CVE-2010-1794

The webdavmount function in webdavvfsops.c in the WebDAV kernel extension aka webdavfs.kext for Mac OS X 10.6 allows local users to cause a denial of service panic via a mount request with a large integer in the pasocketnamelen field...

CVE-2010-1794

CVE-2010-1794 affects Mac OS X WebDAV kernel extension (webdav_fs.kext) prior to or in 10.6.x. The vulnerability resides in webdav_mount() where user-supplied pa_socket_namelen is copied into MALLOC without bounds checking, allowing a local unprivileged user to trigger a kernel panic by issuing a...

CVE-2010-1794: Undefined Security Weakness

The webdavmount function in webdavvfsops.c in the WebDAV kernel extension aka webdavfs.kext for Mac OS X 10.6 allows local users to cause a denial of service panic via a mount request with a large integer in the pasocketnamelen field...

Mac OS X WebDAV kernel extension local denial-of-service

=================================================================== Mac OS X WebDAV kernel extension local denial-of-service July 26, 2010 CVE-2010-1794 =================================================================== ==Description== "Web-based Distributed Authoring and Versioning, or WebDAV,...

Mac OS X WebDav DoS

It's possible to cause kernal panic via webdavmount function...

Apple Mac OS X WebDAV内核扩展本地拒绝服务漏洞

BUGTRAQ ID: 41958 CVE ID: CVE-2010-1794 Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X支持使用WebDAV共享，由内核扩展实现。本地用户可以使用默认安装的mountwebdav工具来加载WebDAV共享。 WebDAV内核扩展中存在拒绝服务漏洞，漏洞代码位于webdavmount函数中： MALLOCfmp-pmsocketname, struct sockaddr , args.pasocketnamelen, MTEMP, MWAITOK;...

Outlook ATTACH_BY_REF_ONLY File Execution

$Id: ms10045outlookrefonly.rb 9926 2010-07-25 17:31:04Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft IIS 5.0 - WebDAV 'ntdll.dll' Path Overflow (MS03-007) (Metasploit)

$Id: ms03007ntdllwebdav.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Releases FixIt Tool for LNK Flaw

Microsoft has released a FixIt tool for the unpatched LNK Windows shell vulnerability and also has updated its guidance on how to deal with the flaw. The company also said it is continuing to work on developing a patch for the vulnerability. The FixIt tool that Microsoft published Tuesday mitigat...

Microsoft Windows Shell LNK Code Execution

$Id: ms10xxxwindowsshelllnkexecute.rb 9888 2010-07-20 19:54:56Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Windows Shell LNK Code Execution

This module exploits a vulnerability in the handling of Windows Shortcut files .LNK that contain an icon resource pointing to a malicious DLL. This module creates a WebDAV service that can be used to run an arbitrary payload when accessed as a UNC path. Module Options msf use...

Microsoft SQL Server Backup Restoring Memory Corruption (MS08-040; CVE-2008-0107)

Microsoft SQL Server is a relational database management system RDBMS. Microsoft SQL Server uses Transact-SQL T-SQL, a proprietary extension to Structured Query Language SQL, for querying and modifying data and managing databases. SQL Server can be remotely access via the Tabular Data Stream TDS...

Apache Tomcat 4.x < 4.1.37 Multiple Vulnerabilities

According to its self-reported version number, the instance of Apache Tomcat 4.x listening on the remote host is prior to 4.1.37. It is, therefore, affected by the following vulnerabilities : - The remote Apache Tomcat install may be vulnerable to an information disclosure attack if the deprecate...

Microsoft Help Center XSS and Command Execution

Help and Support Center is the default application provided to access online documentation for Microsoft Windows. Microsoft supports accessing help documents directly via URLs by installing a protocol handler for the scheme "hcp". Due to an error in validation of input to hcp:// combined with a...

Sun Java System Web Server WebDAV OPTIONS Buffer Overflow

$Id: sunjswsdavoptions.rb 9202 2010-05-02 21:04:56Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

On iis a few vbs scripts in the permeate in the applied section-Vulnerability warning-the black bar safety net

Query IIS for all sites C:\WINDOWS\system32cscript.exe iisweb. vbs /query Microsoft R Windows Script Host Version 5.6 CopyrightC Microsoft Corporation 1996-2001。 ALL RIGHTS RESERVED. Are connecting to the server ...has been completed. Site Name Metabase Path Status IP Port Host...

IIS can be PUT, but can not MOVE of reason-vulnerability warning-the black bar safety net

Today in the test IIS put vulnerability, found can put all IIS can't parse the file, the move is also normal, but it can not move as asp, asa and other IIS can parse the file, search the Internet for some articles, found is because the IIS configuration is not selected on the“script resource...

Internet Explorer Winhlp32.exe MsgBox Code Execution

$Id: ms10022ievbscriptwinhlp32.rb 9085 2010-04-15 16:08:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ACROS Security: Remote Binary Planting in VMware Tools for Windows &#40;ASPR #2010-04-12-1&#41;

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-04-12-1 ------------------------------------------------------------------------- ASPR 2010-04-12-1: Remote Binary Planting in VMware Tools for Windows...

Sun Java System Web Server Multiple Vulnerabilities

This host has Sun Java Web Server running which is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbsunjavasyswebservmultvuln.nasl 6637 2017-07-10 09:58:13Z teissa $ Sun Java System Web Server Multiple Vulnerabilities Authors: Michael Meyer Copyright: Copyright c 2010 Greenbon...