AgentX++ Master AgentX::receive_agentx Stack Buffer Overflow

$Id: agentxppreceiveagentx.rb 9236 2010-05-06 00:19:20Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

AgentX++ library / Helix Server multiple security vulnerabilities

Integer overflow, buffer overflow...

RealNetworks Helix Server AgentX receive_agentx Stack Buffer Overflow

Added: 04/27/2010 CVE: CVE-2010-1318 BID: 39564 OSVDB: 63919 Background RealNetworks Helix Server is a media server supporting multiple formats and platforms. Problem A stack buffer overflow vulnerability exists in RealNetworks Helix Server due to a boundary error in the AgentX::receiveagentx...

iDefense Security Advisory 04.15.10: Multiple Vendor AgentX++ Stack Buffer Overflow Vulnerability

iDefense Security Advisory 04.15.10 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 15, 2010 I. BACKGROUND Agent Extensibility AgentX Protocol was designed to address interoperability issues with extensible SNMP agents. AgentX++ is a C++ implementation of the AgentX protocol. It is one...

Integer overflow

Integer overflow in the AgentX::receiveagentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via a request with a crafted payload length...

Stack overflow

Stack-based buffer overflow in the AgentX::receiveagentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2010-1319

Integer overflow in the AgentX::receiveagentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via a request with a crafted payload length...

CVE-2010-1318

CVE-2010-1318 concerns AgentX++ 1.4.16, used by RealNetworks Helix Server and Helix Mobile Server (11.x–13.x) and other products. The vulnerability is a stack-based buffer overflow in AgentX::receive_agentx caused by a boundary error, enabling remote code execution via crafted input over the netw...

CVE-2010-1319

The CVE-2010-1319 issue affects RealNetworks Helix Server and Helix Mobile Server (agents using AgentX++). Affected versions are 11.x through 13.x. The root cause is an integer overflow in AgentX::receive_agentx, allowing a remote attacker to execute arbitrary code via a crafted payload length. E...

AgentX++ Stack Buffer Overflow

Exploit Title: Multiple Vendor AgentX++ Stack Buffer Overflow Vulnerability Date: 2010-04-17 Author: ZSploit.com Software Link: N/A Version: N/A Tested on: RealNetworks Helix Server v11 CVE : CVE-2010-1318 ! /usr/bin/env python File : zsagentxbof.py Description: : CreatedOn : Apr 17 2010 c...

Multiple Vendor AgentX++ Stack Buffer Overflow

Exploit for windows platform in category dos / poc ============================================== Multiple Vendor AgentX++ Stack Buffer Overflow ============================================== Exploit Title: Multiple Vendor AgentX++ Stack Buffer Overflow Vulnerability Date: 2010-04-17 Author:...

AgentX++ Master AgentX::receive_agentx Stack Buffer Overflow

This exploits a stack buffer overflow in the AgentX++ library, as used by various applications. By sending a specially crafted request, an attacker can execute arbitrary code, potentially with SYSTEM privileges. This module was tested successfully against master.exe as included with Real Network'...

RealNetworks Helix Server 11.x / 12.x / 13.x Multiple Vulnerabilities

Binary data 5511.prm...

RealNetworks Helix Server 11.x / 12.x / 13.x Multiple Vulnerabilities

According to its banner, the remote host is running version 11.x, 12.x, or 13.x of RealNetworks Helix Server / Helix Mobile Server. Such versions are potentially affected by multiple vulnerabilities : - A heap overflow exists in the NTLM authentication code related to invalid Base64 encoding...

DEBIAN-CVE-2005-4837

snmpapi.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service crash by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different...

CVE-2005-3243

Ethereal (Wireshark predecessor)

CVE-2005-3243

Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the 1 SLIMP3 and 2 AgentX dissector...

security flaw

Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the 1 SLIMP3 and 2 AgentX dissector...

PT-2005-4057 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.12 and earlier Description: The issue is related to multiple buffer overflows that could allow remote attackers to execute arbitrary code. This is possible via unknown vectors in the 1 SLIMP3 and 2 AgentX dissector...

Fedora Core 4 : ethereal-0.10.13-1.FC4.2 (2005-1011)

Ethereal 0.10.13 fixes the following issues : The ISAKMP dissector could exhaust system memory. CVE-2005-3241 Fixed in: r15163 Bug IDs: none Versions affected: 0.10.11 to 0.10.12. The FC-FCS dissector could exhaust system memory. CVE-2005-3241 Fixed in: r15204 Bug IDs: 312 Versions affected: 0.9....