MS04-029: Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350)

The remote Windows operating system contains a bug in RPC Runtime Library. RPC is a protocol used by Windows to provide an inter-process communication mechanism that allows a program running on one system to access services on another one. A bug affecting the implementation of this protocol could...

Icecast 2.0.1 (Win32) - Remote Code Execution (1)

/ by Luigi Auriemma Shellcode add-on by Delikon www.Delikon.de Because of all the forbidden bytes in a http get request i had to use a very small shellcode, which was blown up by Msf::Encoder::PexAlphaNum. Great encoder. -------------------------------------------------------------------------...

AOL Instant Messenger AIM - 'Away' Message Remote (2)

/ CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by John Bissell A.K.A. HighT1mes Exploit: ======== drizzit.c Vulnerable Software: ==================== - AIM 5.5.3588 - AIM 5.5.3590 Beta - AIM 5.5.3591 - AIM 5.5.3595 and a couple others versions... If you want to try other...

Cerbere HTTP Proxy Server Host: Header Remote DoS

The remote host is running Cerbere Proxy Server, a HTTP/FTP proxy server for Windows operating systems. It is reported that versions up to and including 1.2 are vulnerable to a remote denial of service in the 'Host:' HTTP field processing. An attacker may craft a malicious HTTP request with a lar...

IBM DB2 Semaphore Signaling - Denial of Service

source: https://www.securityfocus.com/bid/11403/info A denial of service vulnerability has been reported in IBM DB2. This vulnerability is reported to only exist when DB2 is installed on Microsoft Windows operating systems. This issue is due to a failure of the application to properly ensure that...

IBM DB2 - Universal Database Information Disclosure

IBM DB2 - Universal Database Information Disclosure source: https://www.securityfocus.com/bid/11402/info An information disclosure vulnerability has been reported in IBM DB2. This vulnerability only exists when DB2 is installed on Microsoft Windows operating systems. This is due to a Windows...

IBM DB2 Semaphore Signaling - Denial of Service

IBM DB2 Semaphore Signaling - Denial of Service source: https://www.securityfocus.com/bid/11403/info A denial of service vulnerability has been reported in IBM DB2. This vulnerability is reported to only exist when DB2 is installed on Microsoft Windows operating systems. This issue is due to a...

IBM DB2 - Universal Database Information Disclosure

source: https://www.securityfocus.com/bid/11402/info An information disclosure vulnerability has been reported in IBM DB2. This vulnerability only exists when DB2 is installed on Microsoft Windows operating systems. This is due to a Windows permissions issue related to shared memory sections,...

[Full-Disclosure] Microsoft's Explorer and Internet Explorer long share name buffer overflow.

Microsoft Explorer and Internet Explorer Long Share Name Buffer Overflow. Author: Rodrigo Gutierrez [email protected] Affected: MS Internet Explorer, MS Explorer explorer.exe Windows XPAll, Windows 2000All, Windows 98All, Windows meAll Not Tested: Windows 2003 Vendor Status: i notified the...

Symantec Norton AntiVirus 2002 - Nested File Manual Scan Bypass

Symantec Norton AntiVirus 2002 - Nested File Manual Scan Bypass source: https://www.securityfocus.com/bid/10164/info A vulnerability has been reported in Symantec Norton AntiVirus 2002 that may potentially cause deeply nested files with specific names to bypass manual scanning. This could permit...

Symantec Norton AntiVirus 2002 - Nested File Manual Scan Bypass

source: https://www.securityfocus.com/bid/10164/info A vulnerability has been reported in Symantec Norton AntiVirus 2002 that may potentially cause deeply nested files with specific names to bypass manual scanning. This could permit malicious executable content to bypass scanning by the software...

PT-2004-1176 · Microsoft · Windows Xp

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP version SP1 Description: The issue concerns the Help and Support Center in Microsoft Windows XP, which fails to properly validate HCP URLs. This allows remote attackers to execute arbitrary code by using quotation marks i...

US-CERT Technical Cyber Security Alert TA04-104A -- Multiple Vulnerabilities in Microsoft Products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vulnerabilities in Microsoft Products Original release date: April 13, 2004 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows Operating Systems Microsoft Windows Remote Procedure Call RPC and Distributed Component Object Mod...

memmansys21.txt

Title: Vulnerabilities in Member Management System 2.1 Software: Member Management System 2.1 Vendor: http://www.expinion.net/software/appmms.asp Impact: Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user and adm...

WFTPD Server 3.21 - Remote Buffer Overflow

WFTPD Server 3.21 - Remote Buffer Overflow / WFTPD buffer overflow exploit, c axl 2004, [email protected] Discovered by the very same guy :p Tested WFTPD versions: - WFTPD Pro Server 3.21 Release 1 trial latest version - WFTPD Pro Server 3.20 Release 2 trial - WFTPD Server 3.21 Release 1 trial...

DCE RPC Vulnerabilities New Attack Vectors Analysis

Date Published: 2003-12-10 Last Update: 2003-12-10 Advisory ID: CORE-2003-12-05 Title: DCE RPC Vulnerabilities New Attack Vectors Analysis Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted: - Microsoft . Core notification: 2003-12-09 . Notification acknowledged by Microsoft:...

SRT2003-11-13-0218 - PCAnywhere local SYSTEM exploit

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

Sun Java Plugin 1.4 - Unauthorized Java Applet Floppy Access

Sun Java Plugin 1.4 - Unauthorized Java Applet Floppy Access source: https://www.securityfocus.com/bid/8867/info A weakness has been reported in Java implementations that may constitute unauthorized access by Java applets to floppy devices. This weakness appears to present a flaw in the Java...

Sun Java Plugin 1.4 - Unauthorized Java Applet Floppy Access

source: https://www.securityfocus.com/bid/8867/info A weakness has been reported in Java implementations that may constitute unauthorized access by Java applets to floppy devices. This weakness appears to present a flaw in the Java security model. This issue was reported in Java Plug-in 1.4.x...

SMC Router 1.2x - Random UDP Packet Denial of Service

SMC Router 1.2x - Random UDP Packet Denial of Service source: https://www.securityfocus.com/bid/8711/info A denial of service has been reported in the SMC SMC2404WBR BarricadeT Turbo 11/22 Mbps Wireless Cable/DSL Broadband Router. It is possible to trigger this condition by sending UDP packets...