PT-2003-1696 · Microsoft · Windows 2000 +3

Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 Blaster/Nachi and CVE-2003-0715...

PT-2003-1814 · Microsoft · Windows 2000 +3

Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352...

Microsoft Security Bulletin MS03-039: Buffer Overrun In RPCSS Service Could Allow Code Execution(824146)

-----BEGIN PGP SIGNED MESSAGE----- - - ----------------------------------------------------------------- Title: Buffer Overrun In RPCSS Service Could Allow Code Execution 824146 Date: September 10, 2003 Software: Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Serverr 4.0 Microsoft...

Windows 2000 RPC DoS and privilege escalation

Malformed DCOM RemoteGetClassObject request causes RPC mapper service to crash. After RPC crashes, it's possible for local attacker to hijack epmapper pipe and impersonate local system...

PT-2003-1555 · Microsoft · Windows 2000 +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows NT 4.0, 2000, XP, and Server 2003 Description: A buffer overflow issue in a certain DCOM interface for RPC allows remote attackers to execute arbitrary code via a malformed message. This issue has been exploited by the...

Coda DoS

DoS on invalid RPC packet...

Buffer overflow in Sun rpc

Buffer overflow in xdrarray primitive...

Integer overflow in Sun RPC XDR library routines

Overview The XDR library from Sun Microsystems is a widely used implementation for RPC services. Although the library was originally distributed by Sun Microsystems, multiple vendors have included the vulnerable code in their own implementations. Some implementations of standard functions in this...

CVE-2002-1873

Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call MSRPC, allows remote attackers to cause a denial of service crash or memory consumption via malformed MSRPC calls...

ENTERCEPT RICOCHET ADVISORY: Multi-Vendor CDE ToolTalk Database Server Remote Buffer Overflow Vulnerability

ENTERCEPT RICOCHET ADVISORY Date: Monday, August 12, 2002 Issue: Multi-Vendor CDE ToolTalk Database Server Remote Buffer Overflow Vulnerability DETAILS: The ToolTalk component allows applications to communicate with each other via remote procedure calls RPC across different hosts and platforms. T...

Advisory CA-2002-25 Integer Overflow In XDR Library

CERT Advisory CA-2002-25 Integer Overflow In XDR Library Original release date: August 05, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Applications using vulnerable implementations of SunRPC-derived XDR libraries, which...

FreeBSD-SA-02:36.nfs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:36.nfs Security Advisory The FreeBSD Project Topic: Bug in NFS server code allows remote denial of service Category: core Module: nfs Announced: 2002-08-05 Credits: Mike...

Integer overflow in xdr_array() function when deserializing the XDR stream

Overview There is an integer overflow present in the xdrarray function distributed as part of the Sun Microsystems XDR library. This overflow has been shown to lead to remotely exploitable buffer overflows in multiple applications, leading to the execution of arbitrary code. Although the library...

CVE-1999-0632

The RPC portmapper service is running...

PT-2000-1102 · Microsoft · Shtml.Dll +1

Name of the Vulnerable Software and Affected Versions: Frontpage Server Extensions affected versions not specified Description: The issue allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the / vti bin/ virtual directory. Recommendation...

PT-1999-1585 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT version 4.0 Description: The issue allows remote attackers to cause a denial of service, specifically resource exhaustion, by establishing a series of connections with malformed data. This is related to the improper shutdown of...

CVE-1999-0632

The RPC portmapper service is running...

PT-1999-1236

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to the RPC portmapper service being active. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerabilit...

PT-1998-1107 · Sun · Rpc.Nisd Server

Name of the Vulnerable Software and Affected Versions: NIS+ rpc.nisd server affected versions not specified Description: The issue allows remote attackers to execute certain RPC calls without authentication, potentially obtaining system information, disabling logging, or modifying caches...

PT-1997-1091 · Sgi +1 · Irix +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue allows attackers to perform a denial of service in the RPC portmapper, enabling them to register or unregister RPC services, or spoof RPC services by using a spoofed source IP...