[Full-Disclosure] [AppSecInc Team SHATTER Security Advisory] Microsoft Windows Improper Token Validation

Microsoft Windows Improper Token Validation AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/general/06-0001.html January 10, 2005 Credit: This vulnerability was discovered and researched by Cesar Cerrudo of Application Security, Inc. Risk Level: High Summary: A...

win xp/2000/2003 Download File and Exec 241 bytes

win xp/2000/2003 Download File and Exec 241 bytes. Shellcode exploit for win32 platform / ----------------------------------------------------------------------- downloadurlv31.c - Download file and exec shellcode for Overflow exploit Copyright C 2000-2004 HUC All Rights Reserved. Author : lion :...

win xp/2000/2003 Connect Back shellcode for Overflow Exploit 275 bytes

win xp/2000/2003 Connect Back shellcode for Overflow exploit 275 bytes. Shellcode exploit for win32 platform / ----------------------------------------------------------------------- connectbackv32.c - Connect Back shellcode for Overflow exploit Copyright C 2000-2004 HUC All Rights Reserved. Auth...

AOL Instant Messenger AIM - 'Away' Message Remote (2)

/ CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by John Bissell A.K.A. HighT1mes Exploit: ======== drizzit.c Vulnerable Software: ==================== - AIM 5.5.3588 - AIM 5.5.3590 Beta - AIM 5.5.3591 - AIM 5.5.3595 and a couple others versions... If you want to try other...

Cerbere HTTP Proxy Server Host: Header Remote DoS

The remote host is running Cerbere Proxy Server, a HTTP/FTP proxy server for Windows operating systems. It is reported that versions up to and including 1.2 are vulnerable to a remote denial of service in the 'Host:' HTTP field processing. An attacker may craft a malicious HTTP request with a lar...

IBM DB2 Semaphore Signaling - Denial of Service

IBM DB2 Semaphore Signaling - Denial of Service source: https://www.securityfocus.com/bid/11403/info A denial of service vulnerability has been reported in IBM DB2. This vulnerability is reported to only exist when DB2 is installed on Microsoft Windows operating systems. This issue is due to a...

IBM DB2 - Universal Database Information Disclosure

IBM DB2 - Universal Database Information Disclosure source: https://www.securityfocus.com/bid/11402/info An information disclosure vulnerability has been reported in IBM DB2. This vulnerability only exists when DB2 is installed on Microsoft Windows operating systems. This is due to a Windows...

IBM DB2 Semaphore Signaling - Denial of Service

source: https://www.securityfocus.com/bid/11403/info A denial of service vulnerability has been reported in IBM DB2. This vulnerability is reported to only exist when DB2 is installed on Microsoft Windows operating systems. This issue is due to a failure of the application to properly ensure that...

IBM DB2 - Universal Database Information Disclosure

source: https://www.securityfocus.com/bid/11402/info An information disclosure vulnerability has been reported in IBM DB2. This vulnerability only exists when DB2 is installed on Microsoft Windows operating systems. This is due to a Windows permissions issue related to shared memory sections,...

[Full-Disclosure] Microsoft's Explorer and Internet Explorer long share name buffer overflow.

Microsoft Explorer and Internet Explorer Long Share Name Buffer Overflow. Author: Rodrigo Gutierrez [email protected] Affected: MS Internet Explorer, MS Explorer explorer.exe Windows XPAll, Windows 2000All, Windows 98All, Windows meAll Not Tested: Windows 2003 Vendor Status: i notified the...

memmansys21.txt

Title: Vulnerabilities in Member Management System 2.1 Software: Member Management System 2.1 Vendor: http://www.expinion.net/software/appmms.asp Impact: Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user and adm...

WFTPD Server 3.21 - Remote Buffer Overflow

WFTPD Server 3.21 - Remote Buffer Overflow / WFTPD buffer overflow exploit, c axl 2004, [email protected] Discovered by the very same guy :p Tested WFTPD versions: - WFTPD Pro Server 3.21 Release 1 trial latest version - WFTPD Pro Server 3.20 Release 2 trial - WFTPD Server 3.21 Release 1 trial...

DCE RPC Vulnerabilities New Attack Vectors Analysis

Date Published: 2003-12-10 Last Update: 2003-12-10 Advisory ID: CORE-2003-12-05 Title: DCE RPC Vulnerabilities New Attack Vectors Analysis Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted: - Microsoft . Core notification: 2003-12-09 . Notification acknowledged by Microsoft:...

SRT2003-11-13-0218 - PCAnywhere local SYSTEM exploit

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

Sun Java Plugin 1.4 - Unauthorized Java Applet Floppy Access

Sun Java Plugin 1.4 - Unauthorized Java Applet Floppy Access source: https://www.securityfocus.com/bid/8867/info A weakness has been reported in Java implementations that may constitute unauthorized access by Java applets to floppy devices. This weakness appears to present a flaw in the Java...

Sun Java Plugin 1.4 - Unauthorized Java Applet Floppy Access

source: https://www.securityfocus.com/bid/8867/info A weakness has been reported in Java implementations that may constitute unauthorized access by Java applets to floppy devices. This weakness appears to present a flaw in the Java security model. This issue was reported in Java Plug-in 1.4.x...

SMC Router 1.2x - Random UDP Packet Denial of Service

SMC Router 1.2x - Random UDP Packet Denial of Service source: https://www.securityfocus.com/bid/8711/info A denial of service has been reported in the SMC SMC2404WBR BarricadeT Turbo 11/22 Mbps Wireless Cable/DSL Broadband Router. It is possible to trigger this condition by sending UDP packets...

ZoneAlarm remote Denial Of Service exploit

Overview : ZoneAlarm is a firewall software package designed for Microsoft Windows operating systems that blocks intrusion attempts, trusted by millions, and has advanced privacy features like worms, Trojan horses, and spyware protection. ZoneAlarm is distributed and maintained by Zone...

ZoneAlarm 3.7.202PRO 4.0PRO 4.5 - Random UDP Flood Denial of Service (1)

ZoneAlarm 3.7.202PRO 4.0PRO 4.5 - Random UDP Flood Denial of Service 1 source: https://www.securityfocus.com/bid/8525/info A denial of service vulnerability has been alleged in ZoneAlarm. It is reportedly possible to reproduce this condition by sending a flood of UDP packets of random sizes to...

RealOne Player 1.0/2.0/6.0.10/6.0.11 - '.SMIL' File Script Execution

source: https://www.securityfocus.com/bid/8453/info Real Networks has reported a vulnerability in RealOne Player. Script embedded in SMIL presentations may be executed in the context of a domain that is specified by an attacker. This could allow for theft of cookie-based authentication credential...