Novell eDirectory NCP Get扩展信息请求远程堆内存破坏漏洞

BUGTRAQ ID: 31956 Novell eDirectory是一个的跨平台的目录服务器。 eDirectory可能会使用已经释放的堆内存区。如果远程攻击者发送了畸形数据的话，就可能导致由一个线程释放堆内存区，之后在另一个线程分配了相同内存区后重新使用，这样原始线程就会对已被第二个线程改变了的数据执行操作，导致以当前服务的权限执行任意指令。 Novell eDirectory 8.8 SP2 Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

ms08_067_netapi.rb.txt

$Id:$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3...

Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6

Address Bar Spoofing Attacks against Microsoft Internet Explorer 6 Amit Klein, Trusteer Summary ======= IE6 is the second most popular web browser after IE7, with market share of around 25 according to recent surveys e.g. http://marketshare.hitslink.com/report.aspx?qprid=2. This write-up presents...

powertcpftp-overflow.txt

!-- PowerTCP FTP module Multiple Technique Exploit SEH Overwrite + HeapSpray bug originally found by : Intel http://www.milw0rm.com/exploits/6793 I use Intel's exploit , but IE change unASCII bytes and it doesn't work! my system is XP SP2 IE7 . then I wrote my own expl with HeapSpray technique ,...

PowerTCP FTP module Multiple Technique Exploit (SEH/HeapSpray)

No description provided by source. !-- PowerTCP FTP module Multiple Technique Exploit SEH Overwrite + HeapSpray bug originally found by : Intel http://www.milw0rm.com/exploits/6793 I use Intel's exploit , but IE change unASCII bytes and it doesn't work! my system is XP SP2 IE7 . then I wrote my o...

PowerTCP FTP module Multiple Technique Exploit (SEH/HeapSpray)

Exploit for unknown platform in category remote exploits ============================================================== PowerTCP FTP module Multiple Technique Exploit SEH/HeapSpray ============================================================== !-- PowerTCP FTP module Multiple Technique Exploit SE...

Google Chrome OnbeforeUload and OnUnload Null Check Vulnerability.

Advisory: Google Chrome OnbeforeUload and OnUnload Null Check Vulnerability. Version Affected: Chrome/0.2.149.30 Chrome/0.2.149.29 Chrome/0.2.149.27 Description: Google chrome is susceptible to stringent behavior while handling "onbeforeunload" and "onunload" event in body tags. The malicious...

Open redirect

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter...

CVE-2008-1547

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter...

VLC Media Player TY File Stack Based Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================ VLC Media Player TY File Stack Based Buffer Overflow Exploit ============================================================ !/usr/bin/perl 10/21/2008 ksOSe use warnings; use strict;...

CVE-2008-1547: URL Redirection to Untrusted Site

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter...

Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC

No description provided by source. !/usr/bin/perl Eserv/3.x FTP Server ABOR Remote Stack Overflow PoC Summary: Eserv/3.x - Mail, News, Web and Proxy Servers - Mail Server SMTP, IMAP4 and POP3 - News Server NNTP - Web Server HTTP - FTP Server - Proxy Servers HTTP, FTP, Socks, etc - Finger Server -...

CVE-2008-4036: Integer Overflow or Wraparound

Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual...

CVE-2008-3464: Undefined Security Weakness

afd.sys in the Ancillary Function Driver AFD component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted...

Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC

Exploit for unknown platform in category dos / poc ===================================================== Eserv 3.x FTP Server ABOR Remote Stack Overflow PoC ===================================================== !/usr/bin/perl Eserv/3.x FTP Server ABOR Remote Stack Overflow PoC Summary: Eserv/3.x ...

Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC

Summary Eserv/3.x - Mail, News, Web and Proxy Servers - Mail Server SMTP, IMAP4 and POP3 - News Server NNTP - Web Server HTTP - FTP Server - Proxy Servers HTTP, FTP, Socks, etc - Finger Server - Built-in scheduler and dialer. Description Stack-based buffer overflow in the FTP server in Etype Eser...

Microsoft Windows - InternalOpenColorProfile Heap Overflow (PoC) (MS08-046)

Microsoft Windows - InternalOpenColorProfile Heap Overflow PoC MS08-046 EMRSETICMPROFILEA Heap Overflow DOS By Ac!dDrop related to MS08-046 Tested on windows Xp professional Sp2 mscms.dll 5.1.2600.2709 gdi32.dll 5.1.2600.2818 Causes Windows explorer and Internet explorer to crash. You can run...

MS Windows GDI+ Proof of Concept (MS08-052) #2

No description provided by source. ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...

MS Windows GDI+ Proof of Concept (MS08-052) #2

Exploit for unknown platform in category dos / poc ============================================== MS Windows GDI+ Proof of Concept MS08-052 2 ============================================== ------------------------------------------------------------------------------------------------------------...

Microsoft Windows - GDI+ (PoC) (MS08-052) (2)

Microsoft Windows - GDI+ PoC MS08-052 2 ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...