3119 matches found
Microsoft Internet Explorer 6 - Code Execution (1)
Microsoft Internet Explorer 6 - Code Execution 1 source: https://www.securityfocus.com/bid/20797/info Microsoft Internet Explorer is prone to an unspecified vulnerability that results in arbitrary code execution. Successfully exploiting this issue allows remote attackers to execute arbitrary...
Novell eDirectory NDS Server Host Header Overflow
This module exploits a stack buffer overflow in Novell eDirectory 8.8.1. The web interface does not validate the length of the HTTP Host header prior to using the value of that header in an HTTP redirect. This module requires Metasploit: https://metasploit.com/download Current source:...
Serv-U FTP Server MDTM timezone buffer overflow
Added: 10/27/2006 CVE: CVE-2004-0330 BID: 9751 OSVDB: 4073 Background Serv-U FTP Server supports the MDTM command which allows users to modify the time stamp on files. Problem A buffer overflow in Serv-U FTP Server allows remote authenticated attackers to execute arbitrary commands by sending the...
Oracle 9i XDB HTTP PASS Overflow (win32)
This module exploits a stack buffer overflow in the authorization code of the Oracle 9i HTTP XDB service. David Litchfield, has illustrated multiple vulnerabilities in the Oracle 9i XML Database XDB, during a seminar on "Variations in exploit methods between Linux and Windows" presented at the...
Oracle Spatial component SDO_CS.TRANSFORM_LAYER buffer overflow
Added: 10/26/2006 CVE: CVE-2006-5344 BID: 20588 OSVDB: 31462 Background The Oracle Spatial formerly SDO component of Oracle Database provides a set of functions which process multi-dimensional data. Problem A buffer overflow in the Oracle Spatial component allows an attacker with EXECUTE privileg...
Qualcomm WorldMail 3.0 IMAPD LIST Buffer Overflow
This module exploits a stack buffer overflow in the Qualcomm WorldMail IMAP Server version 3.0 builds 6.1.19.0 through 6.1.22.0. Version 6.1.22.1 fixes this particular vulnerability. NOTE: The service does NOT restart automatically by default. You may be limited to only one attempt, so choose...
MS Internet Explorer WebViewFolderIcon setSlice() Overflow E
No description provided by source. This module is part of the metasploit framework3 svn co http://metasploit.com/svn/framework3/trunk/ require 'msf/core' module Msf class Exploits::Windows::Browser::WebViewSetSlice Msf::Exploit::Remote include Exploit::Remote::HttpServer::Html def initializeinfo ...
MS Windows NetpIsRemote() Remote Overflow Exploit (MS06-040) (2k3)
No description provided by source. netapiwin2003.pm MS06-040 Exploit for Windows Server 2003 SP0 Author: Trirat Puttaraksa Kira trir00t at gmail.com http://sf-freedom.blogspot.com For educational purpose only Note: This exploit is developed because of my question "Is it exploitable on Windows...
INCA IM-204 - Information Disclosure
INCA IM-204 - Information Disclosure source: https://www.securityfocus.com/bid/20696/info INCA IM-204 devices are prone to a remote information-disclosure vulnerability because the devices fail to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attacker...
Zorum 3.5 - 'DBProperty.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/20606/info Zorum is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with the...
BrightStor ARCserve discovery service ASBRDCST.DLL buffer overflow
Added: 10/19/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29534 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...
BrightStor ARCserve discovery service ASBRDCST.DLL buffer overflow
Added: 10/19/2006 CVE: CVE-2006-5143 BID: 20365 OSVDB: 29534 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...
Mercury/32 PH Server Module Buffer Overflow
This module exploits a stack-based buffer overflow in Mercury/32 'Mercury/32 PH Server Module Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow in Mercury/32 'MC', 'License' = MSFLICENSE, 'References' = 'CVE', '2005-4411' , 'OSVDB', '22103', 'BID', '16396' , ...
FreeWPS 2.11 - 'upload.php' Remote Command Execution
source: https://www.securityfocus.com/bid/20494/info FreeWPS is prone to a remote command-execution vulnerability. Attackers can exploit this issue to execute arbitrary system commands with the privileges of the webserver process. FreeWPS version 2.11 is vulnerable to this issue; other versions m...
Microsoft PowerPoint NamedShows record code execution
Added: 10/12/2006 CVE: CVE-2006-4694 BID: 20226 OSVDB: 29259 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem Improper handling of malformed NamedShows records in PowerPoint files allows command execution. Resolution Apply the patch...
Microsoft PowerPoint NamedShows record code execution
Added: 10/12/2006 CVE: CVE-2006-4694 BID: 20226 OSVDB: 29259 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem Improper handling of malformed NamedShows records in PowerPoint files allows command execution. Resolution Apply the patch...
FreeSSHd 1.0.9 Key Exchange Algorithm String Buffer Overflow
This module exploits a simple stack buffer overflow in FreeSSHd 1.0.9. This flaw is due to a buffer overflow error when handling a specially crafted key exchange algorithm string received from an SSH client. This module requires Metasploit: https://metasploit.com/download Current source:...
ISearch 2.16 - 'ISEARCH_PATH' Remote File Inclusion
source: https://www.securityfocus.com/bid/20401/info iSearch is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the...
Microsoft Message Queuing buffer overflow
Added: 10/06/2006 CVE: CVE-2005-0059 BID: 13112 OSVDB: 15458 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow in Microsoft Message Queuing allows remote attackers to execute arbitrary...
Microsoft Message Queuing buffer overflow
Added: 10/06/2006 CVE: CVE-2005-0059 BID: 13112 OSVDB: 15458 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow in Microsoft Message Queuing allows remote attackers to execute arbitrary...