959 matches found
Microsoft Distributed Transaction Coordinator service memory corruption
Memory corruption as a result of integer overflow with anonymous remote access Windows 2000 and authenticated access under Windows XP/2003...
[EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability
Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability Release Date: October 11, 2005 Date Reported: July 8, 2005 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Server SP0 - SP4 - Vulnerable - Anonymous remotely exploitable by defaul...
MS05-050: Vulnerability in DirectShow Could Allow Remote Code Execution (904706)
The remote host contains a version of DirectX that is vulnerable to a remote code execution flaw. To exploit this flaw, an attacker would need to send a specially malformed .avi file to a user on the remote host and have him open it. C Tenable Network Security, Inc. include"compat.inc"; if...
MS05-051: Vulnerabilities in MSDTC and COM+ Could Allow Remote Code Execution (902400)
The remote version of Windows contains a version of MSDTC and COM+ that is affected by several remote code execution, local privilege escalation and denial of service vulnerabilities. An attacker may exploit these flaws to obtain the complete control of the remote host. C Tenable Network Security...
MS05-048: Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution (907245)
An unchecked buffer condition could allow an attacker to execute arbitrary code on the remote host. To execute this flaw, an attacker would need to send a malformed message via SMTP to the remote host, either by using the SMTP server if Exchange is installed or by sending an email to a user on th...
Mercury/32 Mail Server 4.01a (Pegasus) - IMAP Buffer Overflow
/ Mercury imap4 server remote buffer overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : Mercury mail transport system 4.01a and prolly prior workaround : upgrade to 4.01b version advisory : not available right now company address : www.pmail.com timeline : ...
Microsoft Windows - 'keybd_event' Local Privilege Escalation
/ Microsoft Windows keybdevent validation vulnerability. Local privilege elevation Credits: Andres Tarasco aT4r @ haxorcitos.com Iñaki Lopez ilo @ reversing.org Platforms afected/tested: - Windows 2000 - Windows XP - Windows 2003 Original Advisory: http://www.haxorcitos.com http://www.reversing.o...
[Full-disclosure] Microsoft Windows keybd_event validation vulnerability
Vulnerability: Microsoft Windows keybdevent validation vulnerability. Type:......... Design Flaw Vendor:....... Microsoft Impact:....... Local Privilege Elevation. Credits:...... AndrTarascaT4r @ Haxorcitos.comhttp://Haxorcitos.com .......I Lopez ilo @ reversing.org http://reversing.org...
zenworks_desktop_agent.pm.txt
package Msf::Exploit::zenworksdesktopagent; use strict; use base "Msf::Exploit"; use Pex::Text; my $advanced = ; my $info = 'Name' = 'ZENworks 6.5 Desktop/Server Management Remote Stack Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'Anonymous', , 'Arch' = 'x86' , 'OS' = 'win32', 'winxp',...
Novell ZENworks 6.5 - Desktop/Server Management Remote Stack Overflow (Metasploit)
package Msf::Exploit::zenworksdesktopagent; use strict; use base "Msf::Exploit"; use Pex::Text; my $advanced = ; my $info = 'Name' = 'ZENworks 6.5 Desktop/Server Management Remote Stack Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'Anonymous', , 'Arch' = 'x86' , 'OS' = 'win32', 'winxp',...
MS Internet Explorer COM Objects File Download Exploit (MS05-038)
Exploit for unknown platform in category remote exploits ================================================================= MS Internet Explorer COM Objects File Download Exploit MS05-038 =================================================================...
ZENworks 6.5 Desktop/Server Management Remote Stack Overflow
Exploit for unknown platform in category remote exploits ============================================================ ZENworks 6.5 Desktop/Server Management Remote Stack Overflow ============================================================ package Msf::Exploit::zenworksdesktopagent; use strict; u...
MS05-043: Vulnerability in Printer Spooler Service Could Allow Remote Code Execution (896423) (uncredentialed check)
The remote host contains a version of the Print Spooler service that may allow an attacker to execute code on the remote host or crash the spooler service. An attacker can execute code on the remote host with a NULL session against : - Windows 2000 An attacker can crash the remote service with a...
MS05-039: Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege (899588)
The remote version of Windows contains a flaw in the function PNPQueryResConfList in the Plug and Play service that could allow an attacker to execute arbitrary code on the remote host with the SYSTEM privileges. A series of worms Zotob are known to exploit this vulnerability in the wild. Tenable...
MS05-043: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (896423)
The remote host contains a version of the Print Spooler service that is vulnerable to a security flaw that could allow an attacker to execute code on the remote host or crash the spooler service. An attacker can execute code on the remote host with a NULL session against : - Windows 2000 An...
MS05-040: Vulnerability in Telephony Service Could Allow Remote Code Execution (893756)
The remote host contains a version of the Telephony service that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code and take control of the remote host. On Windows 2000 and Windows 2003 the server must be enabled and only authenticated user can try to exploit...
MS05-038: Cumulative Security Update for Internet Explorer (896727)
The remote host contains a version of the Internet Explorer that is vulnerable to multiple security flaws JPEG Rendering, Web Folder, COM Object that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web pag...
SlimFTPd <= 3.16 Remote Buffer Overflow Exploit
No description provided by source. / Written by redsand [email protected] Jul 22, 2005 Vulnerable: SlimFtpd v3.15 and v3.16 origional vuln found by: Usage: ./redslim 127.0.0.1 OS RET / include stdio.h include stdlib.h include string.h ifdef WIN include winsock2.h include windows.h // pragma lib...
SlimFTPd <= 3.16 Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits =============================================== SlimFTPd Jul 22, 2005 Vulnerable: SlimFtpd v3.15 and v3.16 origional vuln found by: Usage: ./redslim 127.0.0.1 OS RET / include include include ifdef WIN include include // pragma lib //...
Immunity Canvas: MAILENABLE
Name| mailenable ---|--- CVE| CVE-2005-2223 Exploit Pack| CANVAS Description| MailEnable SMTP Stack Overflow Notes| CVE Name: CVE-2005-2223 VENDOR: MailEnable Post-exploitaion: Platforms Tested: Windows 2003 Standard edition base & up2date MailEnable 1.72 Windows 2003 Standard edition up2date...