Windows RPC DCOM interface buffer overflow

Added: 04/04/2006 CVE: CVE-2003-0352 BID: 8205 OSVDB: 2100 Background The Distributed Component Object Model is a technology in Microsoft Windows operating systems which allows software components to communicate. Remote Procedure Call RPC is a protocol used to request a service from a program on...

Windows RPC DCOM interface buffer overflow

Added: 04/04/2006 CVE: CVE-2003-0352 BID: 8205 OSVDB: 2100 Background The Distributed Component Object Model is a technology in Microsoft Windows operating systems which allows software components to communicate. Remote Procedure Call RPC is a protocol used to request a service from a program on...

Windows RPC DCOM interface buffer overflow

Added: 04/04/2006 CVE: CVE-2003-0352 BID: 8205 OSVDB: 2100 Background The Distributed Component Object Model is a technology in Microsoft Windows operating systems which allows software components to communicate. Remote Procedure Call RPC is a protocol used to request a service from a program on...

MS04-031 Microsoft NetDDE Service Overflow

This module exploits a stack buffer overflow in the NetDDE service, which is the precursor to the DCOM interface. This exploit effects only operating systems released prior to Windows XP SP1 2000 SP4, XP SP0. Despite Microsoft's claim that this vulnerability can be exploited without authenticatio...

VERITAS Storage Exec DCOM servers contain multiple buffer overflows

Overview VERITAS Storage Exec contains several buffer overflows, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description VERITAS Storage Exec is software package that performs storage management. Multiple DCOM server components provided by Storage Exec...

CVE-2005-2996

Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls...

CVE-2005-2996

The connected advisory CPAI-2005-297 describes a buffer overflow in Veritas Storage Exec and StorageCentral DCOM Server components. The flaw is caused by insufficient validation of user-supplied data, allowing remote code execution in the security context of the logged-on user when a target user ...

CVE-2005-2996

Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls...

CVE-2002-2077

The vulnerability CVE-2002-2077 affects the DCOM client on Windows 2000 prior to SP3. The issue arises because memory is not properly cleared before sending an "alter context" request, which may allow remote attackers to obtain sensitive information by sniffing the session. Connected Red Hat/CVE ...

CVE-2002-2077

The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, which may allow remote attackers to obtain sensitive information by sniffing the session...

MS Windows Netman Service Local Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================= MS Windows Netman Service Local Denial of Service Exploit ========================================================= / Windows Netman Service Local DOS Vulnerability. By bkbll...

Microsoft Windows - Netman Service Local Denial of Service

/ Windows Netman Service Local DOS Vulnerability. By bkbll bkbllcnhonker.net 2005-7-14 2:49?? TESTED ON win2k sp4 ??Netman???svchost.exe -k netsvcs??, ????????,????????: EventSystem,Irmon,RasMan,NtmsSvc,SENS / define WIN32DCOM include include include include include pragma commentlib,"ole32"...

MS Windows Netman Service Local Denial of Service Exploit

No description provided by source. / Windows Netman Service Local DOS Vulnerability. By bkbll bkbllcnhonker.net 2005-7-14 2:49?? TESTED ON win2k sp4 ??Netman???svchost.exe -k netsvcs??, ????????,????????: EventSystem,Irmon,RasMan,NtmsSvc,SENS / define WIN32DCOM include stdio.h include stdlib.h...

CVE-2004-0124

The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."...

CVE-2004-0124

The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."...

CVE-2004-0124

CVE-2004-0124 describes an information disclosure flaw in how Microsoft Windows COM object identifiers are created, enabling an attacker to coax a system into opening network ports via specially crafted RPC messages. This is part of MS04-012 RPC/DCOM updates; the impact is described as enabling a...

[Full-Disclosure] EEYE: Microsoft DCOM RPC Race Condition

Microsoft DCOM RPC Race Condition Release Date: April 13, 2004 Date Reported: September 10, 2003 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Server 4.0 Microsoft Windows NT Server 4.0, Terminal Server Edition...

[Full-Disclosure] EEYE: Microsoft DCOM RPC Memory Leak

Microsoft DCOM RPC Memory Leak Release Date: April 13, 2004 Date Reported: September 10, 2003 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Server 4.0 Microsoft Windows NT Server 4.0, Terminal Server Edition...

MS04-012: Microsoft Hotfix (credentialed check) (828741)

The remote host has multiple bugs in its RPC/DCOM implementation 828741. An attacker could exploit one of these flaws to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12206; scriptversion"1.45"; scriptcvsdate"Date:...

CVE-2003-0813

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service crash or reboot by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a...