RPC rpcbind Non-standard Port Assignment Filter Bypass

The RPC portmapper is running on this port. The portmapper allows someone to get the port number of each RPC service running on the remote host by sending either multiple lookup requests or a DUMP request. This service should only run on port 111. However on some operating systems it also listens...

Code injection

1 caloggerd.exe camt70.dll and 2 mediasvr.exe catirpc.dll and rwxdr.dll in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers to cause a denial of service NULL dereference and application crash via a crafted RPC packet...

CVE-2007-2772

1 caloggerd.exe camt70.dll and 2 mediasvr.exe catirpc.dll and rwxdr.dll in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers to cause a denial of service NULL dereference and application crash via a crafted RPC packet...

CVE-2007-2772

CA BrightStor ARCserve Backup 11.5.2.0 SP2 is affected: caloggerd.exe (camt70.dll) and mediasvr.exe (catirpc.dll, rwxdr.dll) can be remotely triggered to crash via crafted RPC packets, due to a NULL dereference stemming from insufficient data validation in RPC request parsing. The CA advisory CPA...

Samba lsa_io_privilege_set Heap Overflow

This module triggers a heap overflow in the LSA RPC service of the Samba daemon. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Samba lsaioprivilegeset Heap Overflow', 'Description' = %q This...

Samba lsa_io_trans_names Heap Overflow

This module triggers a heap overflow in the LSA RPC service of the Samba daemon. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Samba lsaiotransnames Heap Overflow', 'Description' = %q This...

CVE-2007-2772: Undefined Security Weakness

1 caloggerd.exe camt70.dll and 2 mediasvr.exe catirpc.dll and rwxdr.dll in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers to cause a denial of service NULL dereference and application crash via a crafted RPC packet...

FreeBSD : samba -- multiple vulnerabilities (3546a833-03ea-11dc-a51d-0019b95d4f14)

The Samba Team reports : A bug in the local SID/Name translation routines may potentially result in a user being able to issue SMB/CIFS protocol operations as root. When translating SIDs to/from names using Samba local list of user and group accounts, a logic error in the smbd daemon's internal...

CA BrightStor Backup 11.5.2.0 Mediasvr.exe Denial of Service Exploit

No description provided by source. !/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe DoS catirpc.dll/rwxdr.dll Previously Unknown There is an issue with RPC operation 126 and the imported cactirpc.dll and rwxdr.dll. It looks as if Mediasvr.exe identifies a Bad Job Handle ...

CA BrightStor ARCserve backup system multiple buffer overflows

Multiple buffer overflows in RPC-based Media Server service...

cabright-dos.txt

!/usr/bin/python Computer Associates CA Brightstor Backup caloggderd.exe DoS camt70.dll Previously Unknown There is an issue in camt70.dll when caloggerd is processing a hostname for a login operation. When processing the string, if a null is passed in as an argument, it will be loaded into ESI a...

Trend Micro ServerProtect EarthAgent RPC buffer overflow

Added: 05/16/2007 CVE: CVE-2007-2508 BID: 23866 OSVDB: 35789 Background Trend Micro ServerProtect is a virus scanner for servers. It includes the EarthAgent daemon which listens for connections on port 3628/TCP. Problem A buffer overflow vulnerability in the EarthAgent daemon allows remote...

Trend Micro ServerProtect EarthAgent RPC buffer overflow

Added: 05/16/2007 CVE: CVE-2007-2508 BID: 23866 OSVDB: 35789 Background Trend Micro ServerProtect is a virus scanner for servers. It includes the EarthAgent daemon which listens for connections on port 3628/TCP. Problem A buffer overflow vulnerability in the EarthAgent daemon allows remote...

CA BrightStor Backup 11.5.2.0 Mediasvr.exe Denial of Service Exploit

Exploit for unknown platform in category dos / poc ==================================================================== CA BrightStor Backup 11.5.2.0 Mediasvr.exe Denial of Service Exploit ==================================================================== !/usr/bin/python Computer Associates CA...

Computer Associates BrightStor ARCserve Backup 11.5 - mediasvr caloggerd Denial of Service

Computer Associates BrightStor ARCserve Backup 11.5 - mediasvr caloggerd Denial of Service source: https://www.securityfocus.com/bid/24017/info Computer Associates BrightStor ARCserve Backup is prone to multiple denial-of-service vulnerabilities due to memory-corruption issues caused by errors in...

ZDI-07-030: Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerability

ZDI-07-030: Samba netdfsiodfsEnumInfod Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-030.html May 15, 2007 -- CVE ID: CVE-2007-2446 -- Affected Vendor: Samba -- Affected Products: Samba 3.0.0 - 3.0.25rc3 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-07-033: Samba lsa_io_trans_names Heap Overflow Vulnerability

ZDI-07-033: Samba lsaiotransnames Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-033.html May 15, 2007 -- CVE ID: CVE-2007-2446 -- Affected Vendor: Samba -- Affected Products: Samba 3.0.0 - 3.0.25rc3 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

Trend Micro ServerProtect EarthAgent RPC buffer overflow

Added: 05/16/2007 CVE: CVE-2007-2508 BID: 23866 OSVDB: 35789 Background Trend Micro ServerProtect is a virus scanner for servers. It includes the EarthAgent daemon which listens for connections on port 3628/TCP. Problem A buffer overflow vulnerability in the EarthAgent daemon allows remote...

CA BrightStor Backup 11.5.2.0 - Mediasvr.exe Denial of Service

CA BrightStor Backup 11.5.2.0 - Mediasvr.exe Denial of Service !/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe DoS catirpc.dll/rwxdr.dll Previously Unknown There is an issue with RPC operation 126 and the imported cactirpc.dll and rwxdr.dll. It looks as if Mediasvr.exe...

CA BrightStor Backup 11.5.2.0 Mediasvr.exe Denial of Service Exploit

No description provided by source. !/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe DoS catirpc.dll/rwxdr.dll Previously Unknown There is an issue with RPC operation 126 and the imported cactirpc.dll and rwxdr.dll. It looks as if Mediasvr.exe identifies a Bad Job Handle as...