MS01-023 Microsoft IIS 5.0 Printer Host Header Overflow

This exploits a buffer overflow in the request processor of the Internet Printing Protocol ISAPI module in IIS. This module works against Windows 2000 Server and Professional SP0-SP1. If the service stops responding after a successful compromise, run the exploit a couple more times to completely...

CVE-2006-0319

Farmers WIFE 4.4 SP1 includes an FTP server (port 22003/tcp) vulnerable to directory traversal. A remote attacker can trigger .. sequence in commands such as PUT or SIZE to create arbitrary files outside the FTP root. The Nessus plugin notes the service runs with SYSTEM privileges on Windows. No ...

Farmers WIFE 4.4 sp1 (FTP) Remote System Access Exploit

Exploit for unknown platform in category remote exploits ======================================================= Farmers WIFE 4.4 sp1 FTP Remote System Access Exploit ======================================================= !/usr/bin/perl kokanin 20060106 // farmers wife server 4.4 sp1 allows us t...

Heap overflow

Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type EOT web font that triggers the...

Microsoft Windows GRE WMF Format Multiple Memory Overrun Vulnerabilities

Microsoft Windows GRE WMF Format Multiple Memory Overrun Vulnerabilities by cocoruder page:http://ruder.cdut.net email:frankruderathotmail.com Last Update:2006.01.07 class:design error Remote:yes local:yes Product Affected: Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Serve...

PHP 4.4.0 - mysql_connect function Local Buffer Overflow

PHP 4.4.0 - mysqlconnect function Local Buffer Overflow ?php / This exploit was designed to work with PHP versions 4.3.10 and 4.4.0 under Windows XP SP 1. If another operating system is used, the replacement EIP must be changed. The replacement EIP is written 261 bytes into our string. For this...

[Full-disclosure] Someone wasted a nice bug on spyware...

In reference to: http://www.securityfocus.com/archive/1/420288/30/0/threaded I ported the exploit to the Metasploit Framework in case anyone wants to test it without installing a thousand spyware apps... Available from 'msfupdate' for MSF users, or in the 2.5 snapshot:...

CVE-2005-4269

mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service access violation by causing mshtml.dll to process button-focus events at the same time that a document is reloading, as seen in Microsoft Office InfoPath 2003 by repeatedly...

CVE-2005-4269

The affected component is mshtml.dll in Microsoft Windows XP, Windows Server 2003, and Internet Explorer 6.0 SP1. The issue arises when mshtml.dll processes button-focus events while a document is reloading, leading to a denial of service (access violation). This is observed in Microsoft Office I...

Computer Associates License Service GETCONFIG buffer overflow

Added: 12/14/2005 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associates products and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability exists in the processing of GETCONFIG messages...

CA BrightStor Universal Agent Overflow

This module exploits a convoluted heap overflow in the CA BrightStor Universal Agent service. Triple userland exception results in heap growth and execution of dereferenced function pointer at a specified address. This module requires Metasploit: https://metasploit.com/download Current source:...

Microsoft IIS - SA WebAgent 5.25.3 Redirect Overflow (Metasploit)

Microsoft IIS - SA WebAgent 5.25.3 Redirect Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

Microsoft Plug and Play fails to properly validate user supplied data

Overview Microsoft Plug and Play contains a flaw in message buffer handling that may result in local or remote arbitrary code execution or a denial-of-service condition. Description The following is from the Microsoft Plug and Play description: Plug and Play PnP allows the operating system to...

Microsoft Distributed Transaction Coordinator vulnerable to buffer overflow via specially crafted network message

Overview Microsoft Distributed Transaction Coordinator MSDTC may be vulnerable to a flaw that allows remote unauthenticated attackers to execute arbitrary code. Description The Microsoft Distributed Transaction Coordinator MSDTC is described by Microsoft as "distributed transaction facility for...

Savant Web Server 3.1 - Remote Buffer Overflow (2)

Savant Web Server 3.1 - Remote Buffer Overflow 2 !/usr/local/bin/perl Savant Buffer Overflow Exploit ---------------------------------- Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com Vendor URL: http://savant.sourceforge.net $ARGC=@ARGV; if $ARGC !=3...

Microsoft Windows Plug-and-Play Service - Remote Universal (Spanish) (MS05-039)

Microsoft Windows Plug-and-Play Service - Remote Universal Spanish MS05-039 / HOD-ms05039-pnp-expl-spanish.c 25.Aug.2005 Very slightly modified version by Roman Medina Tested on Win2k SP4 Spanish. Original credits & comments follow. / / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c...

MS Windows Plug-and-Play Service Remote Universal Exploit (french fix)

No description provided by source. / HOD-ms05039-pnp-expl-french.c 25.Aug.2005 Very slightly modified version by Fabrice MOURRON [email protected] Tested on Win2k SP4 Frencg Original credits & comments follow. / / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus...

CVE-2004-2321

Affected products: BEA WebLogic Server and Express 8.1 SP1 and earlier. Vulnerability: local users in the Operator role can obtain administrator passwords via MBean attributes (ServerStartMBean.Password; NodeManagerMBean.CertificatePassword). Impact: partial confidentiality exposure; access is LO...

Microsoft Windows Plug-and-Play Service - Remote Universal (MS05-039)

Microsoft Windows Plug-and-Play Service - Remote Universal MS05-039 / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::...

MS Windows Plug-and-Play Service Remote Universal Expl (MS05-039)

Exploit for unknown platform in category remote exploits ==================================================================== MS Windows Plug-and-Play Service Remote Universal Exploit MS05-039 ==================================================================== / HOD-ms05039-pnp-expl.c: 2005-08-1...