1685 matches found
Mac OS X WebDav DoS
It's possible to cause kernal panic via webdavmount function...
Apple Mac OS X WebDAV内核扩展本地拒绝服务漏洞
BUGTRAQ ID: 41958 CVE ID: CVE-2010-1794 Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X支持使用WebDAV共享，由内核扩展实现。本地用户可以使用默认安装的mountwebdav工具来加载WebDAV共享。 WebDAV内核扩展中存在拒绝服务漏洞，漏洞代码位于webdavmount函数中： MALLOCfmp-pmsocketname, struct sockaddr , args.pasocketnamelen, MTEMP, MWAITOK;...
Outlook ATTACH_BY_REF_ONLY File Execution
$Id: ms10045outlookrefonly.rb 9926 2010-07-25 17:31:04Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft IIS 5.0 - WebDAV 'ntdll.dll' Path Overflow (MS03-007) (Metasploit)
$Id: ms03007ntdllwebdav.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft Releases FixIt Tool for LNK Flaw
Microsoft has released a FixIt tool for the unpatched LNK Windows shell vulnerability and also has updated its guidance on how to deal with the flaw. The company also said it is continuing to work on developing a patch for the vulnerability. The FixIt tool that Microsoft published Tuesday mitigat...
Microsoft Windows Shell LNK Code Execution
$Id: ms10xxxwindowsshelllnkexecute.rb 9888 2010-07-20 19:54:56Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft Windows Shell LNK Code Execution
This module exploits a vulnerability in the handling of Windows Shortcut files .LNK that contain an icon resource pointing to a malicious DLL. This module creates a WebDAV service that can be used to run an arbitrary payload when accessed as a UNC path. Module Options msf use...
Apache Tomcat 4.x < 4.1.37 Multiple Vulnerabilities
According to its self-reported version number, the instance of Apache Tomcat 4.x listening on the remote host is prior to 4.1.37. It is, therefore, affected by the following vulnerabilities : - The remote Apache Tomcat install may be vulnerable to an information disclosure attack if the deprecate...
Microsoft SQL Server Backup Restoring Memory Corruption (MS08-040; CVE-2008-0107)
Microsoft SQL Server is a relational database management system RDBMS. Microsoft SQL Server uses Transact-SQL T-SQL, a proprietary extension to Structured Query Language SQL, for querying and modifying data and managing databases. SQL Server can be remotely access via the Tabular Data Stream TDS...
Microsoft Help Center XSS and Command Execution
Help and Support Center is the default application provided to access online documentation for Microsoft Windows. Microsoft supports accessing help documents directly via URLs by installing a protocol handler for the scheme "hcp". Due to an error in validation of input to hcp:// combined with a...
Sun Java System Web Server WebDAV OPTIONS Buffer Overflow
$Id: sunjswsdavoptions.rb 9202 2010-05-02 21:04:56Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
On iis a few vbs scripts in the permeate in the applied section-Vulnerability warning-the black bar safety net
Query IIS for all sites C:\WINDOWS\system32cscript.exe iisweb. vbs /query Microsoft R Windows Script Host Version 5.6 CopyrightC Microsoft Corporation 1996-2001。 ALL RIGHTS RESERVED. Are connecting to the server ...has been completed. Site Name Metabase Path Status IP Port Host...
Sun Java System Web Server WebDAV OPTIONS Buffer Overflow
This module exploits a buffer overflow in Sun Java Web Server prior to version 7 Update 8. By sending an "OPTIONS" request with an overly long path, attackers can execute arbitrary code. In order to reach the vulnerable code, the attacker must also specify the path to a directory with WebDAV...
IIS can be PUT, but can not MOVE of reason-vulnerability warning-the black bar safety net
Today in the test IIS put vulnerability, found can put all IIS can't parse the file, the move is also normal, but it can not move as asp, asa and other IIS can parse the file, search the Internet for some articles, found is because the IIS configuration is not selected on the“script resource...
Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP)
This module exploits a buffer overflow vulnerability in the LoadAniIcon function in USER32.dll. The flaw can be triggered through Internet Explorer 6 and 7 by using the CURSOR style sheet directive to load a malicious .ANI file. The module can also exploit Mozilla Firefox by using a UNC path in a...
MS10-022 Microsoft Internet Explorer Winhlp32.exe MsgBox Code Execution
This module exploits a code execution vulnerability that occurs when a user presses F1 on MessageBox originated from VBscript within a web page. When the user hits F1, the MessageBox help functionality will attempt to load and use a HLP file from an SMB or WebDAV if the WebDAV redirector is enabl...
Internet Explorer Winhlp32.exe MsgBox Code Execution
$Id: ms10022ievbscriptwinhlp32.rb 9085 2010-04-15 16:08:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
ACROS Security: Remote Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-1)
=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-04-12-1 ------------------------------------------------------------------------- ASPR 2010-04-12-1: Remote Binary Planting in VMware Tools for Windows...
Sun Java System Web Server <= 7.0 Update 7 Multiple Vulnerabilities
Sun Java Web Server is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Sun Java System Web Server Multiple Vulnerabilities
This host has Sun Java Web Server running which is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbsunjavasyswebservmultvuln.nasl 6637 2017-07-10 09:58:13Z teissa $ Sun Java System Web Server Multiple Vulnerabilities Authors: Michael Meyer Copyright: Copyright c 2010 Greenbon...