Stack overflow

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...

DSquare Exploit Pack: D2SEC_NFRAGENT

Name| d2secnfragent ---|--- CVE| CVE-2011-0994 Exploit Pack| D2ExploitPack Description| Novell File Reporter Agent Stack Overflow Vulnerability Notes|...

CVE-2011-0994

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...

CVE-2011-0994

The CVE-2011-0994 issue affects the Novell File Reporter Agent (NFRAgent.exe). It is a stack/buffer overflow caused by improper boundary handling while parsing XML data, enabling a remote attacker to potentially execute arbitrary code on vulnerable Windows hosts. Public sources consistently refer...

Novell File Reporter Agent XML解析缓冲区溢出漏洞

CVE ID: CVE-2011-0994 Novell File Reporter可提供现有文件信息、最后访问数据时间，文件的副本信息及文件位置等网络服务器上存储的无数文件信息并可规划存储空间。 Novell File Reporter在实现上存在安全漏洞，攻击者可利用此漏洞以系统级别的权限执行任意代码，控制受影响系统。 此漏洞源于在处理某些XML标签的内容时File Reporter Agent NFRAgent.exe中的边界错误，可通过发送到TCP端口3037的特制数据造成栈缓冲区溢出。 Novell File Reporter 1.x 厂商补丁： Novell ------...

ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability

ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-116 April 4, 2011 -- CVE ID: CVE-2011-0994 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell File Reporter --...

Novell File Reporter Agent buffer overflow

NFRAgent.exe TCP/3037 buffer overflow...

Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Agent. Authentication is not required to exploit this vulnerability. The flaw exists within the NFRAgent.exe component which listens by default on TCP port 3037. When handling...

ASPSiteware Project Reporter SQL Injection Vulnerability

Exploit for asp platform in category web applications ======================================================== ASPSiteware Project Reporter SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1...

ASPSiteWare Project Reporter - SQL Injection

Author: R4dc0re Exploit Title: ASPSiteware Project Reporter SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Version:1.0 Price:50$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects...

ASPSiteware Project Reporter 1.0 SQL Injection

Author: R4dc0re Exploit Title: ASPSiteware Project Reporter SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Demo Link:http://www.aspsiteware.com/Project/ Version:1.0 Price:50$ Contact: [email protected] Website: www.1337db.com Greetings to:...

ASPSiteWare Project Reporter - SQL Injection

ASPSiteWare Project Reporter - SQL Injection Author: R4dc0re Exploit Title: ASPSiteware Project Reporter SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Version:1.0 Price:50$ Contact: [email protected] Website: www.1337db.com Greetings to:...

A Closer Look At ATM Skimmers

Security reporter Brian Krebs goes visual with ATM skimmers, asking readers to look at images and see if they would be able to tell the difference between a real ATM card reader and actual skimming devices. Read the full article. KrebsonSecurity.com...

WinMount 3.4.1020 Final Commandline Vulnerability

Exploit for windows platform in category local exploits ================================================= WinMount 3.4.1020 Final Commandline Vulnerability ================================================= Exploit Title : Commandline vulnerability Date : 27 Oct 2010 Author : STRELiTZIA Software :...

Design/Logic Flaw

VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server CPS 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager NOM 6.0 GA through 6.5.5; Veritas Backup Reporter VBR 6.0 GA through 6.6; Veritas Storage Foundation SF 3.5; Veritas Storage Foundation for Windows High...

Issue security based on workflow status

I would be great if permission types could be associated with workflow status. What we would like to do is limit the ability to edit an issue by the reporter to a specific workflow status. Using the issue security scheme is not possible since the reporter should always be allowed to view the issu...

HP OpenView Reporter / HP OpenView Performance Agent DoS

No description provided...

[security bulletin] HPSBMA02391 SSRT071481 rev.1 - HP OpenView Reporter and HP Reporter Running on Windows, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01612418 Version: 1 HPSBMA02391 SSRT071481 rev.1 - HP OpenView Reporter and HP Reporter Running on Windows, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should b...

joomlaprodesk-lfi.txt

------------------------------------------------------------------------------------------------------- Joomla Component ProDesk v 1.0 AND 1.2 comprodesk&includefile Local File Inclusion Vulnerability http://joomlashowroom.com/index.php/Pro-Desk-Support-Center/Pro-Desk-Support-Center.html...

CVE-2007-4349

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...