MS05-033: Vulnerability in Telnet Client Could Allow Information Disclosure (896428)

The remote version of Windows contains a flaw the Telnet client that could allow an attacker to read the session variables of users connecting to a rogue telnet server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18486; scriptversion"1.35"; scriptcvsdate"Date:...

GlobalScape Secure FTP Server 3.0 - Remote Buffer Overflow

GlobalScape Secure FTP Server 3.0 - Remote Buffer Overflow !/usr/bin/python GlobalScape Secure FTP Server Buffer Overflow Coded by [email protected] http://www.see-security.com http://www.hackingdefined.com/exploits/Globalscape30.pdf EIP Overwrite root@muts ./globalscape-3.0-ftp.py + Evil...

BulletProof FTP Server 2.4.0.31 Local Privilege Escalation Exploit

No description provided by source. // //Privilege escalation in BulletProof FTP Server v2.4.0.31 //By Jerome Athias //jerome DOT athias AT free DOT fr //Discovered by Reed Arvin reedarvinatgmaildotcom //http://reedarvin.thearvins.com // //Little PoC //Gives you a shell with system privileges //...

CVE-2005-1286

CVE-2005-1286 affects BitDefender 8 with an unquoted Windows search path when executing a process. The root cause is lack of quoting of the full pathname, enabling a local user to prevent BitDefender from starting by creating a malicious C:\program.exe. The NVD entry documents this local, high-co...

Microsoft Windows XP/2000 - Internet Protocol Validation Remote Code Execution (2)

// source: https://www.securityfocus.com/bid/13116/info Microsoft Windows is reported prone to a remote code execution vulnerability. It is reported that the vulnerability manifests when an affected Microsoft platform receives and processes an especially malformed TCP/IP packet. Reports indicate...

MS05-017: Vulnerability in MSMQ Could Allow Code Execution (892944) (uncredentialed check)

The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. Windows XP SP1 can be identified remotely without harm, n...

Ethereal 0.10.9 (Windows) - 3G-A11 Remote Buffer Overflow

Ethereal 0.10.9 Windows - 3G-A11 Remote Buffer Overflow / Ethereal IAPP remote buffer overflow 2 PoC exploit --------------------------------------------------- To test this vulnerability on windows, try to send 3-10 packets that will trigger the crash, and scroll between captured packets in...

RealPlayer 10 "".smil"" File Local Buffer Overflow Exploit

No description provided by source. / RealPlayer .smil file buffer overflow Coded by nolimit@CiSO & Buzzdee greets to COREiSO & news & flare & class101 & ESI & RVL & everyone else I forget This uses a seh overwrite method, which takes advantage of the SEH being placed in multiple locations over th...

BadBlue 2.55 - Web Server Remote Buffer Overflow

BadBlue 2.55 - Web Server Remote Buffer Overflow / Badblue 2.55 Web Server remote buffer overflow Version: BadBlue Personal Edition v2.55 Date: Dec. 9, 2004 Tested under Windows 2000 Professional SP3/SP4 Spanish Windows 2000 Server SP4 Spanish Windows XP SP1 Spanish Credits: Andres Tarasco ataras...

BadBlue 2.55 - Web Server Remote Buffer Overflow

/ Badblue 2.55 Web Server remote buffer overflow Version: BadBlue Personal Edition v2.55 Date: Dec. 9, 2004 Tested under Windows 2000 Professional SP3/SP4 Spanish Windows 2000 Server SP4 Spanish Windows XP SP1 Spanish Credits: Andres Tarasco atarasco at sia.es has discovered this vulnerability...

Overwrite arbitrary files downloading .lnk twice — Mozilla

If a windows user can be convinced to download a .lnk file twice to the same location an attacker can overwrite essentially delete arbitrary files on the user's machine: the file referenced by the first .lnk will be overwritten by the second download rather than replacing the .lnk itself. On some...

CVE-2004-0964

Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file...

MSN Messenger PNG Image Buffer Overflow Download Shellcoded Expl

Exploit for unknown platform in category remote exploits =================================================================== MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit =================================================================== / MSN Messenger PNG Image Buffer...

MS05-007: Vulnerability in Windows Could Allow Information Disclosure (888302)

The remote version of Windows contains a flaw that could allow an attacker to cause it to disclose information over the use of a named pipe through a NULL session. An attacker may exploit this flaw to gain more knowledge about the remote host. C Tenable Network Security, Inc. include"compat.inc";...

MSN Messenger (Linux) - .png Image Buffer Overflow

MSN Messenger Linux - .png Image Buffer Overflow / Remember g++ k /str0ke / / MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit Bug discoveried by Core Security Technologies www.coresecurity.com Exploit coded By ATmaCA Copyright ©2002-2005 AtmacaSoft Inc. All Rights Reserved. We...

MSN Messenger (Linux) - '.png' Image Buffer Overflow

/ Remember g++ k /str0ke / / MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit Bug discoveried by Core Security Technologies www.coresecurity.com Exploit coded By ATmaCA Copyright ©2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail:...

CVE-2005-0047

Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability."...

Local buffer-overflow in W32Dasm 8.93

Luigi Auriemma Application: W32Dasm was http://www.expage.com/page/w32dasm Versions: = 8.93 8.94??? Platforms: Windows Bug: buffer-overflow Exploitation: local Date: 24 Jan 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code 4...

CVE-2004-1306

Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a crafted .hlp file...

EEYE: Windows ANI File Parsing Buffer Overflow

Windows ANI File Parsing Buffer Overflow Systems Affected: Windows Me Windows 2000 Windows XP SP1 and earlier Windows 2003 Overview: eEye Digital Security has discovered a vulnerability in USER32.DLL's handling of Windows animated cursor .ani files that will allow a remote attacker to reliably...