Juniper VPN Client rdesktop Click Hack

Juniper VPN client rdesktop clickhack ================================ discovered by [email protected] PRODUCT: Juniper VPN client + Windows remote desktop or console access VERSION AFFECTED: Win Vista/7 + Juniper VPN client all versions EXPOSURE: Remote code execution SYSTEM privileges SYNOPSIS...

Novell ZENworks Handheld Management ZfHIPCND.exe Unspecified Buffer Overflow

A vulnerability exists in the server ZfHIPCND.exe, which handles the data received on TCP port 2400. An attacker can overflow a buffer on a heap belonging to the server and possibly execute arbitrary code with SYSTEM privileges. Authentication is not required to exploit this vulnerability. C...

CA Multiple Products Alert Notification Server Buffer Overflow (CVE-2007-4620)

Computer Associates, or CA, develop and sell various software to enterprise users. Some CA products, such as Threat Manager, Protection Suites, and BrightStor ARCserve Backup, share a set of common components. One of these common component is Alert Notification Server. This component runs as a...

Novell ZENworks Handheld Management ZfHIPCND.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENworks Handheld Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within module ZfHIPCND.exe. This process is responsible for handling the...

CA Alert Notification Server RPC Request Buffer Overflow (CVE-2007-3825)

Computer Associates, or CA, develop and sell various software to enterprise users. Several products, such as the Threat Manager, Protection Suites, and BrightStor ARCserve Backup share a set of common components. One of these common component is the Alert Notification Server. This component is ru...

IBM Tivoli Storage Manager FastBack Mount Service Code Execution (CVE-2010-3058)

The IBM Tivoli Storage Manager TSM is a product used for storing backups and archiving data. A remote code execution vulnerability has been reported in IBM Tivoli Storage Manager FastBack. The vulnerability is due to an arbitrary memory accessing in Fastback Mount Service FastBackMount.exe which...

HP Data Protector Express DtbClsLogin Stack Buffer Overflow (CVE-2010-3007)

HP OpenView Storage Data Protector is a cross-platform backup solution for Windows, Unix and Linux operating systems. The management console of the Data Protector environment provides quick access to track all Data Protector Express objects, including jobs, media, and scheduling rotation schemes....

Integard Pro 2.2.0.9026 (Win7 ROP-Code Metasploit Module)

No description provided by source. Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module Date: 2010-09-15 Author: Node Software Link: http://www.exploit-db.com/application/14941 Version: Race River Integard Pro 2.2.0.9026, integard32.dllv.2.0.0.306 Tested on: Windows 7 x64 Eng CV...

Race River Integard Home/Pro LoginAdmin Password Stack Buffer Overflow

Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module Date: 2010-09-15 Author: Node Software Link: http://www.exploit-db.com/application/14941 Version: Race River Integard Pro 2.2.0.9026, integard32.dllv.2.0.0.306 Tested on: Windows 7 x64 Eng CVE : - class Metasploit3 'Race River...

Integard Pro 2.2.0.9026 - Windows 7 ROP-Code (Metasploit)

Integard Pro 2.2.0.9026 - Windows 7 ROP-Code Metasploit Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module Date: 2010-09-15 Author: Node Version: Race River Integard Pro 2.2.0.9026, integard32.dllv.2.0.0.306 Tested on: Windows 7 x64 Eng CVE : - class Metasploit3 'Race River...

Windows Escalate Task Scheduler XML Privilege Escalation

This module exploits the Task Scheduler 2.0 XML 0day exploited by Stuxnet. When processing task files, the Windows Task Scheduler only uses a CRC32 checksum to validate that the file has not been tampered with. Also, In a default configuration, normal users can read and write the task files that...

Symantec Alert Management System HNDLRSVC Arbitrary Command Execution

Symantec Systems Center provides centralized systems and policy management for Norton Antivirus Enterprise Solution across multiple Windows NT and NetWare networks. The Symantec Systems Center includes an optional component called the Alert Management System AMS2. An arbitrary command execution...

CA BrightStor ARCserve Backup Tape Engine Service Buffer Overflow

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration and Threat Management. There exists a...

Microsoft Windows RRAS Memory Corruption (CVE-2006-2370)

Microsoft Remote Access Connection Manager service, RASMAN, provides the functionality to remotely configure and manage various services. One such service that can be managed remotely is the Routing and Remote Access Service, RRAS. Routing and Remote Access Service makes it possible for a compute...

CA BrightStor ARCserve Backup Tape Engine RPC Code Execution (CVE-2007-0168)

There exists a vulnerability in Computer Associates BrightStor ARCserve Backup products. The flaw is due to a design weakness in the processing of RPC requests sent to the Tape Engine service. A remote unauthenticated attacker may leverage this vulnerability to inject and execute arbitrary code o...

CA BrightStor ARCserve Backup Tape Engine RPC GetGroupStatus Buffer Overflow (CVE-2006-6917)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

Apple Releases Updates for iPhone, iPod touch, and iPad

Apple has released iOS 4.0.2 for the iPhone and iPod touch and iOS 3.2.2 for the iPad to address vulnerabilities in the FreeType and IOSurface packages. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code or gain system privileges. iPhone and iPod touch users are...

CA ARCserve Backup for Laptops and Desktops LGServer Code Execution (CVE-2008-3175)

Computer Associates ARCserve Backup for Laptops and Desktops provides backup and data recovery for remote, mobile, and desktop computers. In general, a backup system is comprised of a server and multiple clients, also known as agents. The server establishes, organizes, and controls all of the...

CA ARCServe Backup for Laptops and Desktops LGServer Service Code Execution (CVE-2008-1328)

Computer Associates ARCserve Backup for Laptops and Desktops provides backup and data recovery for remote, mobile, and desktop computers. In general, a backup system is comprised of a server and multiple clients, also known as agents. The server establishes, organizes, and controls all of the...

Novell eDirectory iMonitor NDS Server Buffer Overflow (CVE-2005-2551; CVE-2006-2496)

Novell eDirectory is a Lightweight Directory Access Protocol LDAP server intended for use as a part of an identity management solution. The product is made available for multiple platforms including NetWare, Unix-like systems, and Windows. iMonitor, one of the many components of eDirectory, is a...