DEBIAN-CVE-2008-2430

Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file...

Preemptive Protection against CA eTrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability

A buffer overflow vulnerability was discovered in CA eTrust Secure Content Manager. CA eTrust Secure Content Manager SCM is a gateway product for Windows platform that secures, monitors, filters and blocks potential threats from messaging and Web traffic. It provides protection against malware,...

NULL pointer in the HTTP/XML-RPC service of Crysis 1.21

Luigi Auriemma Application: Crysis http://www.ea.com/crysis/home.jsp Versions: = 1.21 1.1.1.6156 showed as gamever Platforms: Windows Bug: NULL pointer in the HTTP/XML-RPC service Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

Update Protection against Apple Safari on Windows Platform Remote Code Execution Vulnerability (MS09-015)

A remote code execution vulnerability exists in Safari for Windows, a web browser developed by Apple. An attacker can exploit this issue to execute arbitrary code on a target system...

BigAnt Server 2.2 Buffer Overflow

This module exploits a stack buffer overflow in BigAnt Server 2.2. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

WordPress cat参数目录遍历漏洞

BUGTRAQ ID: 28845 WordPress是一款免费的论坛Blog系统。 在WordPress的wp-includes/theme.php文件的getcategorytemplate函数中，没有正确地过滤对index.php所传送的cat参数便将其用在了template-loader.php文件中，这可能允许攻击者通过目录遍历攻击包含本地资源的任意PHP文件。 成功利用这个漏洞要求将WordPress安装在了Windows平台上且攻击者拥有在受影响系统上存储PHP文件的权限。 WordPress 2.3.3 临时解决方法：...

Windows Command, Double Reverse TCP Connection (via Perl)

Creates an interactive shell via perl This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 148 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def initializeinfo...

CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability

Title: CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability CVE: CVE-2008-1472 CA Advisory Date: 2008-03-28 Reported By: Exploit code posted at milw0rm.com Impact: A remote attacker can cause a denial of service or execute arbitrary code. Summary: CA products that...

NetWin Surgemail 3.8k4-4 IMAP post-auth Remote LIST Universal Exploit

Exploit for unknown platform in category remote exploits ===================================================================== NetWin Surgemail 3.8k4-4 IMAP post-auth Remote LIST Universal Exploit ===================================================================== !/usr/bin/python NetWin...

Acronis PXE Server 2.0.0.1076 Directory Traversal / NULL Pointer Vulns

No description provided by source. Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author: Luigi Auriemma e-mail:...

Argon Client Management Services <= 1.31 Directory Traversal Vuln

No description provided by source. Luigi Auriemma Application: Argon Client Management Services http://www.argontechnology.com/product.aspx/cid1/43 Versions: = 1.31 TFTP Boot Server = 2.5.3.1 Platforms: Windows Bug: directory traversal in TFTP Boot Server Exploitation: remote Date: 08 Mar 2008...

Acronis PXE Server 2.0.0.1076 Directory Traversal / NULL Pointer Vulns

Exploit for unknown platform in category remote exploits ====================================================================== Acronis PXE Server 2.0.0.1076 Directory Traversal / NULL Pointer Vulns ====================================================================== Luigi Auriemma Application:...

SAPlpd多个远程溢出及拒绝服务漏洞

BUGTRAQ ID: 27613 CVECAN ID: CVE-2008-0620,CVE-2008-0621 SAPlpd是SAP GUI软件包中所捆绑的Windows平台行市打印机守护程序。 SAPLPD服务程序在处理LPD命令时存在多个缓冲区溢出漏洞，远程攻击者可能利用这些漏洞控制服务器或导致服务不可用。 如果向0x01、0x02、0x03、0x04、0x05、0x31、0x32、0x33、0x34和0x35 LPD命令传送了超长参数的话，就可以触发这些溢出，导致执行任意指令；如果向0x53 LPD命令传送了畸形参数，还可能导致服务器终止。 SAP SAPlpd = 6.28 S...

wsftp-disclose.txt

Luigi Auriemma Application: WSFTP Server Manager http://www.wsftp.com Versions: WSFTP Server = 6.1.0.0 Platforms: Windows Bugs: A authorization bypassing in log visualization B ASP source visualization Exploitation: remote Date: 06 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

Oracle XDB component PITRIG_TRUNCATE buffer overflow

Added: 02/01/2008 CVE: CVE-2008-0339 BID: 27229 OSVDB: 40300 Background The PITRIGTRUNCATE function is included in the XDB.XDBPITRIGPKG package which is included with Oracle Database. Problem A buffer overflow vulnerability in the PITRIGTRUNCATE function allows remote, authenticated attackers to...

PT-2008-1556 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.2.x before 2.2.7-dev Description: The issue is related to an unspecified vulnerability in mod proxy balancer for Apache HTTP Server when running on Windows. It allows remote attackers to trigger memory corruption...

Pragma Systems FortressSSH msvcrt.dll异常处理远程拒绝服务漏洞

BUGTRAQ ID: 27141 FortressSSH是Windows平台上所使用的远程访问和管理工具。 FortressSSH处理客户端请求数据时存在漏洞，远程攻击者可能利用此漏洞导致服务器拒绝服务。 FortressSSH服务器对每个入站连接启动一个sshd.exe进程，然后使用msvcrt的s函数处理字符串。在这个过程中如果出现了异常的话，进程就会终止，显示消息错误。例如，使用大于4096的密钥列表就会导致在构建格式串期间在vsprintfs中出现异常。尽管终止单个进程不会影响其他进程，但终止某些进程会导致服务器拒绝访问。 Pragma Systems FortressSSH ...

Exception message in VanDyke VShell 3.0.3.569

Luigi Auriemma Application: VanDyke VShell http://www.vandyke.com/products/vshell/index.html Versions: = 3.0.3.569 Platforms: Windows mainly affected, anyway the server works also on Linux, Solaris, FreeBSD, Mac OS X, HP-UX and AIX Bug: exception error message or termination if in debug mode...

Exception message in Seattle Lab Telnet Server 4.1.1.3758

Luigi Auriemma Application: Seattle Lab Telnet Server http://www.seattlelab.com/products/slnetrf/default.asp Versions: = 4.1.1.3758 Platforms: Windows Bug: exception error message Exploitation: remote Date: 02 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Georgia SoftWorks SSH2 Server多个远程代码执行漏洞

BUGTRAQ ID: 27103 GSW SSH2 Server是使用在Windows平台下的SSH2/Telnet服务程序。 GSW SSH2 Server在处理畸形用户数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制客户端。 ------------------------------------ A 日志函数格式串和缓冲区溢出 ------------------------------------ GSW...