MS Internet Explorer .ANI Remote Stack Overflow (0.2)

Exploit for unknown platform in category remote exploits ===================================================== MS Internet Explorer .ANI Remote Stack Overflow 0.2 ===================================================== Credit for the vulnerability: Yuji Ukai for eEye Digital Security Patch:...

[Full-Disclosure] EEYE: Windows VDM #UD Local Privilege Escalation

Windows VDM UD Local Privilege Escalation Release Date: October 12, 2004 Date Reported: March 18, 2004 Severity: Medium Local Privilege Escalation to Kernel Systems Affected: Windows NT 4.0 Windows 2000 Windows XP SP1 and earlier Windows Server 2003 Description: eEye Digital Security has discover...

EEYE: RealPlayer embd3260.dll Error Response Heap Overflow

RealPlayer embd3260.dll Error Response Heap Overflow Release Date: June 10, 2004 Date Reported: May 14, 2004 Severity: High Remote Code Execution Vendor: RealNetworks Systems Affected: RealOne Player RealOne Player v2 RealPlayer 10 RealPlayer 8 RealPlayer Enterprise Description: eEye Digital...

Symantec Multiple Firewall DNS Response Denial of Service

No description provided by source. / HOD-symantec-firewall-DoS-expl.c: Symantec Multiple Firewall DNS Response Denial-of-Service Exploit version 0.1 coded by .:: houseofdabus ::. Bug discoveried by eEye: http://www.eeye.com/html/Research/Advisories/AD20040512B.html...

Symantec Multiple Firewall DNS Response Denial of Service

Exploit for cgi platform in category dos / poc ========================================================= Symantec Multiple Firewall DNS Response Denial of Service ========================================================= / HOD-symantec-firewall-DoS-expl.c: Symantec Multiple Firewall DNS Response...

Symantec Multiple Firewall - DNS Response Denial of Service

/ HOD-symantec-firewall-DoS-expl.c: Symantec Multiple Firewall DNS Response Denial-of-Service Exploit version 0.1 coded by .:: houseofdabus ::. Bug discoveried by eEye: http://www.eeye.com/html/Research/Advisories/AD20040512B.html ------------------------------------------------------------------...

[Full-Disclosure] EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service

Symantec Multiple Firewall DNS Response Denial-of-Service Release Date: May 12, 2004 Date Reported: April 19, 2004 Severity: High Remote Denial of Service Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2002 Symantec Norton Internet Security 2003 Symantec Norton Internet...

[Full-Disclosure] EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow

Apple QuickTime QuickTime.qts Heap Overflow Release Date: May 02, 2004 Date Reported: February 18, 2004 Severity: High Code Execution Vendor: Apple Systems Affected: Apple QuickTime 6.5 Apple iTunes 4.2.0.72 Description: The Apple QuickTime media player is used for playing, interacting with or...

RE: [Full-Disclosure] EEYE: Symantec Multiple Firewall TCP Options Denial of Service

On 04/23/2004: eEye Digital Security posted: eE"Derek Soeder" [email protected] Sent by: [email protected] 04/23/2004 01:36 PM Symantec Multiple Firewall TCP Options Denial of Service Release Date: April 23, 2004 Date Reported: March 9th, 2004 Severity: High Remote Denial of...

[Full-Disclosure] EEYE: Microsoft DCOM RPC Memory Leak

Microsoft DCOM RPC Memory Leak Release Date: April 13, 2004 Date Reported: September 10, 2003 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Server 4.0 Microsoft Windows NT Server 4.0, Terminal Server Edition...

[Full-Disclosure] EEYE: Windows VDM TIB Local Privilege Escalation

Windows VDM TIB Local Privilege Escalation Release Date: April 13, 2004 Date Reported: February 9, 2004 Severity: Medium Local Privilege Escalation to Kernel Vendor: Microsoft Systems Affected: Windows NT 4.0 Windows 2000 Description: eEye Digital Security has discovered a second local privilege...

[Full-Disclosure] EEYE: Windows Expand-Down Data Segment Local Privilege Escalation

Windows Expand-Down Data Segment Local Privilege Escalation Release Date: April 13, 2004 Date Reported: November 21, 2003 Severity: Medium Local Privilege Escalation to Kernel Vendor: Microsoft Systems Affected: Windows NT 4.0 Windows 2000 Description: eEye Digital Security has discovered a...

EEYE: Windows MIDI Decoder (QUARTZ.DLL) Heap Corruption

Windows MIDI Decoder QUARTZ.DLL Heap Corruption Release Date: July 23, 2003 Severity: High Remote Code Execution Systems Affected: Windows 98 Windows 98 SE Windows Millennium Edition Windows NT 4.0 Windows NT 4.0, Terminal Server Edition Windows 2000 Windows XP Windows Server 2003 Description: A...

Critical: Red Hat Security Advisory: glibc security update

Updated glibc packages are available to fix an integer overflow in the XDR decoder. The glibc package contains standard libraries which are used by multiple programs on the system. Sun RPC is a remote procedure call framework which allows clients to invoke procedures in a server process over a...

EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities

Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities Release Date: November 12, 2002 Severity: High Remote SYSTEM level code execution Systems Affected: Macromedia Coldfusion 6.0 and prior IIS ISAPI Macromedia JRun 4.0 and prior IIS ISAPI Description: Macromedia JRun and...

Windows 2000 IIS 5.0 Remote buffer overflow vulnerability (Remote SYSTEM Level Access)

Windows 2000 IIS 5.0 Remote buffer overflow vulnerability Remote SYSTEM Level Access Release Date: May 01, 2001 Severity: High Remote SYSTEM level code execution Systems Affected: Microsoft Windows 2000 Internet Information Services 5.0 Microsoft Windows 2000 Internet Information Services 5.0 +...

Windows 2000 .printer remote overflow proof of concept exploit

Windows 2000 IIS 5.0 Remote buffer overflow vulnerability Remote SYSTEM Level Access Release Date: May 01, 2001 Severity: High Remote SYSTEM level code execution Systems Affected: Microsoft Windows 2000 Internet Information Services 5.0 Microsoft Windows 2000 Internet Information Services 5.0 +...

Mac Volumes & Junctions

I recently encountered a problem where, if you mount a partition to a path rather than a drive letter and then create a Macintosh volume for it, the permissions set for that volume will be ignored by Mac clients. This is what I did and you can too to reproduce the problem: 1. Create a generic use...

DoS in FirstClass Internet Services 5.770

We got a bizarre malformed mail from some dot com that hasn't learned about BCC yet with a 1.4 meg To: Header. The mail was handled fine by Software.com's Post.Office, but when Post.Office tried to pass the mail to our FirstClass server, the First Class Internet Services process would hang. I wro...

wingate.3.0.txt

Date: Mon, 5 Apr 1999 17:52:51 -0700 From: Marc To: [email protected] Subject: Multiple WinGate VulnerabilitiesTad late At first we were just going to post this advisory to our website but after the subject came up on the NTSEC list and we got a few emails telling us to post it to...