Solaris 9 PortBind XDR-DECODE taddr2uaddr() Remote DoS Exploit

Exploit for solaris platform in category dos / poc ============================================================== Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS Exploit ============================================================== /...

CA ARCserve Backup xdr_rwsstring buffer overflow

Added: 05/27/2008 CVE: CVE-2008-2242 BID: 29283 OSVDB: 45368 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. It runs several services which use the SUN Remote Procedure Call SUN-RPC protocol. SUN-RPC messages are defined using the External Data...

CA ARCserve Backup xdr_rwsstring buffer overflow

Added: 05/27/2008 CVE: CVE-2008-2242 BID: 29283 OSVDB: 45368 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. It runs several services which use the SUN Remote Procedure Call SUN-RPC protocol. SUN-RPC messages are defined using the External Data...

CVE-2008-2242

Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdrrwsstring function...

Stack overflow

Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdrrwsstring function...

CVE-2008-2242

Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdrrwsstring function...

CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities

Title: CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities CA Advisory Date: 2008-05-19 Reported By: An anonymous researcher working with the iDefense VCP Damian Put working with ZDI/TippingPoint Impact: A remote attacker can cause a denial of service or execute arbitrary code. Summary...

CA BrightStor ARCserve Backup multiple security vulnerabilities

caloggerd directory traversal. Buffer overflow in multiple xdr functions...

CA BrightStor ARCserve Backup XDR Parsing Buffer Overflow Vulnerability

This vulnerability allws attackers to execute arbitrary code on vulnerable installations of CA BrightStor ARCserve Backup for Linux. User interaction is not required to exploit this vulnerability. The specific flaw exists due to improper bounds checking in the xdrrwsstring library function. By...

Microsoft Internet Explorer 8 Beta 1 - XDR Prototype Hijacking Denial of Service

source: https://www.securityfocus.com/bid/28580/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted webpage. Successfully exploiting this issue will allow attackers to crash the...

Firebird关系数据库'protocol.cpp' XDR协议远程内存破坏漏洞

BUGTRAQ ID: 28403 CVE ID:CVE-2008-0387 CNCVE ID:CNCVE-20080387 Firebird Relational Database是一款关系型数据库。 Firebird Relational Database管理器处理XDR协议上部分标签时存在整数溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当src/remote/protocol.cpp解析器接收到如下非法数据的操作时： opreceive opstart opstartandreceive opsend opstartandsend...

GLSA-200803-02 : Firebird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-02 Firebird: Multiple vulnerabilities Firebird does not properly handle certain types of XDR requests, resulting in an integer overflow CVE-2008-0387. Furthermore, it is vulnerable to a buffer overflow when processing...

Firebird: Multiple vulnerabilities

Background Firebird is a multi-platform, open source relational database. Description Firebird does not properly handle certain types of XDR requests, resulting in an integer overflow CVE-2008-0387. Furthermore, it is vulnerable to a buffer overflow when processing usernames CVE-2008-0467. Impact...

Heap overflow

Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager ISM, as used in Informix Dynamic Server IDS 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests...

CVE-2008-0768

Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager ISM, as used in Informix Dynamic Server IDS 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests...

CVE-2008-0768

Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager ISM, as used in Informix Dynamic Server IDS 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests...

Firebird关系数据库protocol.cpp XDR协议远程内存破坏漏洞

BUGTRAQ ID: 27403 CVECAN ID: CVE-2008-0387 Firebird是一款提供多个ANSI SQL-92功能的关系型数据库，可运行在Linux、Windows和各种Unix平台下。 Firebird在处理畸形格式的数据时存在漏洞，远程攻击者可能利用此漏洞导致拒绝服务。 如果Firebird的协议解析器（src/remote/protocol.cpp）接受到了任何带有有效数据的以下操作的时候： opreceive opstart opstartandreceive opsend opstartandsend opstartsendandreceive...

CVE-2008-0387

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted 1 opreceive, 2 opstart, 3 opstartandreceive, 4 opsend, 5 opstartandsend, and 6 opstartsendandreceive XDR...

CVE-2008-0387

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted 1 opreceive, 2 opstart, 3 opstartandreceive, 4 opsend, 5 opstartandsend, and 6 opstartsendandreceive XDR...

CVE-2008-0387

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted 1 opreceive, 2 opstart, 3 opstartandreceive, 4 opsend, 5 opstartandsend, and 6 opstartsendandreceive XDR...