Novell iPrint Client ActiveX Control call-back-url Buffer Overflow

This module exploits a stack-based buffer overflow in Novell iPrint Client 5.42. When sending an overly long string to the 'call-back-url' parameter in an op-client-interface-version action of ienipp.ocx an attacker may be able to execute arbitrary code. Module Options msf use...

SonicWALL SSL-VPN ActiveX format string vulnerability

End-Point Interrogator/Installer ActiveX format string vulnerability in AuthCredential method...

SonicWALL E-Class SSL-VPN - ActiveX Control Format String Overflow

SonicWALL E-Class SSL-VPN - ActiveX Control Format String Overflow -------------------------- NSOADV-2010-005 --------------------------- SonicWALL E-Class SSL-VPN ActiveX Control format string overflow 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 1110110...

SonicWALL Aventail epi.dll AuthCredential Format String

This module exploits a format string vulnerability within version 10.0.4.x and 10.5.1 of the SonicWALL Aventail SSL-VPN Endpoint Interrogator/Installer ActiveX control epi.dll. By calling the 'AuthCredential' method with a specially crafted Unicode format string, an attacker can cause memory...

SonicWALL E-Class SSL-VPN - ActiveX Control Format String Overflow

-------------------------- NSOADV-2010-005 --------------------------- SonicWALL E-Class SSL-VPN ActiveX Control format string overflow 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11...

SonicWALL E-Class SSL-VPN ActiveX Control Format String Overflow

Exploit for windows platform in category dos / poc ================================================================ SonicWALL E-Class SSL-VPN ActiveX Control Format String Overflow ================================================================ Title: SonicWALL E-Class SSL-VPN ActiveX Control...

Novell iPrint Client < 5.42 Multiple Flaws

Novell iPrint Client version older than 5.42 is installed on the remote host. Such versions are reportedly affected by multiple vulnerabilities : - Due to a flaw in nipplib.dll module, it may be possible for a remote attacker to delete arbitrary files from the remote system via the...

CVE-2009-3737

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document...

Design/Logic Flaw

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2009-3737

CVE-2009-3737 concerns Oracle Siebel Option Pack for IE ActiveX control. The vulnerability stems from improper memory initialization in the NewBusObj method, enabling remote code execution via a crafted HTML document. CERT and Red Hat entries corroborate remote execution potential and provide mit...

CVE-2009-3737

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document...

Novell iPrint Client ActiveX Control ExecuteRequest debug buffer overflow

Added: 08/16/2010 BID: 42100 OSVDB: 66960 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in ienipp.ocx allows command execution...

Novell iPrint Client ActiveX Control ExecuteRequest debug buffer overflow

Added: 08/16/2010 BID: 42100 OSVDB: 66960 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in ienipp.ocx allows command execution...

Novell iPrint Client ActiveX Control ExecuteRequest debug buffer overflow

Added: 08/16/2010 BID: 42100 OSVDB: 66960 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in ienipp.ocx allows command execution...

Novell iPrint Client < 5.42 Multiple Security Vulnerabilities - Windows

Novell iPrint Client is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:novell:iprint";...

Novell iPrint Client ActiveX Control ExecuteRequest debug buffer overflow

Added: 08/16/2010 BID: 42100 OSVDB: 66960 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in ienipp.ocx allows command execution...

Novell iPrint Client Multiple Security Vulnerabilities (Windows)

The host is installed with Novell iPrint Client and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbnovelliprintclientmultvulnwin.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell iPrint Client Multiple Security Vulnerabilities Windows Authors: Madhuri D Updated By: Madhuri...

Novell iPrint Client Remote File Deletion

Novell iPrint Client is an application that allows users to install and manage printers, or submit print jobs from remote locations using a web browser. The application allows printer driver download and installation, browser-enabled printer interface, and customizable user interface among other...

SmartCode ServerX VNC Server ActiveX 1.1.5.0 - scvncsrvx.dll Denial of Service

SmartCode ServerX VNC Server ActiveX 1.1.5.0 - scvncsrvx.dll Denial of Service Title: SmartCode ServerX VNC Server ActiveX 1.1.5.0 scvncsrvx.dll DoS Exploit Vendor: SmartCode Solutions Product Web Page: htt://www.s-code.com Version Tested: 1.1.5.0 Summary: SmartCode ServerX VNC Server control is ...

SmartCode ServerX VNC Server ActiveX 1.1.5.0 (scvncsrvx.dll) DoS Exploit

Summary SmartCode ServerX VNC Server control is a VNC server implemented as an ActiveX component, which makes it extremely easy for you to integrate VNC support into your Web or desktop applications. In the simplest scenario, you would add the ServerX ActiveX component to your project, place the...