CA BrightStor ARCserve Backup Message Engine Opcode 117 Buffer Overflow (CVE-2007-0169)

Computer Associates BrightStor ARCserve Backup and Business Protection Suite families of software products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including backup and restore, dat...

Out-of-bounds

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service system crash via an & ampersand character in a Proces...

Drupal Local File Inclusion Vulnerability (Windows)

Hi guys, I was testing Acunetix WVS with AcuSensor enabled on Drupal http://www.drupal.org and the scanner found a possible File Inclusion vulnerability. The vulnerability is located in the file "includestheme.inc" on line 1011. Vulnerable code: function themerendertemplate$templatefile, $variabl...

Upload command to Startup folder

Added: 01/20/2009 Background Each user's Startup folder on Windows systems contains programs which run at start-up time. This tool attempts to upload a command connection to a user's Startup folder. If successful, the connection will be established the next time the computer starts. Limitations A...

Yosemite Backup 8.70 - DtbClsLogin() Remote Buffer Overflow

Yosemite Backup 8.70 - DtbClsLogin Remote Buffer Overflow source: https://www.securityfocus.com/bid/32246/info Yosemite Backup is prone to a buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized buffer. Attackers...

CVE-2008-3459

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted 1 lladdr and 2 iproute configuration directives, probably related to shell metacharacters...

CDNetworks Nefficient Download(NeffyLauncher.dll) Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CDNetworks Nefficient DownloadNeffyLauncher.dll Vulnerabilities Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote Code Execution Vulnerable Systems: MS Windows Systems Version: NeffyLauncher 1.0.5...

CDNetworks Nefficient Download (NeffyLauncher.dll) Code Execution Vulnerabilities

No description provided by source. Title: CDNetworks Nefficient DownloadNeffyLauncher.dll Vulnerabilities Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote Code Execution Vulnerable Systems: MS Windows Systems Version: NeffyLauncher 1.0.5...

cdnetworks-exec.txt

Title: CDNetworks Nefficient DownloadNeffyLauncher.dll Vulnerabilities Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote Code Execution Vulnerable Systems: MS Windows Systems Version: NeffyLauncher 1.0.5 AA07EBD2-EBDD-4BD6-9F8F-114BD513492C Solution: Upgrad...

CDNetworks Nefficient Download - NeffyLauncher.dll Code Execution

CDNetworks Nefficient Download - NeffyLauncher.dll Code Execution Title: CDNetworks Nefficient DownloadNeffyLauncher.dll Vulnerabilities Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote Code Execution Vulnerable Systems: MS Windows Systems Version:...

CDNetworks Nefficient Download - 'NeffyLauncher.dll' Code Execution

Title: CDNetworks Nefficient DownloadNeffyLauncher.dll Vulnerabilities Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote Code Execution Vulnerable Systems: MS Windows Systems Version: NeffyLauncher 1.0.5 AA07EBD2-EBDD-4BD6-9F8F-114BD513492C Solution: Upgrad...

DESlock+ <= 3.2.6 local kernel ring0 link list zero SYSTEM Exploit

Exploit for unknown platform in category local exploits ================================================================== DESlock+ DESlock+ include include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define DLKFDISKRIOCTL 0x80002008 define DLKFDISKSLOT 0x00000C5C define...

CVE-2007-3896

The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe...

CVE-2007-3846

Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly other products, when run on Windows-based systems, allows remote authenticated users to overwrite and create arbitrary files via a ..\ dot dot backslash sequence in the filename, as stor...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain privileges via certain vectors related to 1 DB2 instance or FMP startup on Linux and Solaris; 2 exec of executables while running as root on non-Windows systems, as...

Design/Logic Flaw

Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows systems has unknown impact and attack vectors, aka DB03. NOTE: as of 20070424, Oracle has not disputed reliable claims that DB03 occurs because RDBMS uses a NULL Discretionary Acce...

Code injection

The PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute arbitrary code via a WScript.Shell COM object, as demonstrated by using the Run method of this object to execute cmd.exe, which bypasses PHP's safe mode...

MySQL 4.x/5.0 User-Defined Function Command Execution Exploit (win)

No description provided by source. -- raptorwinudf.sql - A MySQL UDF backdoor kit for Windows -- Copyright c 2007 Marco Ivaldi [email protected] -- -- This is a MySQL backdoor kit for Windows based on the UDFs User Defined -- Functions mechanism. Use it to spawn a reverse shell netcat UDF on...

rasman.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

The network administrator and the attacker is a good helper for Wget using the detailed explanation-vulnerability warning-the black bar safety net

For a experience is not very rich attacker, worked extremely hard to get to the system management rights or the Telnet permissions later, often had to face such embarrassing scene: pour permissions what is the use For a system administrator, often to for system download some patch software or...