samba: smbd unicode path names denial of service

It was discovered that smbd, the Samba file server daemon, did not properly handle certain files that were stored on the disk and used a valid Unicode character in the file name. An attacker able to send an authenticated non-Unicode request that attempted to read such a file could cause smbd to...

samba and samba3x security update

3.6.9-169 - resolves: 1105499 - CVE-2014-0244: DoS in nmbd. - resolves: 1108840 - CVE-2014-3493: DoS in smbd with unicode path names...

IBM Lotus Domino Server 6.5.1 Web Service Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13045/info A remote denial of service vulnerability affects IBM Lotus Domino Server web service. This issue is due to a failure of the application to properly handle malformed network requests. IBM has denied that this...

michael lamont savant http server 2.1 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2697/info It is possible for an attacker to traverse the web folders of a Savant HTTP Server. Submitting a URL referring to a known directory or file, and appended with specific unicode characters, will disclose the...

Xion Player 1.0.125 Stack Buffer Overflow Exploit

No description provided by source. !/usr/bin/python Title: Xion 1.0.125 Stack Buffer Overflow Date: August 13, 2010 Author: corelanc0d3r and dijital1 Grtz to dijital1 : I had a lot of fun working with you on this one ! : Grtz to dookie2000ca : Original Advisory:...

Lan Messenger sending PM Buffer Overflow(UNICODE) - Overwrite SEH

No description provided by source. Exploit Title: Lan Messenger Version 1.2 Buffer Overflow vulnerability - UNICODEPOC Date: 09-05-2013 Exploit Author: ariarat Vendor Homepage: http://lmadhavan.com Software Link: http://lmadhavan.com/software/archive/lanmsg12.zip Version: 1.2 & may be old version...

HP Operations Manager <= 8.16 - (srcvw4.dll) LoadFile()/SaveFile() Remote Unicode Stack Overflow PoC

No description provided by source. html !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...

Microsoft Windows XP/2000 RunDLL32.EXE Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8114/info rundll32.exe has been reported prone to a buffer overflow vulnerability. The condition has been reported to be triggered when an excessive string is passed to the vulnerable application as a routine name for a...

Omnicron OmniHTTPD 2.0.4-8 File Source Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2788/info Submitting a specially crafted GET request for a known file .php, .pl, or .shtml, could cause OmniHTTPD to disclose the source code of the requested resource. The GET requested would have to be appended with the...

MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...

Microsoft IIS 5.0 CodeBrws.ASP Source Code Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4525/info Microsoft IIS 5.0 ships with a sample script that may be used to view the source code of other scripts in the sample scripts /IISSAMPLES directory. However, this script CodeBrws.asp does not adequately filter...

All Browsers - Long Unicode DoS PoC

No description provided by source. html titleDrIDE - All Browsers - Long Unicode DoS PoC/title head script function boom //The number of strings increases the amount of memory consumed, quicker crash where applicable. var longunistring1 = unescape%u4141%u4141; var longunistring2 =...

Acoustica 3.32 CD/DVD Label Maker - .m3u PoC

No description provided by source. Exploit Title: Acoustica cd/dvd label maker .m3u PoC Date: April 27,2010 Software Link: http://www.acoustica.com/cd-label-maker/ Version: 3.32 Tested on: Windows XP Sp3/Windows 7 Author: chap0 Email: chap0x90 at gmail dot com Contacted Vendor Apr 19, 2010 Auto...

PHP <= 5.2.0 (php_iisfunc.dll) Local Buffer Overflow PoC (win32)

No description provided by source. ?php // ================================================================================== // // phpiisfunc.dll PHP = 5.2.0 win32 Buffer Overflow PoC // // Discovery: boecke [email protected] // Risk: Local Buffer Overflow Medium - High Risk // Notes: Various...

Zoom Player Pro 3.30 (.m3u) - File Buffer Overflow Exploit (seh)

No description provided by source. ?php / Zoom Player Pro v.3.30 .m3u file buffer overflow exploit seh by Nine:Situations:Group::surfista seems the same of http://secunia.com/advisories/28214/ bug found by Luigi Auriemma no full working exploit out, so I made my test version / / //original...

MS SQL Server 2000,MS Jet 4.0 Engine Unicode Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5057/info Microsoft SQL Server is prone to a remotely exploitable unicode-based buffer overflow condition. This condition occurs when the OpenDataSource function is used with MS Jet Engine. This issue may be exploited to...

NVIDIA Install Application 2.1002.85.551 (NVI2.dll) Unicode Buffer Overflow PoC

No description provided by source. !-- NVIDIA Install Application 2.1002.85.551 NVI2.dll Unicode Buffer Overflow PoC Vendor: NVIDIA Corporation Product web page: http://www.nvidia.com Affected version: 2.1002.85.551 Driver: 306.97 Summary: NVIDIA install core application for Windows. Desc: The...

Computer Associates SiteMinder Unicode Cross Site Scripting Protection Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36088/info Computer Associates SiteMinder is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to bypass cross-site scripting protection...

Nokia Multimedia Player 1.0 SEH Unicode Exploit

No description provided by source. ? Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp sp3 running on VMwa...

Quick Player 1.3 Unicode SEH Exploit

No description provided by source. Quick Player 1.3 Unicode SEH Exploit Author Abhishek Lyall and Puneet Jain [email protected] , abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable...