1333 matches found
Hewlett-Packard Power Manager Administration Buffer Overflow
This module exploits a stack buffer overflow in Hewlett-Packard Power Manager 4.2. Sending a specially crafted POST request with an overly long Login string, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...
CA BrightStor ARCserve Message Engine Heap Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'CA BrightSto...
Novell NetWare LSASS CIFS.NLM Driver Stack Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Novell NetWare...
Omni-NFS Server Buffer Overflow
This module exploits a stack buffer overflow in Xlink Omni-NFS Server 5.2 When sending a specially crafted nfs packet, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...
Microsoft IIS 5.0 FTP Server Remote Stack Overflow Exploit in the English common Edition-vulnerability warning-the black bar safety net
Author: Inking Because some character issues, so the English version of the exp can't be directly used to Chineseoperating system, spend some time to modify the milw0rm on exp, in their English Win2k sp4 virtual machine in the test are passed. ftp.pl 0 !/ usr/bin/perl IIS 5.0 FTP Server / Remote...
SuSE9 Security Update : SLES9-SP4: Security update for yast2-mail-server (YOU Patch Number 11602)
If you go to YaST -- Mail Server -- FetchMail and select add account window. While entering the password for the remote user, it shows the password. Now the password field echoes '', instead of plain text. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...
SuSE9 Security Update : SLES9-SP4: Security update for bind (YOU Patch Number 11717)
CVE-2007-2926, cryptographically weak query ids RT 16915. Applied fix extracted from 9.2.8-P1 version. - version update to 9.3.x because ISC will no longer maintain version 9.2.x %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
MP3 Studio 1.0 (.m3u File) Local Buffer Overflow Exploit
No description provided by source. / mplode.c vs MP3 Studio v1.0 Tested on: Windows 2000 SP4 Author: Dominic Chell [email protected] PoC: http://www.milw0rm.com/exploits/9277 The PoC author said he could not exploit it so I decided to try. A bit of fun for a boring night in Peterborough : Good...
IPSwitch IMAP Server 9.20 - Remote Buffer Overflow
/ Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h" include include include include include "winsock2.h" prag...
MP3 Studio 1.0 (.m3u File) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================== MP3 Studio 1.0 .m3u File Local Buffer Overflow Exploit ======================================================== / mplode.c vs MP3 Studio v1.0 Tested on: Windows 2000 SP4 Author: Domini...
Microsoft IIS FTP Server NLST Command Remote Overflow
Added: 09/03/2009 CVE: CVE-2009-3023 BID: 36189 OSVDB: 57589 Background Microsoft Internet Information Server IIS includes a web server and an FTP server. Problem A stack overflow in the FTP server in IIS 5 and 6.0 via a crafted NLST command that uses wildcards allows remote authenticated users t...
Microsoft IIS 5.0 FTP Server Remote Stack Overflow Exploit (win2k sp4)
No description provided by source. !/usr/bin/perl IIS 5.0 FTP Server / Remote SYSTEM exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2atgooglemail.com Affects IIS6 with stack cookie protection Modded by muts, additional egghunter added for secondary larger payload Might take a...
Microsoft IIS FTP Server Stack Overflow
IIS 5.0 FTPd / Remote r00t exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2googlemail.com Affects IIS6 with stack cookie protection August 2009 - KEEP THIS 0DAY PRIV8 use IO::Socket; $|=1; metasploit shellcode, adduser "winown:nwoniw" $sc =...
Microsoft IIS 5.0/6.0 FTP Server Remote Stack Overflow Exploit (win2k)
No description provided by source. IIS 5.0 FTPd / Remote r00t exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2atgooglemail.com Affects IIS6 with stack cookie protection August 2009 - KEEP THIS 0DAY PRIV8 use IO::Socket; $|=1; metasploit shellcode, adduser "winown:nwoniw" $sc =...
Microsoft IIS 5.0 FTP Server (Windows 2000 SP4) - Remote Stack Overflow
!/usr/bin/perl IIS 5.0 FTP Server / Remote SYSTEM exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2googlemail.com Affects IIS6 with stack cookie protection Modded by muts, additional egghunter added for secondary larger payload Might take a minute or two for the egg to be found...
Microsoft IIS 5.0 FTP Server (Windows 2000 SP4) - Remote Stack Overflow
Microsoft IIS 5.0 FTP Server Windows 2000 SP4 - Remote Stack Overflow !/usr/bin/perl IIS 5.0 FTP Server / Remote SYSTEM exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2googlemail.com Affects IIS6 with stack cookie protection Modded by muts, additional egghunter added for...
NaviCopa Web Server 3.01 Remote Buffer Overflow Exploit
Exploit for windows platform in category remote exploits ======================================================= NaviCopa Web Server 3.01 Remote Buffer Overflow Exploit ======================================================= / navicpntxp1.c NaviCopa Web Server 3.01 Remote Buffer Overflow Exploit...
Integer overflow
Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, ...
ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability
ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-053 August 11, 2009 -- CVE ID: CVE-2009-1923 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows 2003 SP2 Microsoft Windows 2000 SP4 -- TippingPointTM IPS...
Input validation
The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute...