Trend Micro ServerProtect SpntSvc RPC buffer overflow

Added: 09/21/2007 CVE: CVE-2007-4218 BID: 25395 OSVDB: 39753 Background ServerProtect is a virus scanner for servers. The Trend Micro ServerProtect service SpntSvc.exe handles RPC requests on port 5168/TCP. Problem Buffer overflow vulnerabilities in the Trend Micro ServerProtect service allow...

Important: nfs-utils-lib security update

1.0.6-8.z1 - Fixed RPC library buffer overflow bz 265001...

Update Protection against Multiple Trend Micro ServerProtect Buffer Overflow Vulnerabilities

Trend Micro ServerProtect is prone to multiple buffer overflow vulnerabilities. Trend Micro ServerProtect is a centrally managed virus protection console for enterprise-class servers. A remote attacker may exploit these issues to execute arbitrary code on a vulnerable system via a specially craft...

Mandrake Linux Security Advisory : librpcsecgss (MDKSA-2007:181)

A stack-based buffer overflow vulnerability was discovered in the RPCSECGSS RPC library by Tenable Network Security that could potentially allow for the execution of arbitrary code. Updated packages have been patched to prevent these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

GLSA-200709-01 : MIT Kerberos 5: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200709-01 MIT Kerberos 5: Multiple vulnerabilities A stack-based buffer overflow CVE-2007-3999 has been reported in svcauthgssvalidate of the RPC library of kadmind. Another vulnerability CVE-2007-4000 has been found in...

Debian DSA-1368-1 : librpcsecgss - buffer overflow

It was discovered that a buffer overflow of the library for secure RPC communication over the rpcsecgss protocol allows the execution of arbitrary code. The oldstable distribution sarge doesn't contain librpcsecgss. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

MIT Kerberos buffer overflow

Buffer overflow on oversized string in RPC library svcauthgssvalidate function...

Multiple Kerberos Implementations Authentication Context Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of MIT Kerberos. Authentication is not required to exploit this vulnerability. The specific flaw exists in the svcauthgssvalidate function. By sending a large authentication context over RPC, a stack...

Trend Micro antiviral products multiple security vulnerabilities

Buffer overflow in SSAPI engine on oversized local path. Buffer overflow in ServerProtect on different TCP/5168 RPC requests...

MIT Kerberos 5: Multiple vulnerabilities

Background MIT Kerberos 5 is a suite of applications that implement the Kerberos network protocol. kadmind is the MIT Kerberos 5 administration daemon. Description A stack buffer overflow CVE-2007-3999 has been reported in svcauthgssvalidate of the RPC library of kadmind. Another vulnerability...

Trend Micro ServerProtect eng50.dll Remote Stack Overflow Exploit

No description provided by source. / Copyright c 2007 devcode ^^ D E V C O D E ^^ Trend Micro ServerProtect eng50.dll Stack Overflow CVE-2007-1070 Description: A boundary error within a function in eng50.dll can be...

Microsoft Windows DCOM RPC Interface Buffer Overflow (MS03-026; CVE-2003-0352; CVE-2003-0715)

Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code. This is done via a malformed DCERPC DCOM object activation request packet with modified length fields...

Trend Micro ServerProtect RPCFN_SetComputerName() Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro ServerProtect. Authentication is not required to exploit this vulnerability. The specific flaw is exposed through the RPC interface bound on TCP port 5168 and defined in SpntSvc.exe wit...

Blaster Attacks (CVE-2003-0352; CVE-2003-0353)

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster, MSblast, LovSAN, Nachi, and Welchia worms...

Mandrake Linux Security Advisory : krb5 (MDKSA-2007:174-1)

A stack-based buffer overflow vulnerability was discovered in the RPC library used by Kerberos' kadmind program by Tenable Network Security. A remote unauthenticated user who could access kadmind would be able to trigger the flaw and cause it to crash CVE-2007-3999. This issue is only applicable ...

Buffer overflow

The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does not correctly check the buffer length in some environments and architectures...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does...

CVE-2007-4743

The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does not correctly check the buffer length in some environments and architectures...

CVE-2007-4743

The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does not correctly check the buffer length in some environments and architectures...

DEBIAN-CVE-2007-4743

The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does not correctly check the buffer length in some environments and architectures...