodeproto.c...

Remote Procedure Call Service - MSF Buffer Overflow

Document Title: =============== Remote Procedure Call Service - MSF Buffer Overflow References: =========== Download: http://www.vulnerability-lab.com/resources/videos/24.wmv View: http://www.youtube.com/watch?v=VD9-mj6Y5BI Release Date: ============= 2011-06-10 Vulnerability Laboratory ID VL-ID:...

Remote Procedure Call Service - MSF Buffer Overflow

Document Title: =============== Remote Procedure Call Service - MSF Buffer Overflow References: =========== Download: http://www.vulnerability-lab.com/resources/videos/24.wmv View: http://www.youtube.com/watch?v=VD9-mj6Y5BI Release Date: ============= 2011-06-10 Vulnerability Laboratory ID VL-ID:...

rhn_satellite: Improper channel comps information management

Red Hat Network RHN Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service failed yum operations via vectors related to configuration and package group comps.xml files for channels...

kernel: deficiency in handling of invalid data packets in lockd

Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux RHEL 6 might allow remote attackers to cause a denial of service crash via malformed data in a packet, related to lockd and the svcxprtreceived...

Advantech/Broadwin WebAccess RPC Vulnerability

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-11-094-02A Advantech/Broadwin WebAccess RPC Vulnerability that was published November 4, 2011, on the NCCIC/ICS‑CERT Web site. --------- Begin Update B Part 1 of 5 -------- Independent security researcher Rubén...

DCE-RPC Fragmented Requests (CVE-2010-0102)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

Microsoft Windows Netlogon RPC Null dereference Denial of Service (MS10-101; CVE-2010-2742)

The Netlogon Remote Protocol is a remote procedure call RPC interface that is used for user and machine authentication on domain-based networks. A remote denial of service vulnerability has been discovered in implementations of the Netlogon RPC Service on affected versions of Windows Server. The...

DCE-RPC Big Endian Evasion Technique

DCE/RPC stands for "Distributed Computing Environment / Remote Procedure Calls". It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having...

Windows Local Procedure Call Privilege Elevation Vulnerability (2360937)

This host is missing a critical security update according to Microsoft Bulletin MS10-084. OpenVAS Vulnerability Test $Id: secpodms10-084.nasl 5361 2017-02-20 11:57:13Z cfi $ Windows Local Procedure Call Privilege Elevation Vulnerability 2360937 Authors: Madhuri D Copyright c 2010 SecPod,...

CVE-2010-2567

CVE-2010-2567 is an RPC memory corruption vulnerability in the Windows XP SP2/SP3 and Windows Server 2003 SP2 RPC client. The root cause is improper memory allocation while parsing RPC responses, which allows a remote server or a man-in-the-middle attacker to execute arbitrary code via a malforme...

Vulnerability in Remote Procedure Call Could Allow Remote Code Execution (982802)

This host is missing a critical security update according to Microsoft Bulletin MS10-066. OpenVAS Vulnerability Test $Id: secpodms10-066.nasl 5361 2017-02-20 11:57:13Z cfi $ Vulnerability in Remote Procedure Call Could Allow Remote Code Execution 982802 Authors: Madhuri D Copyright c 2010 SecPod,...

Microsoft Security Bulletin MS10-066 - Important Vulnerability in Remote Procedure Call Could Allow Remote Code Execution (982802)

Microsoft Security Bulletin MS10-066 - Important Vulnerability in Remote Procedure Call Could Allow Remote Code Execution 982802 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Windows...

Vulnerability in Remote Procedure Call Could Allow Remote Code Execution (982802)

This host is missing a critical security update according to Microsoft Bulletin MS10-066. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...