CVE-2009-1297

iscsidiscovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise SLE 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name...

CVE-2009-1297

The CVE-2009-1297 issue affects open-iscsi’s iscsi_discovery in openSUSE/OpenSUSE 10.3–11.1 and SUSE/SLE 10 SP2–11. The root cause is unsafe creation of temporary files with a predictable name, enabling a local attacker to perform a symlink attack to overwrite arbitrary files. Several advisories ...

Eureka Mail Client Buffer Overflow

Application: Eureka Mail client Platforms: Windows XP Professional SP2 Exploitation: remote BoF Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's Special Thanks to: M Jeremy Brown 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction =============== Sick of...

Eureka Email 2.2q ERR Remote Buffer Overflow

This module exploits a buffer overflow in the Eureka Email 2.2q client that is triggered through an excessively long ERR message. NOTE: this exploit isn't very reliable. Unfortunately reaching the vulnerable code can only be done when manually checking mail Ctrl-M. Checking at startup will not...

Microsoft Windows索引服务ActiveX控件内存破坏漏洞（MS09-057）

BUGTRAQ ID: 36629 CVECAN ID: CVE-2009-2507 Windows是微软发布的非常流行的操作系统。 Windows的索引服务所包含的ActiveX控件未正确处理特制Web内容，导致Windows系统上的索引服务中存在内存破坏漏洞。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1 Microsoft Windows...

Debian Security Advisory DSA 1895-2 (opensaml2, shibboleth-sp2)

The remote host is missing an update to opensaml2, shibboleth-sp2 announced via advisory DSA 1895-2. OpenVAS Vulnerability Test $Id: deb18952.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1895-2 opensaml2, shibboleth-sp2 Authors: Thomas Reinke Copyright:...

Debian: Security Advisory (DSA-1895-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Millenium MP3 Studio 2.0 - '.m3u' Local Buffer Overflow

Vulnerability : .m3u File Local Stack Overflow Universal Exploit SEH + Product : Millenium MP3 Studio + Versions affected : v2.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windows XP SP2 En, Windows XP SP3 En, Windows Vista SP1 Swe +...

CVE-2009-2517

CVE-2009-2517 is part of a set of Windows kernel vulnerabilities described in MS09-058 with elevation-of-privilege and denial-of-service implications. The connected materials confirm: (1) the Windows kernel mishandles exceptions, enabling a local attacker with valid logon to cause a denial-of-ser...

CVE-2009-2503: Improper Control of Generation of Code

GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3,...

ZoIPer Call-Info DoS

Exploit for unknown platform in category remote exploits ==================== ZoIPer Call-Info DoS ==================== Title: ZoIPer Call-Info DoS CVE-ID: OSVDB-ID: Author: Tomer Bitton Published: 2009-10-14 Verified: yes view source print? !/usr/bin/python ZoIPer v2.22 Call-Info Remote Denial O...

CVE-2009-2507: Undefined Security Weakness

A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers to execute arbitrary programs via unspecified vectors that cause a "vulnerable binary" to load and run, aka "Memory...

Millenium MP3 Studio 2.0 mpf file BoF

No description provided by source. + Vulnerability : .mpf File Local Stack Overflow Exploit SEH + Product : Millenium MP3 Studio + Versions affected : v2.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windows XP SP2/SP3 En + Written by...

CVE-2009-2517: Undefined Security Weakness

The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows local users to cause a denial of service reboot via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."...

MS09-061: Description of the security update for the Microsoft.NET Framework 1.1 Service Pack 1: October 13, 2009

None None...

Free WMA MP3 Converter 1.1 - '.wav' Local Buffer Overflow

!/usr/bin/perl Free WMA MP3 Converter v1.1 .wav Local Buffer Overflow seh Vendor: http://www.eusing.com/ Discovered by: KriPpLer http://www.x-sploited.com/ Tested on: Windows XP Pro SP2. Description: FREE WMA MP3 converter v1.1 Local Buffer Overflow Exploit SEH This application is vulnerable to a...

Free WMA MP3 Converter 1.1 Buffer Overflow

!/usr/bin/perl Free WMA MP3 Converter v1.1 .wav Local Buffer Overflow seh Vendor: http://www.eusing.com/ Discovered by: KriPpLer http://www.x-sploited.com/ Tested on: Windows XP Pro SP2. Description: FREE WMA MP3 converter v1.1 Local Buffer Overflow Exploit SEH This application is vulnerable to a...

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 with VLC 1.0.2 "Goldeneye" Download:...

Audio Workstation - '.pls' Local Buffer Overflow (SEH)

!/usr/bin/perl =gnk ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== Audio...

NCTAVIFile File Creation / Execution

""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" """ :::::: :: :: :: :: :: :::: """ """ :: :: :: :: :::::: .. :::: :: """ """ ::::: ::: ::::: :: :: :: :: :: :::: """ """ :: :: :: :: : :: :: :: :: :: :: """ """ :::::: :: :: ::::: :: :::::: :: :: :::: rs.ir """ """ :: """ """ """...