CORE-2006-1127: ProFTPD Controls Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - Corelabs Advisory http://www.coresecurity.com/corelabs/ ProFTPD Controls Buffer Overflow Date Published: 2006-12-13 Last Update: 2006-12-12 Advisory ID: CORE-2006-1127 Bugtraq ID: None currently assigned CVE Name: None...

ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl -w $Id: revengeproftpdctrls24.pl, v1.0 2007/02/18 19:24:22 revenge Exp $ ProFTPD v1.3.0/1.3.0a Controls Buffer Overflow Exploit Old style school sploit against gcc 3.x and linux kernel 2.4 Original Advisory :...

ProFTPd 1.3.01.3.0a - mod_ctrls support Local Buffer Overflow (1)

ProFTPd 1.3.01.3.0a - modctrls support Local Buffer Overflow 1 !/usr/bin/perl -w $Id: revengeproftpdctrls24.pl, v1.0 2007/02/18 19:24:22 revenge Exp $ ProFTPD v1.3.0/1.3.0a Controls Buffer Overflow Exploit Old style school sploit against gcc 3.x and linux kernel 2.4 Original Advisory :...

ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ====================================================================== ProFTPD 1.3.0/1.3.0a modctrls support Local Buffer Overflow Exploit ====================================================================== !/usr/bin/perl -w $Id:...

Comodo Firewall 2.3/2.4 - Flawed Component Control Cryptographic Hash

source: https://www.securityfocus.com/bid/22570/info Comodo Firewall is prone to a design error in its cryptographic hashing function for component controls. Exploiting this flaw permits attackers to bypass the application's component controls. The application keeps a list of process-module...

Microsoft Internet Explorer vulnerable to remote code execution

Overview A vulnerability in the way Microsoft Internet Explorer instantiates COM objects may lead to execution of arbitrary code. Description Component Object Model, or COM objects, are used to enable interprocess communication and dynamic object creation within Microsoft Windows. Microsoft...

Code injection

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from 1 Msb1fren.dll, 2 Htmlmm.ocx, and 3 Blnmgrps.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2006-4697...

CVE-2007-0219

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from 1 Msb1fren.dll, 2 Htmlmm.ocx, and 3 Blnmgrps.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2006-4697...

CVE-2007-0219

CVE-2007-0219 affects Microsoft Internet Explorer 5.01/6/7 via COM objects instantiated as ActiveX controls. The vulnerability arises when IE tries to instantiate COM objects (not intended for IE) such as those in Imjpcksid.dll, Htmlmm.ocx, and Blnmgrps.dll, leading to remote code execution. Open...

CVE-2006-4697

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might be related to CVE-2006-4193...

Null pointer dereference

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service Internet Explorer crash by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the 1 giffile, 2 htmlfile, 3 jpegfile, 4...

CVE-2007-0612

CVE-2007-0612 affects multiple Windows ActiveX controls via mshtml.dll (and TriEditDocument.triedit.dll) where accessing bgColor/fgColor/linkColor/alinkColor/vlinkColor/defaultCharset in various file objects triggers a NULL pointer dereference, causing Internet Explorer denial of service (crash)....

CVE-2007-0612

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service Internet Explorer crash by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the 1 giffile, 2 htmlfile, 3 jpegfile, 4...

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/22288/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities because the application fails to handle exceptional conditions...

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/22288/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities because the application fails to handle exceptional conditions. These issues are triggered when an attacker entices a victim user to visit a malicious website...

Using Porttunnel do Super springboard-a vulnerability warning-the black bar safety net

PortTunnel heard? Uh, a good port mapping tool Previously had not how to use, just bitter to the even data are put in the www. brinkster. com space, and domestic on this website has been blocked, so can not access,, gas Had to pick up this weapon Because in the cafe can not properly use the http...

CVE-2007-0371

CVE-2007-0371 affects the CCRP BrowseDialog Server ActiveX control (ccrpbds6.dll) within the Common Controls Replacement Project. The vulnerability enables a denial of service resulting in an Internet Explorer 7 crash when a long value is provided to the CCRP_BDc.SelectedFolder property. The conn...

sazcart-rfi.txt

---Hitamputih crew--- Bug Found By : IbnuSina vendor : http://sazcart.com/site Risk : High Greetz : Solpot,permenhack,barbarosa,cah|gemblunkz,fungmen,setiawan,irvian,meteoroid and all member hitamputih crew community bug found on admin/controls/cart.php include$saz'settings''shippingfolder'...

Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability

Overview Web browsers running the Apple QuickTime plugin may allow remote web sites to reference content on the local filesystem. This may allow an attacker to execute script within the security context of the local machine. Description Web browser plugins that allow remote web sites to reference...

sazcart v1.5 (cart.php) Remote File include

---Hitamputih crew--- Bug Found By : IbnuSina vendor : http://sazcart.com/site Risk : High Greetz : Solpot,permenhack,barbarosa,cah|gemblunkz,fungmen,setiawan,irvian,meteoroid and all member hitamputih crew community bug found on admin/controls/cart.php include$saz'settings''shippingfolder'...