PT-2013-5271

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x prior to 1.10.1 Description The issue is related to a memory leak in the dissect dcom ActivationProperties function in the DCOM ISystemActivator dissector. This allows remote attackers to cause a denial of service by...

PT-2013-5270

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x prior to 1.10.1 Description The issue is related to a double free vulnerability in the dissect dcom ActivationProperties function in the DCOM ISystemActivator dissector. This vulnerability allows remote attackers to...

PT-2013-5272

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.0 Description The issue is related to the DCOM ISystemActivator dissector in Wireshark, where certain index values are not properly validated. This allows remote attackers to cause a denial of service,...

PT-2013-5274

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.0 Description The issue arises from the DCOM ISystemActivator dissector in Wireshark, which fails to properly determine if there are remaining packet data to process. This allows remote attackers to cause...

Microsoft RPC DCOM Interface - Remote Overflow (MS03-026) (Metasploit)

$Id: ms03026dcom.rb 11545 2011-01-11 17:56:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft NetDDE Service Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Microsoft Windows Schannel Security Package Code Execution (MS07-031; CVE-2007-2218)

The Secure Channel Schannel security package supports multiple public-key-based protocols, such as SSL Secure Sockets Layer versions 2.0 and 3.0, Transport Layer Security TLS 1.0, and Private Communication Technology PCT 1.0. When the Schannel security package is used, DCOM automatically negotiat...

MS Windows (DCOM RPC2) Universal Shellcode

No description provided by source. ; Segment type: Pure code ;seg000 segment byte public 'CODE' use32 ; assume cs:seg000 ; assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing .386 assume cs:seg000 var29C = byte ptr -29Ch var28C = byte ptr -28Ch var25F = byte ptr -25Fh var254 = dword...

Blaster Attacks (CVE-2003-0352)

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster, MSblast, LovSAN, Nachi, and Welchia worms...

Microsoft Windows DCOM RPC Interface Buffer Overflow (MS03-026; CVE-2003-0352; CVE-2003-0715)

Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code. This is done via a malformed DCERPC DCOM object activation request packet with modified length fields...

Unauthenticated DCOM SystemActivation/RemoteActivation traffic (CVE-2003-0352; CVE-2003-0605; CVE-2003-0715)

There are several known and widely exploited vulnerabilities through the use of DCOM over MS-RPC. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

MS04-012: Cumulative Update for Microsoft RPC/DCOM (828741) (uncredentialed check)

The remote host has multiple bugs in its RPC/DCOM implementation 828741. An attacker may exploit one of these flaws to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21655; scriptversion"1.25"; scriptcvsdate"Date: 2018/11/...

Security Best Practice: Protect Yourself from DCOM vulnerabilities

The Distributed Component Object Model DCOM is a protocol that enables software components to communicate directly over a network. Previously called "Network OLE," DCOM is designed for use across multiple network transports, including Internet protocols such as HTTP.There are several known and...

Windows RPC DCOM interface buffer overflow

Added: 04/04/2006 CVE: CVE-2003-0352 BID: 8205 OSVDB: 2100 Background The Distributed Component Object Model is a technology in Microsoft Windows operating systems which allows software components to communicate. Remote Procedure Call RPC is a protocol used to request a service from a program on...

Windows RPC DCOM interface buffer overflow

Added: 04/04/2006 CVE: CVE-2003-0352 BID: 8205 OSVDB: 2100 Background The Distributed Component Object Model is a technology in Microsoft Windows operating systems which allows software components to communicate. Remote Procedure Call RPC is a protocol used to request a service from a program on...

Windows RPC DCOM interface buffer overflow

Added: 04/04/2006 CVE: CVE-2003-0352 BID: 8205 OSVDB: 2100 Background The Distributed Component Object Model is a technology in Microsoft Windows operating systems which allows software components to communicate. Remote Procedure Call RPC is a protocol used to request a service from a program on...

Windows RPC DCOM interface buffer overflow

Added: 04/04/2006 CVE: CVE-2003-0352 BID: 8205 OSVDB: 2100 Background The Distributed Component Object Model is a technology in Microsoft Windows operating systems which allows software components to communicate. Remote Procedure Call RPC is a protocol used to request a service from a program on...

VERITAS Storage Exec DCOM servers contain multiple buffer overflows

Overview VERITAS Storage Exec contains several buffer overflows, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description VERITAS Storage Exec is software package that performs storage management. Multiple DCOM server components provided by Storage Exec...

CVE-2005-2996

Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls...

CVE-2005-2996

The connected advisory CPAI-2005-297 describes a buffer overflow in Veritas Storage Exec and StorageCentral DCOM Server components. The flaw is caused by insufficient validation of user-supplied data, allowing remote code execution in the security context of the logged-on user when a target user ...