5631 matches found
US-CERT Technical Cyber Security Alert TA08-297A -- Microsoft Windows Server Service RPC Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-297A Microsoft Windows Server Service RPC Vulnerability Original release date: October 23, 2008 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows 2000 Microsoft Windows ...
Microsoft Server service RPC stack buffer overflow vulnerability
Overview A stack buffer overflow vulnerability in the Microsoft Windows Server service may allow a remote, unauthenticated attacker to execute arbitrary code with SYSTEM privileges. Description MS08-067 includes the following information about the Microsoft Server service:The Server service...
Gear Software CD DVD Filter driver privilege escalation vulnerability
Overview The Gear Software CD DVD Filter driver contains a privilege escalation vulnerability, which can allow an attacker to gain SYSTEM privileges. Description Gear Software provides a driver called CD DVD Filter, which is provided by GEARAspiWDM.sys. This driver is used by multiple CD/DVD...
LANDesk Multiple Products QIP Server Service (qipsrvr.exe) Heal Request Packet Handling Overflow
LANDesk Management Suite, used to automate system and security management tasks, is installed on the remote host. The version of LANDesk Management Suite includes an instance of the Intel QIP Server Service that makes a call to 'MultiByteToWideChar' using values from packet data. Using a speciall...
LANDesk QIP service buffer overflow vulnerability
Overview The LANDesk Management Suite Intel QIP service contains a buffer overflow vulnerability. Description The LANDesk Intel QIP Server Service is used to configure policy management. The Intel QIP service allows LANDesk Agents to report status and make certain software requests. A buffer...
Cisco VPN Client Privilege Escalation Vulnerability
The remote windows host contains an application that is affected by a privilege escalation vulnerability. Description : The installed Cisco VPN Client version is prone to a privilege escalation attack. By using the 'Start before logon' feature in the VPN client dialer, a local attacker may gain...
Cisco VPN Client Privilege Escalation Vulnerability
The installed Cisco VPN Client version is prone to a privilege escalation attack. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...
Microsoft Word Could Allow RCE Vulnerability
Microsoft Office with MS Word is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Event System Array Index Verification Remote Code Execution Vulnerability
Description Microsoft Windows Event System is prone to a remote code-execution vulnerability. Remote authenticated attackers can exploit this issue to execute arbitrary code with SYSTEM privileges. A successful attack can result in a full compromise of the affected computer. Technologies Affected...
Microsoft Windows Event System User Subscription Request Remote Code Execution Vulnerability
Description Microsoft Windows Event System is prone to a remote code-execution vulnerability. Remote authenticated attackers can exploit this issue to execute arbitrary code with SYSTEM privileges. A successful attack can result in a full compromise of the affected computer. Technologies Affected...
MS Windows (ListBox/ComboBox Control) Local Exploit (MS03-045)
No description provided by source. / \ local ListBox/ComboBox exploit for Win32 / \ Created by xCrZx crazyeinstein yahoo com /11.11.03/ / \ Usage: MS03-045.exe -t target -r return address / \ there is two targets: CBDIR for ComboBox, LBDIR for ListBox. / \ As to return address it should be such a...
Novell eDirectory < 8.8.2 FTF2 / 8.7.3 SP10b Multiple Remote Overflows
The remote host is running eDirectory, a directory service software from Novell. The installed version of eDirectory is affected by an integer overflow issue in ds.dlm / dhost.exe bound by default to TCP port 524 as well as a heap-based buffer overflow that can be triggered by passing NULL search...
Microsoft Windows Bluetooth Stack Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability because its implementation of the Bluetooth stack fails to adequately handle a flood of specially crafted SDP Service Discovery Protocol requests. To exploit this issue, an attacker must be within close physical...
CA Secure Content Manager HTTP Gateway Service FTP Vulnerabilities
The remote host is running Computer Associates' Secure Content Manager, a gateway product for filtering messaging and web traffic. The HTTP Gateway component 'icihttp.exe' of the version of Secure Content Manager installed on the remote host does not sufficiently check responses to FTP 'LIST' and...
iDefense Security Advisory 05.27.08: EMC AlphaStor Server Agent Multiple Stack Buffer Overflow Vulnerabilities
iDefense Security Advisory 05.27.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 27, 2008 I. BACKGROUND AlphaStor is a suite of applications used for disk management. For more information, please see the vendor's website at the following URL...
iDefense Security Advisory 05.27.08: EMC AlphaStor Library Manager Arbitrary Command Execution Vulnerability
iDefense Security Advisory 05.27.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 27, 2008 I. BACKGROUND AlphaStor is a suite of applications used for disk management. For more information, please see the vendor's website found at the following link...
Samba < 3.0.30 receive_smb_raw Function Remote Buffer Overflow
According to its banner, the version of the Samba server on the remote host is reportedly affected by a boundary error in 'nmbd' within the 'receivesmbraw' function in 'lib/utilsock.c' when parsing SMB packets received in a client context. By sending specially crafted packets to an 'nmbd' server...
Borland Interbase 2007 Integer Overflow
Advisory ID Internal CORE-2008-0415 Advisory Information Title: Borland Interbase 2007 Integer Overflow Advisory ID: CORE-2008-0415 Advisory URL:http://www.coresecurity.com/?action=item&id=2278 Date published: 2008-05-20 Date of last update: 2008-05-20 Vendors contacted: Borland Release mode:...
Cisco Building Broadband Service Manager Cross-Site Scripting Vulnerability
Cisco Building Broadband Service Manager BBSM 5.3 SP2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability exists due to an input validation error in certain web pages associated with the BBSM web...
[W01-0408] Realtek HD Audio Codec Drivers (Vista) - Local Privilege Escalation
Wintercore Advisory Realtek HD Audio Codec Drivers Vista - Local Privilege Escalation :: Non-Technical Description Realtek HD Audio Codec Drivers are prone to a local privilege escalation due to insufficient validation of user-mode buffers. Successful exploitation grants SYSTEM privileges to...