1738 matches found
Zinf Audio Player 2.2.1 (PLS File) Stack Buffer Overflow
This module exploits a stack-based buffer overflow in the Zinf Audio Player 2.2.1. An attacker must send the file to victim and the victim must open the file. Alternatively it may be possible to execute code remotely via an embedded PLS file within a browser, when the PLS extension is registered ...
Medal of Honor Allied Assault getinfo Stack Buffer Overflow
This module exploits a stack based buffer overflow in the getinfo command of Medal Of Honor Allied Assault. Module Options msf use exploit/windows/games/mohaa/getinfo msf undefinedgetinfo show actions ...actions... msf undefinedgetinfo set ACTION msf undefinedgetinfo show options ...show and set...
Red Faction <= 1.20 Server Reply Remote Buffer Overflow Exploit
No description provided by source. / by Luigi Auriemma UNIX & WIN VERSION / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h include "winerr.h" define close closesocket else include unistd.h include sys/socket.h include sys/types.h include arpa/inet.h include netdb....
IA WebMail 3.x Buffer Overflow
This exploits a stack buffer overflow in the IA WebMail server. This exploit has not been tested against a live system at this time. Module Options msf use exploit/windows/http/ia/webmail msf undefinedwebmail show actions ...actions... msf undefinedwebmail set ACTION msf undefinedwebmail show...
CVE-2003-0288
IP Messenger for Win suffers a filename-length buffer overflow in the file/folder transfer mechanism (versions 2.00–2.02). The overflow occurs when saving an attached file with a long name, potentially allowing arbitrary code execution with the user’s privileges. The JVN entry confirms impact as ...
CVE-2003-0288: Undefined Security Weakness
Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file...
Webster HTTP Server GET Buffer Overflow
This exploits a stack buffer overflow in the Webster HTTP server. The server and source code was released within an article from the Microsoft Systems Journal in February 1996 titled "Write a Simple HTTP-based Server Using MFC and Windows Sockets". Module Options msf use...
MS02-039 Microsoft SQL Server Resolution Overflow
This is an exploit for the SQL Server 2000 resolution service buffer overflow. This overflow is triggered by sending a udp packet to port 1434 which starts with 0x04 and is followed by long string terminating with a colon and a number. This module should work against any vulnerable SQL Server 200...
Network Associates PGP KeyServer 7 LDAP Buffer Overflow
This module exploits a stack buffer overflow in the LDAP service that is part of the NAI PGP Enterprise product suite. This module was tested against PGP KeyServer v7.0. Due to space restrictions, egghunter is used to find our payload - therefore you may wish to adjust WfsDelay. Module Options ms...
GAMSoft TelSrv 1.5 Username Buffer Overflow
This module exploits a username sprintf stack buffer overflow in GAMSoft TelSrv 1.5. Other versions may also be affected. The service terminates after exploitation, so you only get one chance! Module Options msf use exploit/windows/telnet/gamsoft/telsrvusername msf undefinedtelsrvusername show...
el8.org advisory - Win 95/98 DoS (RFParalyze.c)
--/-----/-----/-----/-----/-----/-----/-----/-----/-----/-----/--- / / / e / - el8.org advisory / l / / 8 / - Evan Brewer [email protected] / . / - Rain Forest Puppy [email protected] / o / / r / - Synopsis: Cause undesired effects remotely against / g / win95,8 through an oddly formed winpopup message. ...
win98-con-lan.txt
All versions of Win 95 & 98 in a LAN can be crashed using a modified version of the 'win98-con'-Bug. The target must have at lea st one shared directory read-only access is enough. You just have to execute a 'special' link in a HTML-File on your own machine. This will crash down the victim's...
CVE-1999-0178
Buffer overflow in the win-c-sample program win-c-sample.exe in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string...
CVE-1999-0178: Undefined Security Weakness
Buffer overflow in the win-c-sample program win-c-sample.exe in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string...
iParty-DoS.txt
Date: Mon, 30 Nov 1998 21:46:52 -0600 From: HD Moore Reply-To: Bugtraq List To: [email protected] Subject: iParty can be shut down remotely -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iParty is an audio/text chat program for Windows. The iParty server listens on a specified port 6004 is...
OReilly WebSite 1.x/2.0 win-c-sample.exe Buffer Overflow Vulnerability
Description O'Reilly WebSite Pro is a Windows 95/NT Web Server package. Versions 2.0 and below contained a vulnerable sample script, win-c-sample.exe, placed by default in /cgi-shl/ off the web root directory. This program is vulnerable to a buffer overflow, allowing for execution of arbitrary...
