ZDI-09-001: Microsoft SMB NT Trans Request Parsing Remote Code Execution Vulnerability

ZDI-09-001: Microsoft SMB NT Trans Request Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-001 January 13, 2009 -- CVE ID: CVE-2008-4834 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows XP Microsoft Windows 2000 SP4 Microsoft...

HP OpenView Network Node Manager Toolbar.exe CGI buffer overflow

Added: 01/09/2009 CVE: CVE-2008-0067 BID: 33147 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by requesting the Toolbar.exe CGI program with a...

HP OpenView Network Node Manager Toolbar.exe CGI buffer overflow

Added: 01/09/2009 CVE: CVE-2008-0067 BID: 33147 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by requesting the Toolbar.exe CGI program with a...

CoolPlayer BUILD 219 (PlaylistSkin) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =========================================================== CoolPlayer BUILD 219 PlaylistSkin Buffer Overflow Exploit =========================================================== !/usr/bin/perl coolplayerbof.pl Jeremy Brown...

CoolPlayer 2.19 - 'PlaylistSkin' Local Buffer Overflow

!/usr/bin/perl coolplayerbof.pl Jeremy Brown [email protected]/jbrownsec.blogspot.com CoolPlayer BUILD 219 'PlaylistSkin' Buffer Overflow Exploit http://coolplayer.sourceforge.net TCP 0.0.0.0:4444 0.0.0.0:0 LISTENING C:\Documents and Settings\Administrator telnet localhost 4444 ..... Microsoft...

Destiny Media Player 1.61 .lst File Exploit

print "=====================================================================" print " Destiny Media Player 1.61 .lst File Local Stack Overflow Exploit\n" print " Discovered by : Encrypt3d.M!nd" print " exploit code by : suN8Hclf" print " Tested on : Windows 2000 SP4 Polish" print " Greetings to :...

Destiny Media Player 1.61 (lst File) Local Buffer Overflow Exploit #5

No description provided by source. print "=====================================================================" print " Destiny Media Player 1.61 .lst File Local Stack Overflow Exploit\n" print " Discovered by : Encrypt3d.M!nd" print " exploit code by : suN8Hclf" print " Tested on : Windows 2000...

Destiny Media Player 1.61 (.lst File) Local Stack Overflow Exploit

print "=====================================================================" print " Destiny Media Player 1.61 .lst File Local Stack Overflow Exploitn" print " Discovered by : Encrypt3d.M!nd" print " exploit code by : suN8Hclf" print " Tested on : Windows 2000 SP4 Polish" print " Greetings to :...

Destiny Media Player 1.61 - .lst Local Buffer Overflow (5)

Destiny Media Player 1.61 - .lst Local Buffer Overflow 5 print "=====================================================================" print " Destiny Media Player 1.61 .lst File Local Stack Overflow Exploit\n" print " Discovered by : Encrypt3d.M!nd" print " exploit code by : suN8Hclf" print "...

Destiny Media Player 1.61 (lst File) Local Buffer Overflow Exploit #5

Exploit for unknown platform in category local exploits ===================================================================== Destiny Media Player 1.61 lst File Local Buffer Overflow Exploit 5 ===================================================================== print...

Destiny Media Player 1.61 - '.lst' Local Buffer Overflow (5)

print "=====================================================================" print " Destiny Media Player 1.61 .lst File Local Stack Overflow Exploit\n" print " Discovered by : Encrypt3d.M!nd" print " exploit code by : suN8Hclf" print " Tested on : Windows 2000 SP4 Polish" print " Greetings to :...

In the“broiler”create a TFTP server-the vulnerabilities and early warning-the black bar safety net

We are in the attack process often you want to use to a tftp server, if you inconvenient on your machine to install a tftp server, then in the broiler on the installation, this is a better method. We start to learn about what is known as TFTP. TFTP: theTrivialFileTransferProtocol. The small File...

Windows/x86 (2000) - Reverse TCP (192.168.0.247:8721/TCP) Connect + Vampiric Import Shellcode (179 bytes)

Windows/x86 2000 - Reverse TCP 192.168.0.247:8721/TCP Connect + Vampiric Import Shellcode 179 bytes. Shellcode exploit for Windowsx86 platform ; Title: Windows 2000 Vampiric Import Reverse Connect ; Platforms: Windows 2000 ; Function: Attach to dbmssocn.dll, use IAT to connect, read/exec payload ...

smb-enum-processes NSE Script

Pulls a list of processes from the remote server over SMB. This will determine all running processes, their process IDs, and their parent processes. It is done by querying the remote registry service, which is disabled by default on Vista; on all other Windows versions, it requires Administrator...

Computer Associates License Service invalid command buffer overflow

Added: 12/24/2008 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary...

MS04-007 Microsoft ASN.1 Library Bitstring Heap Overflow

This is an exploit for a previously undisclosed vulnerability in the bit string decoding code in the Microsoft ASN.1 library. This vulnerability is not related to the bit string vulnerability described in eEye advisory AD20040210-2. Both vulnerabilities were fixed in the MS04-007 patch. Windows...

Microsoft Excel TXO and OBJ record parsing memory corruption

Added: 12/18/2008 CVE: CVE-2008-4265 BID: 32618 OSVDB: 50556 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user opens an Excel...

Microsoft Excel TXO and OBJ record parsing memory corruption

Added: 12/18/2008 CVE: CVE-2008-4265 BID: 32618 OSVDB: 50556 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user opens an Excel...

Microsoft Excel TXO and OBJ record parsing memory corruption

Added: 12/18/2008 CVE: CVE-2008-4265 BID: 32618 OSVDB: 50556 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user opens an Excel...

Internet Explorer embed tag src extension buffer overflow

Added: 12/11/2008 CVE: CVE-2008-4261 BID: 32595 OSVDB: 50610 Background The HTML embed tag allows developers to embed plug-ins in web pages. Problem A vulnerability in Internet Explorer allows command execution when a user loads a page containing an embed tag with a src attribute containing a...