MS Windows (SMB) Transaction Response Handling Exploit (MS05-011)

漏洞描述：Windows SMB客户端在处理SMB响应时存在一个缓冲区溢出漏洞。恶意的SMB服务器可以利用这个漏洞在连接该服务器的SMB客户端主机上执行任意命令。MRXSMB.SYS驱动负责执行SMB客户端操作以及处理SMB服务器返回的响应。一些重要的Windows文件共享操作以及所有的RPC-over-named-pipes操作使用SMB命令Trans25h和Trans232h。一个恶意的SMB服务器通过发送特殊的Transaction响应数据可能导致一个缓冲区溢出漏洞。溢出可能发生在任何这个数据被处理的地方，例如MRXSMB.SYS或其他客户端代码中。例如，如果Trans2...

CVE-2002-1749

Windows 2000 Terminal Services vulnerability (CVE-2002-1749): the disconnect feature may fail to lock when left idle until the screen saver activates and the user disconnects, potentially allowing an attacker to gain administrator privileges. Affected: Windows 2000 Terminal Services disconnect/lo...

CVE-2002-1712

Microsoft Windows 2000 allows remote attackers to cause a denial of service memory consumption by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port TCP/139, as demonstrated by stream3...

Microsoft Security Bulletin MS05-026 Vulnerability in HTML Help Could Allow Remote Code Execution (896358)

Microsoft Security Bulletin MS05-026 Vulnerability in HTML Help Could Allow Remote Code Execution 896358 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

Microsoft Security Bulletin MS05-027 Vulnerability in Server Message Block Could Allow Remote Code Execution (896422)

Microsoft Security Bulletin MS05-027 Vulnerability in Server Message Block Could Allow Remote Code Execution 896422 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

Microsoft Security Bulletin MS05-032 Vulnerability in Microsoft Agent Could Allow Spoofing (890046)

Microsoft Security Bulletin MS05-032 Vulnerability in Microsoft Agent Could Allow Spoofing 890046 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Spoofing Maximum Severity Rating: Moderate Recommendation:...

Microsoft Security Bulletin MS05-030 Cumulative Security Update in Outlook Express (897715)

Microsoft Security Bulletin MS05-030 Cumulative Security Update in Outlook Express 897715 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Outlook Express Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Important...

Microsoft Agent Trusted Content Spoofing Vulnerability

Description Microsoft Agent is prone to a vulnerability that could allow a malicious website to spoof trusted content. This could result in a user downloading and executing malicious files thinking they are safe. Technologies Affected Microsoft Windows 2000 Advanced Server Microsoft Windows 2000...

Microsoft Windows HTML Help Remote Code Execution Vulnerability

Description Microsoft Windows HTML Help is affected by a remote code execution vulnerability. The vulnerability presents itself when the application handles malformed data through the InfoTech protocol ms-its, its, mk:@msitstore. An attacker may exploit this issue from a malicious Web page or...

MS05-027: Vulnerability in SMB Could Allow Remote Code Execution (896422)

The remote version of Windows contains a flaw in the Server Message Block SMB implementation that could allow an attacker to execute arbitrary code on the remote host. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

MS05-032: Vulnerability in Microsoft Agent Could Allow Spoofing (890046)

The remote version of Windows contains a flaw in the Microsoft Agent service that could allow an attacker to spoof the content of a website. To exploit this flaw, an attacker would need to set up a rogue website and lure a victim on the remote host into visiting it. C Tenable Network Security, In...

CVE-2005-1905

The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs...

CVE-2005-1905

CVE-2005-1905 affects Kaspersky Anti-Virus on Windows 2000 via the klif.sys kernel driver. The Seebug and NVD records indicate the klif.sys component can be abused by a local attacker to gain privileges by modifying certain high-privilege code addresses that are later accessed by privileged proce...

CVE-2005-1905

The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs...

Denial of Service vulnerability in GoodTech SMTP Server for Windows NT/2000/XP version 5.14

Summary: Denial of Service vulnerability in GoodTech SMTP Server for Windows NT/2000/XP version 5.14 http://www.goodtechsys.com/ Details: Input to the RCPT TO command is not properly checked and/or filtered. Issuing a single character 'A' as an argument to the RCTP TO command will cause the smtpd...

Microsoft Windows 2000 VPN Detection

Binary data 2949.prm...

e-Post SPA-PRO 4.01 (imap) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= e-Post SPA-PRO 4.01 imap Remote Buffer Overflow Exploit ========================================================= // // e-Post SPA-PRO Mail @Solomon SPA-IMAP4S 4.01 Service Buffer...

netmailsharpro.txt

Netmailshar 4.0 Build 15 Directory traversal & Users enumeration weakneses Release Date: 19 April ,2005 Severity: Medium Vendor: http://www.pppindia.com/ Systems Affected: Microsoft Windows NT 4.0 all versions Microsoft Windows 2000 SP3 and earlier Microsoft Windows XP all versions Microsoft...

globalscape_ftp_30.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

CVE-2005-0050

The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service crash and possibly execute arbitrary code, aka the...