Microsoft Internet Explorer Webdav Request Parsing Heap Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer 7 on the Microsoft Vista operating system. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists...

[SECURITY] Fedora 9 Update: neon-0.28.3-1.fc9

neon is an HTTP and WebDAV client library, with a C interface; providing a high-level interface to HTTP and WebDAV methods along with a low-level interface for HTTP request handling. neon supports persistent connections, proxy servers, basic, digest and Kerberos authentication, and has complete S...

MS08-040: Microsoft SQL Server Multiple Privilege Escalation (941203) (uncredentialed check)

The remote host is running a version of Microsoft SQL Server, Desktop Engine, or Internal Database that is affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to improper initialization of memory pages when reallocating memory. An unauthenticated, remote...

Gentoo Security Advisory GLSA 200711-03 (gallery)

The remote host is missing updates announced in advisory GLSA 200711-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200405-01 (neon)

The remote host is missing updates announced in advisory GLSA 200405-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200405-04 (openoffice)

The remote host is missing updates announced in advisory GLSA 200405-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200405-01 (neon)

The remote host is missing updates announced in advisory GLSA 200405-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200405-04 (openoffice)

The remote host is missing updates announced in advisory GLSA 200405-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200711-03 (gallery)

The remote host is missing updates announced in advisory GLSA 200711-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: neon

The remote host is missing an update to the system as announced in the referenced advisory. VID 84237895-8f39-11d8-8b29-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: apache

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: neon

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Neon Digest认证空指针拒绝服务漏洞

BUGTRAQ ID: 30710 neon是一款HTTP和WebDAV客户端库。 neon的src/neuri.c文件中的mergepaths函数在试图测试base-path0时存在空指针引用错误，如果远程攻击者向使用该库的应用程序提交了恶意的认证请求的话，就可以触发分段错误，导致应用程序崩溃。 Neon Client Library 0.28 Neon ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.webdav.org/neon/...

Absolute path traversal Apache Tomcat WEBDAV

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag...

Storm 2008Beta1 the latest remote overflow 0day analysis-vulnerability warning-the black bar safety net

[email protected] Nearly this vulnerability reported to the storm. Disclaimer: pure technology research, and the prohibition of herein relevant code illegal purposes! At your own risk! Download address: A, vulnerability analysis Today in the afternoon to help colleagues find a software and a new...

Microsoft IIS 5.0 WebDAV拒绝服务漏洞(MS01-044)

CVE CAN ID : CAN-2001-0508 Microsoft IIS 5.0 WebDAV处理中存在一个拒绝服务漏洞，远程攻击者可以临时中断IIS 5.0服务。 WebDAV没有正确的处理特定类型的请求，特别是请求相当长而且其中包含某种 类型的无效数据时。这会导致内存访问错误，从而使得IIS 5.0进程中断。由于缺省情况 下，IIS 5.0会自动重启。因此这只会临时中断IIS服务。 Microsoft IIS 5.0 - Microsoft Windows 2000 厂商补丁： 微软已经为此发布了一个安全公告（MS01-044）以及相应补丁程序：...

Integer overflow

Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine MSDE 2000 SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine WMSDE; Microsoft Data Engine MSDE 1.0 SP4; and Internal Database WYukon SP2 allows remote authenticated users to execute arbitrary code...

CVE-2008-0107

Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine MSDE 2000 SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine WMSDE; Microsoft Data Engine MSDE 1.0 SP4; and Internal Database WYukon SP2 allows remote authenticated users to execute arbitrary code...

CVE-2008-0107

CVE-2008-0107 is a memory corruption vulnerability in multiple SQL Server lineage components (SQL Server 7.0, SQL Server 2000/2005, MSDE/WYukon) triggered by a crafted on-disk file path supplied via SMB or WebDAV, leading to a heap-based buffer overflow. The flaw permits remote authenticated user...

MS Windows IIS WebDAV XML Denial of Service Exploit (MS04-030)

No description provided by source. !/usr/bin/perl IIS BlowOut POC exploit for MS04-030. Found by Amit Klein. incognitoergo yahoo com usage: perl ms04-030spl.pl host port use IO::Socket; $port = @ARGV1; $host = @ARGV0; $socket = IO::Socket::INET-newPeerAddr = $host,PeerPort = $port,Proto = "TCP";...