806 matches found
[VulnWatch] Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow
NGSSoftware Insight Security Research Advisory Name: Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow Systems Affected: Microsoft Windows NT/2000/XP/2003 Server Severity: High Vendor URL: http://www.microsoft.com/ Author: John Heasman [email protected] Date of Public Advisory:...
CVE-2004-2296
The previewreview function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which generates an error message...
CVE-2004-2022
ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a long argument to the system command, which leads to a stack-based buffer overflow. NOTE: it is unclea...
PHP v4.3.x exploit for Windows.
Description: PHP v4.3.x openlog Vulnerability. Compromise: Possible remote buffer overflow in openlog. Vulnerable Systems: PHP v4.3.1, v4.3.5, v4.3.x. Details: ---snip--- PUBLIC EXPLOIT PHP v4.3.x exploit by The Warlock BhQ, http://go.to/biohazardhq mail:[email protected] PUBLIC EXPLOIT This...
PHP 45 - addslashes() Null Byte Bypass
PHP 45 - addslashes Null Byte Bypass source: https://www.securityfocus.com/bid/11981/info PHP4 and PHP5 are reported prone to multiple remotely exploitable vulnerabilities. These issue result from insufficient sanitization of user-supplied data. A remote attacker may carry out directory traversal...
PHP 4/5 - 'addslashes()' Null Byte Bypass
source: https://www.securityfocus.com/bid/11981/info PHP4 and PHP5 are reported prone to multiple remotely exploitable vulnerabilities. These issue result from insufficient sanitization of user-supplied data. A remote attacker may carry out directory traversal attacks to disclose arbitrary files...
CVE-2004-1023
Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folde...
Lithtech Engine (new protocol) Socket Unreacheable DoS
Exploit for unknown platform in category dos / poc ====================================================== Lithtech Engine new protocol Socket Unreacheable DoS ====================================================== / by Luigi Auriemma / include include include ifdef WIN32 include / Header file use...
MiniShare <= 1.4.1 Remote Buffer Overflow Exploit
No description provided by source. / MiniShare = 1.4.1, Remote Buffer Overflow Exploit v0.1. Bind a shellcode to the port 101. Full disclosure and exploit by class101 at DFind.kd-team.com & n3ws at EFnet 07 november 2004 Thanx to HDMoore and Metasploit.com for their kickass ASM work...
EEYE: RealPlayer Zipped Skin File Buffer Overflow
RealPlayer Zipped Skin File Buffer Overflow Release Date: October 27, 2004 Date Reported: October 11, 2004 Severity: High Code Execution Vendor: RealNetworks Systems Affected: For Microsoft Windows RealPlayer 10.5 6.0.12.1053 and earlier RealPlayer 10 RealOne Player v2 RealOne Player v1 Overview:...
YahooPOPs <= 1.6 SMTP Port Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================== YahooPOPs = 1.6 SMTP Port Buffer Overflow Exploit ================================================== / YahooPOPS v1.6 and prior SMTP port buffer overflow exploit v0.1 Exploit code by class1...
CVE-2003-0045
Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service thread hang and resource consumption via a request for a JSP page containing an MS-DOS device name, such as aux.jsp...
[NGSEC-2004-7] NtRegmon, local system denial of service.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Next Generation Security Technologies http://www.ngsec.com Security Advisory Title: NtRegmon, local system denial of service. ID: NGSEC-2004-7 Application: NtRegmon http://www.sysinternals.com/ntw2k/source/regmon.shtml Date: 14/Aug/2004 Status: Patche...
Perl vulnerable to buffer overflow in win32_stat()
Overview A flaw in a standard function in some Perl distributions could allow an attacker to execute arbitrary code on the vulnerable system. Description The stat Perl function, similar to the standard C stat function, returns a list giving the status info for a file. Since the stat function is...
[Full-Disclosure] iDEFENSE Security Advisory 06.07.04: PHP Win32 escapeshellcmd() and escapeshellarg() Input Validation Vulnerability
PHP Win32 escapeshellcmd and escapeshellarg Input Validation Vulnerability iDEFENSE Security Advisory 06.07.04: www.idefense.com/application/poi/display?id=108&type=vulnerabilities June 7, 2004 I. BACKGROUND PHP is a widely-used general-purpose scripting language that is especially suited for Web...
eMule <= 0.42d IRC Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================= eMule = 0.42d IRC Remote Buffer Overflow Exploit ================================================= !/usr/bin/perl eMule = 0.42d Remote Exploit by kcope exploits the DecodeBase16 buffer...
eSignal v7 remote buffer overflow (exploit)
-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 ===========-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=========== VizibleSoft Security Advisory 2004/01 25th Mar 2004 http://viziblesoft.com/insect/advisories/vz012004-esignal7.txt [email protected]...
CVE-2003-0844
modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode without the Apache log, allows local users to overwrite arbitrary files via 1 a symlink attack on predictable temporary filenames on Unix systems, or 2 an NTFS hard link on Windows systems when the...
MS03-039: Microsoft RPC Interface Buffer Overrun (824146) (uncredentialed check)
The remote host is running a version of Windows that has a flaw in its RPC interface, which may allow an attacker to execute arbitrary code and gain SYSTEM privileges. An attacker or a worm could use it to gain the control of this host. Note that this is NOT the same bug as the one described in...
Real Server 7/8/9 Remote Root Exploit (Windows & Linux)
Exploit for multiple platform in category remote exploits ======================================================= Real Server 7/8/9 Remote Root Exploit Windows & Linux ======================================================= / / THCREALbad 0.4 - Wind0wZ & Linux remote root exploit / Exploit by:...