Black Ice Software Inc Barcode SDK - 'BITiff.ocx' Remote Buffer Overflow (1)

---------------------------------------------------------------------------- Black Ice Software Inc Barcode SDK BITiff.ocx Remote Buffer Overflow url: http://www.blackice.com File : BITiff.ocx Ver. : 10.9.3.0 CLSID: 2324B5B7-D3EF-464C-BB35-06EFF8F11EB3 Mark.: RegKey Safe for Script: True RegKey...

sametime-exploit.txt

!perl "IBM Lotus Sametime" StMUX Stack Overflow Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 1533; SE handler Don't use upper-case ASCII characters or 0x00, 0x0a, 0x0b, 0x0d, 0x20 You MUST use a POP/POP/RET...

IBM Lotus Domino Sametime STMux.exe Stack Buffer Overflow

This module exploits a stack buffer overflow in Lotus Domino's Sametime Server. By sending an overly long POST request to the Multiplexer STMux.exe service we are able to overwrite SEH. Based on the exploit by Manuel Santamarina Suarez. Module Options msf use...

CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities

Title: CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities CA Advisory Date: 2008-05-19 Reported By: An anonymous researcher working with the iDefense VCP Damian Put working with ZDI/TippingPoint Impact: A remote attacker can cause a denial of service or execute arbitrary code. Summary...

CVE-2008-0083: Improper Control of Generation of Code

The 1 VBScript VBScript.dll and 2 JScript JScript.dll scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors...

PT-2008-2681 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4 through Server 2008 Description: A heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed...

CVE-2008-0087: Use of Insufficiently Random Values

The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses...

Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020)

Hello BugTraq, The Microsoft Windows DNS stub resolver the component in Windows that queries the upstream DNS server for address resolutions on behalf of most Windows programs, e.g. browsers sends predictable DNS queries with respect to DNS transaction ID and source UDP port. This allows some...

MailEnable Pro/Ent <= 3.13 (Fetch) post-auth Remote BOF Exploit

No description provided by source. !/usr/bin/perl ================================================================= MailEnable Professional = 3.13 "FETCH" post-auth buffer overflow ================================================================= Bind Shell POC Exploit for Win2K SP4 pro English...

MailEnable ProfessionalEnterprise 3.13 - Fetch (Authenticated) Remote Buffer Overflow

MailEnable ProfessionalEnterprise 3.13 - Fetch Authenticated Remote Buffer Overflow !/usr/bin/perl ================================================================= MailEnable Professional gmail.com 10.3.2008 ..enjoy!: ================================================================= use...

MailEnable Pro/Ent <= 3.13 (Fetch) post-auth Remote BOF Exploit

Exploit for unknown platform in category remote exploits =============================================================== MailEnable Pro/Ent gmail.com 10.3.2008 ..enjoy!: ================================================================= use IO::Socket; print "\n MailEnable Professional 3.13 imap...

mailenablefetch-overflow.txt

!/usr/bin/perl ================================================================= MailEnable Professional gmail.com 10.3.2008 ..enjoy!: ================================================================= use IO::Socket; print "\n MailEnable Professional 3.13 imap remote exploit"; print "\n exploit b...

MailEnable Professional/Enterprise 3.13 - 'Fetch' (Authenticated) Remote Buffer Overflow

!/usr/bin/perl ================================================================= MailEnable Professional gmail.com 10.3.2008 ..enjoy!: ================================================================= use IO::Socket; print "\n MailEnable Professional 3.13 imap remote exploit"; print "\n exploit b...

CYBSEC Security Advisory: Arbitrary file overwrite in Documentum Administrator / Documentum Webtop

The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityAdvisoryDocumentumdmclTraceArbitraryfileoverwrite.pdf Advisory Name: Arbitrary file overwrite in Documentum Administrator / Documentum Webtop ============== Vulnerability Class:...

CVE-2007-5762

NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \.\nicm device and providing crafted kernel addresses via IOCTLs with the METHODNEITHER buffering mode...

CVE-2007-5762: Improper Input Validation

NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \.\nicm device and providing crafted kernel addresses via IOCTLs with the METHODNEITHER buffering mode...

CVE-2007-5352: Undefined Security Weakness

Unspecified vulnerability in Local Security Authority Subsystem Service LSASS in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call LPC request...

Microsoft DirectX SAMI File Parsing Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= Microsoft DirectX SAMI File Parsing Remote Stack Overflow Exploit ================================================================= !/usr/bin/python Bug discovered by Jun Mao...

CVE-2007-0066: Undefined Security Weakness

The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol RDP is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP...

MS Windows 2000 AS SP4 Message Queue Exploit (MS07-065)

No description provided by source. merry christmas Sysadmins Microsoft Message Queue POC exploit MS07-065 Mario Ballano - mballanogmail.com - http://www.48bits.com Andres Tarasco - atarascogmail.com - http://www.tarasco.org Original Advisory:...