474 matches found
SetWindowLong Shatter Attacks
======================================================================== = SetWindowLong Shatter Attacks = = MS Bulletin posted: = http://www.microsoft.com/technet/security/bulletin/ms04-032.mspx = = Affected Software: = Microsoft Windows 98, 98SE, ME = Microsoft Windows NT 4.0 = Microsoft Window...
US-CERT Technical Cyber Security Alert TA04-212A -- Critical Vulnerabilities in Microsoft Windows
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Critical Vulnerabilities in Microsoft Windows Original release date: July 30, 2004 Last revised: -- Source: US-CERT Systems Affected These vulnerabilities affect the following versions of Microsoft Internet Explorer: Microsoft Internet Explorer 5.01...
MS04-019: Utility Manager Could Allow Code Execution (842526)
The remote host is running a version of the Utility Manager that could allow a local attacker to execute arbitrary code on the host, thus escalating his privileges and obtaining the full control of the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description...
PHP for Windows shell characters filtration protection bypass
escapeshellcmd/escapeshellarg do not work under Windows...
Microsoft Windows H.323 Remote Buffer Overflow Vulnerability
Description The Microsoft Windows H.323 protocol implementation is prone to a remote buffer overflow. Successful exploitation could allow for execution of arbitrary code. This vulnerability could only be exploited if an H.323 application such as NetMeeting were running on the system. Technologies...
IPSwitch IMail LDAP DaemonService - Remote Buffer Overflow
IPSwitch IMail LDAP DaemonService - Remote Buffer Overflow // / THCimail 0.1 - Wind0wZ remote root exploit / / Exploit by: Johnny Cyberpunk [email protected] / / THC PUBLIC SOURCE MATERIALS / / / / Bug was found by idefense or some idefense slaves ; / /...
MS Frontpage Server Extensions fp30reg.dll Exploit (MS03-051)
漏洞描述：Microsoft FrontPage服务器扩展是Microsoft公司开发的用于加强IIS Web服务器的功能的软件包。Microsoft FrontPage Server Extensions存在两个新的安全漏洞，可导致远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，可能以FrontPage进程权限在系统上执行任意指令。 第一个漏洞是由于FrontPage服务扩展的远程调试功能上存在缓冲区溢出，这个功能用于用户远程连接FrontPage服务扩展的服务器和远程调试内容使用，如Visual...
MS03-010: Flaw in RPC Endpoint Mapper Could Allow Denial of Service Attacks (331953)
A flaw exists in the RPC endpoint mapper that can be used by an attacker to disable it remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11485; scriptversion"1.46"; scriptcvsdate"Date: 2018/11/15 20:50:29"; scriptcveid"CVE-2002-1561"; scriptbugtraqid6005;...
CVE-2002-1779
The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 NPW does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 CVE-2000-0305...
CVE-2002-1230
NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WMCOPYDATA message followed by a WMTIMER message, as demonstrated by GetAd, aka "Flaw in Windows WMTIMER...
Security Bulletin MS02-054: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (Q329048)
---------------------------------------------------------------------- Title: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution Q329048 Date: 02 October 2002 Software: Microsoft Windows 98 with Plus! Pack, Windows Me, or Windows XP Impact: Two vulnerabilities, the most...
IIL Advisory: Vulnerabilities in acWEB HTTP server
Illegal Instruction Labs Advisory ------------------------------------------------------------------------- Advisory name: Vulnerabilities in acWEB HTTP server Advisory number: 13 Application: acWEB HTTP server Author e-mail: [email protected] Homepage: somewhere on sourceforge Date:...
badexploit.txt
!/usr/bin/perl - ElectronicSouls Private Do Not Distrobute - Remote Exploit For BadBlue 1.5 Web Server www.badblue.com A transversal bug has been discovered in BadBlue HTTP Daemon SoftWare. This is a gay bug, yes I know. But it can be kinda funny for those days you are bored = Vulnerable System:...
Phusion WebServer 1.0 - Directory Traversal (1)
source: https://www.securityfocus.com/bid/4117/info Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems. Phusion Webserver is prone to directory traversal attacks. It is possible to break out of wwwroot using triple-dot-slash .../ sequences...
CVE-2001-0876
Buffer overflow in Universal Plug and Play UPnP on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL...
WFTPD 32-bit (X86) 3.00 R5 Directory Traversal / Buffer Overflow / DoS
WFTPD 32-bit X86 3.00 R5 Directory Traversal / Buffer Overflow / DoS AFFECTED SYSTEMS WFTPD 32-bit X86 version 3.00 R5 on Windows 95 / 98 / SE / ME is vulnerable to a directory traversal, all versions of windows are likely to be vulnerable to the buffer overflow / DoS DESCRIPTION 1 Directory...
Netscape SmartDownload 1.3 - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/2615/info Netscape SmartDownload, a download manager add-on for popular web browsers, is vulnerable to a buffer overflow. The library 'sdph20.dll' used by SmartDownload contains an URL parser function that will overflow when a user visits or is redirected...
CVE-2000-0979
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level...
HyperTerminal Buffer Overflow Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HyperTerminal Buffer Overflow Vulnerability USSR Advisory Code: USSR-2000055 Public Disclosure Date: October 18, 2000 Vendors Affected: Microsoft Corporation http://www.microsoft.com Hilgraeve, Inc. http://www.hilgraeve.com Systems Affected:...