5630 matches found
MS Windows 2K POSIX Subsystem Privilege Escalation Exploit (MS04-020)
No description provided by source. / Microsoft Windows POSIX Subsystem Local Privilege Escalation Exploit MS04-020 Tested on windows 2k sp4 CN,NT/XP/2003 NOT TESTED Posixexp.c By bkbll bkbll cnhonker net,bkbll tom com www cnhonker com 2004/07/16 thanks to eyas xfocus org C:\whoami VITUALWIN2K\tes...
MS Windows 2k Utility Manager (All-In-One) Exploit (MS04-019)
No description provided by source. / COROMPUTER2004 Crpt Utility Manager exploit v2.666 modified by kralor Crpt It gets system language and sets windows names to work on any win2k :P Feel free to add other languages : v2.666: added autonomous allinone remote exploitation system ; It can be execut...
Serv-U 3x - 5.x Local Privilege Escalation Exploit
No description provided by source. / Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last version 5.1.0.0 All Serv-u Versions have default Login/password for local Administration. This account is only available to connect in the loopback interface, so a local user will ...
LS-20060220 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability
Overview: LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve Backup, which could be exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system. The flaw specifically exists within the Discovery Service...
LS-20060313 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability
Overview: LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve Backup, which could be exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system. The flaw specifically exists within the Message Engine msgeng.exe du...
SAP DB / MaxDB WebDBM Client Database Name Remote Overflow
The remote host is running SAP DB or MaxDB, a SAP-certified open- source database supporting OLTP and OLAP. According to its version, the Web DBM component of MaxDB on the remote host reportedly contains a buffer overflow that can be triggered by an HTTP request containing a long database name. A...
eIQnetworks Enterprise Security Analyzer Monitoring.exe Multiple Command Overflow
The version of eIQnetworks Enterprise Security Analyzer, Network Security Analyzer, or one of its OEM versions installed on the remote host contains a buffer overflow in its Monitoring Agent service. Using a long argument to a command, an unauthenticated, remote attacker may be able to leverage...
Microsoft Windows Server service buffer overflow
Overview A stack-based buffer overflow exists in the Microsoft Server service. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code with SYSTEM privileges. Description Microsoft Server ServiceMS06-040 includes the following information: The Server service...
eIQnetworks Enterprise Security Analyzer EnterpriseSecurityAnalyzer.exe LICMGR_ADDLICENSE Command Remote Overflow
The version of eIQnetworks Enterprise Security Analyzer, Network Security Analyzer, or one of its OEM versions installed on the remote host contains a buffer overflow in its License Manager service. Using a long argument to the 'LICMGRADDLICENSE' command, an unauthenticated remote attacker may be...
eIQnetworks Enterprise Security Analyzer Syslog Server Multiple Remote Overflows (deprecated)
Plugin has been deprecated as the software is EOL and no longer obtainable C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22127; scriptversion"1.22"; scriptcveid"CVE-2006-3838"; scriptbugtraqid19165, 19167; scriptxrefname:"Secunia", value:"21211";...
Intel PRO/Wireless 2100 Network Connection Driver Local Privilege Escalation Vulnerability
The remote host is running a version of Intel Wireless/PRO 2100 driver that is fails to properly handle certain malformed frames. A local attacker may exploit this flaw to elevate his privileges SYSTEM on the remote host. To exploit this flaw, an attacker would need to send a specially crafted...
iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk Overflow
Windows MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk Overflow iDefense Security Advisory 06.13.06 http://www.idefense.com/application/poi/display?type=vulnerabilities June 13, 2006 I. BACKGROUND Microsoft Windows Operating System is system software for Intel based PCs. More information can be found ...
WinGate POST Request Buffer Overflow
The remote host appears to be running WinGate Proxy Server, a Windows application for managing and securing Internet access. According to its banner, the version of WinGate installed on the remote host is affected by a buffer overflow vulnerability in its HTTP proxy service. An attacker with acce...
Code injection
The GUI nod32.exe in NOD32 2.5 runs with SYSTEM privileges when the scheduler runs a scheduled on-demand scan, which allows local users to execute arbitrary code during a scheduled scan via unspecified attack vectors...
NOD32 antivirus privilege escalation
Quarantined file can be restored to any location with SYSTEM privileges...
Genius VideoCAM NB driver privilege escalation
When pressing snapshot button, file selection window appears running with SYSTEM privileges...
CVE-2006-1379
Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...
Code injection
Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...
Design/Logic Flaw
ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite IMSS 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe...