iDefense Security Advisory 04.03.08: Computer Associates Alert Notification Service Multiple RPC Buffer Overflow Vulnerabilities

iDefense Security Advisory 04.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2008 I. BACKGROUND Computer Associates Alert Notification Server is used by several CA products, including eTrust Integrated Threat Management, to provide notifications to console users. II...

Computer Associates Alert Notification Buffer Overflow

This module exploits a buffer overflow in Computer Associates Threat Manager for the Enterprise r8.1 By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. In order to successfully exploit this vulnerability, you will need valid logon...

Sun Solaris <= 10 rpc.ypupdated Remote Root Exploit (meta)

Exploit for solaris platform in category remote exploits ========================================================== Sun Solaris ===============/======================================================== Description =========== This exploit targets a weakness in the way the ypupdated RPC application...

Sun Solaris 10 - rpc.ypupdated Remote Code Execution (Metasploit)

/ \ / \ | | | | ----====/ /\/ /\ | || |====---- | | | || | | | | | | | | | | | | | ------======\ / /| || || || |======------ / || || / Computer Academic Underground http://www.caughq.org Exploit Code ===============/======================================================== Exploit ID:...

Integer overflow

Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Remote BETA allows remote attackers to execute arbitrary code via an RPC request that specifies a large number of array dimensions, which triggers a heap-based buffer overflow...

CVE-2008-0070

CVE-2008-0070 affects Orb Networks Orb 2.00.1014 and Winamp Remote BETA. Root cause: integer overflow causing a heap-based buffer overflow when an RPC request specifies a very large number of array dimensions. Impact: remote code execution potential. Exploitation details are not provided in the d...

CVE-2008-0070: Undefined Security Weakness

Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Remote BETA allows remote attackers to execute arbitrary code via an RPC request that specifies a large number of array dimensions, which triggers a heap-based buffer overflow...

CVE-2008-1533

Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors...

Code injection

Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors...

CVE-2008-1533: Undefined Security Weakness

Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors...

CVE-2008-1533

Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors...

CVE-2008-1533

CVE-2008-1533 affects Joomla! 1.5 via the XML-RPC Blogger API plugin. The vulnerability allows remote attackers to perform unauthorized article operations on articles through unknown vectors. The public description lacks concrete exploit details or affected versions beyond Joomla! 1.5 and the plu...

rpc.ypupdated command injection vulnerability

Added: 03/28/2008 CVE: CVE-1999-0208 BID: 1749 OSVDB: 11517 Background Network Information Service NIS is a distributed database that allows you to maintain consistent configuration files throughout your network. rpc.ypupdated is an NIS service which is responsible for duplicating information fro...

Orb Networks Orb RPC请求远程整数溢出漏洞

BUGTRAQ ID: 28431 CVECAN ID: CVE-2008-0070 Orb是用于提供MyCast功能的应用，MyCasting允许用户通过PC或其他internet连接设备访问相片、音乐、视频等数字内容。 Orb在处理RPC请求中所接收到的变量类型数组中维度数时存在整数溢出漏洞，如果用户在提交的请求中执行了超大的数组维度的话，就可能触发堆溢出，导致执行任意指令。 Orb Networks Orb 2.00.1014 Orb Networks ------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

GLSA-200803-31 : MIT Kerberos 5: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-31 MIT Kerberos 5: Multiple vulnerabilities Two vulnerabilities were found in the Kerberos 4 support in KDC: A global variable is not set for some incoming message types, leading to a NULL pointer dereference or a double fr...

Cross site request forgery (csrf)

rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service daemon crash via a malformed RPC request...

Design/Logic Flaw

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

PYSEC-2008-10

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

CVE-2008-1475

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

CVE-2008-1475

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...