Microsoft Windows Server Service RPC Request Buffer Overflow (MS08-067; CVE-2008-4250)

Microsoft Server Service provides support for Remote Procedure Call RPC, resource sharing, and named pipe communication over the network. A remote code execution vulnerability has been discovered in Microsoft Windows Server Service. The vulnerability is due to an error in the Server service that...

CVE-2008-4250: Improper Control of Generation of Code

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild ...

HP OpenView产品Trace服务RPC请求拒绝服务漏洞

BUGTRAQ ID: 31860 CVECAN ID: CVE-2007-4349 HP OpenView是惠普公司开发的系列网络管理软件。 HP OpenView产品的Trace服务在TCP 5051或5053端口上所暴露的RPC服务没有要求认证，如果向该端口发送了特定序列的RPC请求的话，就可能错误的引用对象，导致引用所分配缓冲区范围之外的内存。成功利用这个漏洞只能导致拒绝服务的情况。 HP OpenView Report 3.70 HP Performance Agent 4.70 HP --...

MS08-067: Microsoft Windows Server Service Crafted RPC Request Handling Unspecified Remote Code Execution (958644) (ECLIPSEDWING)

The remote Windows host is affected by a remote code execution vulnerability in the 'Server' service due to improper handling of RPC requests. An unauthenticated, remote attacker can exploit this, via a specially crafted RPC request, to execute arbitrary code with 'System' privileges. ECLIPSEDWIN...

MS08-067: Microsoft Windows Server Service Crafted RPC Request Handling Remote Code Execution (958644) (ECLIPSEDWING) (uncredentialed check)

The remote Windows host is affected by a remote code execution vulnerability in the 'Server' service due to improper handling of RPC requests. An unauthenticated, remote attacker can exploit this, via a specially crafted RPC request, to execute arbitrary code with 'System' privileges. ECLIPSEDWIN...

Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects RPC Remote Procedure Call handling in the Server service. An attacker could exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete...

Design/Logic Flaw

The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service daemon crash via a crafted request to procedure 8 in program 100000 rpcbind, related to the XDRDECODE operation and the taddr2uaddr function. NOTE: this might be a duplicate of CVE-2007-0165...

CVE-2008-4619

The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service daemon crash via a crafted request to procedure 8 in program 100000 rpcbind, related to the XDRDECODE operation and the taddr2uaddr function. NOTE: this might be a duplicate of CVE-2007-0165...

CVE-2008-4619

CVE-2008-4619 affects Sun Solaris 9 RPC subsystem (rpcbind) via a crafted request to procedure 8 in program 100000, exploiting XDR_DECODE in taddr2uaddr and causing daemon crash (DoS). Connected documents tie this to libtirpc/TI-RPC implementations used by various vendors, with public advisories ...

CVE-2008-4619

The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service daemon crash via a crafted request to procedure 8 in program 100000 rpcbind, related to the XDRDECODE operation and the taddr2uaddr function. NOTE: this might be a duplicate of CVE-2007-0165...

Solaris 9 PortBind XDR-DECODE taddr2uaddr() Remote DoS Exploit

No description provided by source. / //////////////////////////////////////////////////////////// // Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS //////////////////////////////////////////////////////////// // // Federico L. Bossi Bonin // fbossiatglobalSTdotcomdotar...

Solaris 9 PortBind XDR-DECODE taddr2uaddr() Remote DoS Exploit

Exploit for solaris platform in category dos / poc ============================================================== Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS Exploit ============================================================== /...

Solaris 9 PortBind - XDR-DECODE taddr2uaddr() Remote Denial of Service

Solaris 9 PortBind - XDR-DECODE taddr2uaddr Remote Denial of Service / //////////////////////////////////////////////////////////// // Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS //////////////////////////////////////////////////////////// // // Federico L. Bossi Bonin //...

Solaris 9 PortBind - XDR-DECODE 'taddr2uaddr()' Remote Denial of Service

/ //////////////////////////////////////////////////////////// // Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS //////////////////////////////////////////////////////////// // // Federico L. Bossi Bonin // fbossiatglobalSTdotcomdotar /////////////////////////////////////////////////////...

Microsoft Host Integration Server RPC远程命令执行漏洞（MS08-059）

BUGTRAQ ID: 31620 CVECAN ID: CVE-2008-3466 Host Integration Server通过提供应用、数据和网络集成特性，将Microsoft Windows扩展至其它系统。 Host Integration Server的RPC接口所暴露的一些方式允许未经认证的攻击者在服务器上执行任意程序。RPC opcodes 1和6都允许攻击者调用CreateProcess函数并向其传送命令行，这可能导致完全入侵服务器。 Microsoft Host Integration Server 2006 Microsoft Host Integration...

CVE-2008-3466

Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...

CVE-2008-3479

Heap-based buffer overflow in the Microsoft Message Queuing MSMQ service mqsvc.exe in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing...

Authentication flaw

Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...

Immunity Canvas: MS08_059

Name| ms08059 ---|--- CVE| CVE-2008-3466 Exploit Pack| CANVAS Description| Microsoft Host Integration Server RPC Interface Vulnerability Notes| References: http://www.microsoft.com/technet/security/Bulletin/ms08-059.mspx CVE Name: CVE-2008-3466 VENDOR: Microsoft Notes: MSADV: MS08-059 Date public...

CVE-2008-3466: Improper Authentication

Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...