7299 matches found
3CServer 1.1 (FTP Server) - Remote Overflow
/ subject: Proof of Concept exploit for 3CServer v1.1 FTP server vendor: 3Com, http://support.3com.com/software/utilitiesforwindows32bit.htm date: Mon Feb 7 18:10:01 2005 notes: universal offset, SEH ptr overwriting with variation author: mandragore, mandragore@[email protected] / include...
CVE-2004-0774
The CVE-2004-0774 entry concerns RealNetworks Helix Universal Server (Linux 9.0.2; Windows 9.0.3) where remote attackers could cause a denial of service by sending a POST with Content-Length: -1. The root cause is improper handling of a crafted Content-Length value, leading to excessive memory an...
Helix Universal Server Remote Integer Handling DoS
The remote host is running Helix Universal Server, a digital media delivery platform. There is a flaw in the remote version of this software that could allow an attacker to crash this service by sending a malformed POST request to the remote host. C Tenable Network Security, Inc...
CVE-2004-0049
Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port...
CVE-2004-0049
RealNetworks Helix Server/Proxy 9 and Helix Mobile Server 10 are affected by a buffer overflow in the Administration Interface over HTTP. An authenticated user can submit malformed HTTP POST requests to trigger code execution on the server. Affected versions include Helix Universal Server/Gateway...
CVE-2002-1583
CVE-2002-1583 describes a local buffer overflow in IBM DB2 Universal Database (DB2 UDB) versions 6.0 and 7.0, triggered by a long username read from a file descriptor argument within sqllib/security/db2ckpw. The underlying issue is a vulnerability in handling the username input that can overflow ...
CVE-2002-1583
Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument...
CVE-2003-1051
CVE-2003-1051 affects IBM DB2 Universal Database 8.1. It describes multiple format-string vulnerabilities that could allow local users to execute arbitrary code via certain command-line arguments to db2start, db2stop, or db2govd. Root cause: format string handling issues in the involved binaries....
CVE-2003-1050
Consolidated details from connected documents: IBM DB2 Universal Database 8.1 contains multiple buffer overflows that allow local users to execute arbitrary code via long command line arguments to (1) db2start, (2) db2stop, or (3) db2govd. The vulnerability is local-privilege escalation with pote...
CVE-2003-1049
CVE-2003-1049 affects IBM DB2 Universal Database 7 before FixPak 12, where DMS directories are created with insecure 777 permissions, allowing local users to modify or delete certain DB2 files. Root cause: insecure directory permissions on DMS components. Impact as per CVSS: partial confidentiali...
RealNetworks Helix Universal Server < 9.0.3 HTTP GET Request DoS
Binary data 1214.prm...
AOL Instant Messenger AIM ""Away"" Message Local Exploit
No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...
AOL Instant Messenger AIM "Away" Message Local Exploit
Exploit for unknown platform in category local exploits ====================================================== AOL Instant Messenger AIM "Away" Message Local Exploit ====================================================== / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve...
MS Windows XP Task Scheduler (.job) Universal Exploit (MS04-022)
Exploit for unknown platform in category local exploits ================================================================ MS Windows XP Task Scheduler .job Universal Exploit MS04-022 ================================================================ / HOD-ms04022-task-expl.c: MS04-022 Microsoft...
CVE-2004-0389
RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service crash via malformed requests that trigger a null dereference, as demonstrated using 1 GETPARAMETER or 2 DESCRIBE requests...
CVE-2004-0389
RealNetworks Helix Universal Server (RealServer) versions 9.0.1–9.0.2 are affected by a remote denial-of-service due to malformed GET_PARAMETER or DESCRIBE requests triggering a null dereference, causing crashes. The issue is documented in CVE-2004-0389 and reflected in advisories/plugins. Mitiga...
PT-2004-1539 · Realnetworks · Helix Universal Server
Name of the Vulnerable Software and Affected Versions: RealNetworks Helix Universal Server versions 9.0.1 through 9.0.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, via malformed requests that trigger a null dereference. This can be demonstrat...
Real Networks Helix Universal Server 9.0.x - Denial of Service
Real Networks Helix Universal Server 9.0.x - Denial of Service source: https://www.securityfocus.com/bid/10157/info It has been reported that Real Networks Helix Universal Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to properly...
Real Networks Helix Universal Server 9.0.x - Denial of Service
source: https://www.securityfocus.com/bid/10157/info It has been reported that Real Networks Helix Universal Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to properly handle malformed RTSP Real-Time Streaming Protocol requests. A...