Xerox MicroServer - Web Server Directory Traversal

source: https://www.securityfocus.com/bid/9256/info It has been reported that XeroxMicroServer/Xerox11 may be prone to a directory traversal vulnerability that may allow an attacker to traverse outside the server root directory by using '/..' or '/.' character sequences at the end of a URL reques...

HP-UX B11.11 - '/usr/bin/ct' Format String Privilege Escalation

/ File : xhp-ux11inlsct.c Usage : cc xhp-ux11inlsct.c -o xct ; ./xct Purpose : Get a local rootshell from /usr/bin/ct,using HP-UX location language format string bug. Author : watercloud xfocus org Tested : On HP-UX B11.11 . / include define PATH "PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin...

thttpd 2.2x - 'defang' Remote Buffer Overflow (PoC)

/ source: https://www.securityfocus.com/bid/8906/info A vulnerability has been reported in thttpd that may allow a remote attacker to execute arbitrary code on vulnerable host. The issue is reported to exist due to a lack of bounds checking by software, leading to a buffer overflow condition. The...

Sun Microsystems Java Virtual Machine 1.x - Security Manager Denial of Service

Sun Microsystems Java Virtual Machine 1.x - Security Manager Denial of Service source: https://www.securityfocus.com/bid/8892/info A problem has been reported in the Sun Microsystems Java Virtual Machine that occurs when implementing the Security Manager. Because of this, an attacker may be able ...

Sun Microsystems Java Virtual Machine 1.x - Security Manager Denial of Service

source: https://www.securityfocus.com/bid/8892/info A problem has been reported in the Sun Microsystems Java Virtual Machine that occurs when implementing the Security Manager. Because of this, an attacker may be able to crash the virtual machine. / InsecurityManager-Demonstration / / coded by Ma...

Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (PoC) (MS03-046)

!/usr/bin/perl -w ms03-046.pl - hdm metasploit com This vulnerability allows a remote unauthenticated user to overwrite big chunks of the heap used by the inetinfo.exe process. Reliably exploiting this bug is non-trivial; even though the entire buffer is binary safe even nulls and can be just abo...

Atrium Software Mercur MailServer 3.34.04.2 - IMAP AUTH Remote Buffer Overflow

Atrium Software Mercur MailServer 3.34.04.2 - IMAP AUTH Remote Buffer Overflow source: https://www.securityfocus.com/bid/8861/info A problem has been reported in MERCUR Mailserver when handling the IMAP AUTH command. The issue occurs when an overly long command is submitted, which may be due to a...

MS Windows Messenger Service Denial of Service Exploit (MS03-043)

Exploit for unknown platform in category dos / poc ================================================================= MS Windows Messenger Service Denial of Service Exploit MS03-043 ================================================================= / DoS Proof of Concept for MS03-043 - exploitation...

Microsoft Windows Messenger Service - Denial of Service (MS03-043)

/ DoS Proof of Concept for MS03-043 - exploitation shouldn't be too hard. Launching it one or two times against the target should make the machine reboot. Tested against a Win2K SP4. "The vulnerability results because the Messenger Service does not properly validate the length of a message before...

Atrise Everyfind 5.0.2 - search Cross-Site Scripting

Atrise Everyfind 5.0.2 - search Cross-Site Scripting source: https://www.securityfocus.com/bid/8740/info It has been reported that Atrise Everyfind is prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the search module of...

Microsoft Windows - RPC DCOM2 Remote (MS03-039)

Microsoft Windows - RPC DCOM2 Remote MS03-039 / RPCDCOM2.c ver1.1 copy by FLASHSKY flashsky at xfocus.org 2003.9.14 / include include include include include include unsigned char bindstr= 0x05,0x00,0x0B,0x03,0x10,0x00,0x00,0x00,0x48,0x00,0x00,0x00,0x7F,0x00,0x00,0x00,...

MyServer 0.4.3 - Denial of Service

/ MyServer 0.4.3 DoS vendor: http://myserverweb.sourceforge.net Written and found by badpack3t at security-protocols.com For SP Research Labs 09/08/2003 usage: sp-myserv targetport default is 80 / include "stdafx.h" include include pragma commentlib, "ws232.lib" char exploit = / entire request /...

CVE-2003-0192

Apache 2 before 2.0.47, and certain versions of modssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite...

Immunity Canvas: MS03_026

Name| ms03026 ---|--- CVE| CVE-2003-0352 Exploit Pack| CANVAS Description| Microsoft Windows RPC Interface Overflow MS03-026 Notes| CVE Name: CVE-2003-0352 VENDOR: Microsoft MSADV: MS03-026 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/bulletin/MS03-026.ms...

Microsoft Windows XP/2000 - 'RPC DCOM' Remote (MS03-026)

/ DCOM RPC Overflow Discovered by LSD - Exploit Based on Xfocus's Code Written by H D Moore - Usage: ./dcom - Targets: - 0 Windows 2000 SP0 english - 1 Windows 2000 SP1 english - 2 Windows 2000 SP2 english - 3 Windows 2000 SP3 english - 4 Windows 2000 SP4 english - 5 Windows XP SP0 english - 6...

e107 Website System 0.555 - db.php Information Disclosure

e107 Website System 0.555 - db.php Information Disclosure source: https://www.securityfocus.com/bid/8273/info e107 Website System 'db.php' has been reported prone to an information disclosure vulnerability. A remote attacker may exploit this vulnerability to invoke the dumpsql routine without pri...

[Full-Disclosure] Netterm netftpd - Remote DoS

------------------------------------------------------------------ - EXPL-A-2003-017 exploitlabs.com Advisory 017 ------------------------------------------------------------------ -= netterm netftpd =- Vunerabilitys: ---------------- 1. Remote / Local Denial of Service Product: --------...

3Com DSL Router 812 1.1.7/1.1.9/2.0 - Administrative Interface Long Request Denial of Service

// source: https://www.securityfocus.com/bid/8248/info A problem in the 3Com 812 OfficeConnect has been reported that may result in the router becoming unstable. Because of this, an attacker may be able to deny service to legitimate users of the vulnerable router by submitting an excessively long...

3Com DSL Router 812 1.1.71.1.92.0 - Administrative Interface Long Request Denial of Service

3Com DSL Router 812 1.1.71.1.92.0 - Administrative Interface Long Request Denial of Service // source: https://www.securityfocus.com/bid/8248/info A problem in the 3Com 812 OfficeConnect has been reported that may result in the router becoming unstable. Because of this, an attacker may be able to...

IBM U2 UniVerse 10.0.0.9 - 'uvrestore' Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/8206/info It has been reported that the uvrestore binary does not perform bounds checking when parsing command-line arguments. Because this binary is installed with suid root privileges by default, local attackers my be able to exploit this vulnerability ...