CVE-2007-1047

Distributed Checksum Clearinghouse (DCC) before 1.3.51 is affected by an unspecified vulnerability that enables remote attackers to delete or add hosts in /var/dcc/maps. The CVE entry notes a network-accessible impact with partial confidentiality/integrity/availability implications (CVSS2 base sc...

security flaw

The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the keylength variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name befo...

CVE-2007-0915

Distributed SLS daemon SLSd on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges via a crafted RPC request...

Cross site request forgery (csrf)

Distributed SLS daemon SLSd on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges via a crafted RPC request...

Interview:Void

Team Void What is the world's attitude towards hackers from Russia? They are respected. Indeed, our compatriots are members of many well-known clans - w00w00, ADM and other highly revered teams. It should also be noted that the level of our computer professionals is quite worthy - you will meet...

CVE-2006-5266

Multiple buffer overflows in Microsoft Dynamics GP formerly Great Plains 9.0 and earlier allow remote attackers to execute arbitrary code via 1 a crafted Distributed Process Manager DPM message to the a DPM component, or a 2 long string or 3 long IP address in a Distributed Process Server DPS...

CVE-2006-6443

Buffer overflow in the Novell Distributed Print Services NDPS Print Provider for Windows component NDPPNT.DLL in Novell Client 4.91 has unknown impact and remote attack vectors...

Distributed reflection: a new generation of DDoS attacks-vulnerability warning-the black bar safety net

Original:Steve Gibson www.grc.com Translation:useless Jun www.isfocus.com Translator's note: A few days ago received a friend sent this article,but quite interesting,so the translation came out. Because time is relatively tight,I only translated the principles and the defense portion,the front...

Examples to explain: a network of deception methods, and offensive and defensive!- Vulnerability warning-the black bar safety net

Lure the enemy in depth is a very practical tactics, ancient and modern, many military, politicians, entrepreneurs all of the tactics talked about, in the network attack and Defense is no exception, the system administrator will also use such tactics. Since each network system has a security...

CVE-2006-3700

Multiple unspecified vulnerabilities in Oracle Database 9.2.0.6 and 10.1.0.4 have unknown impact and attack vectors, aka Oracle Vuln 1 DB04 for Web Distributed Authoring and Versioning DAV and 2 DB23 for XMLDB...

CVE-2006-3700

Multiple unspecified vulnerabilities in Oracle Database 9.2.0.6 and 10.1.0.4 have unknown impact and attack vectors, aka Oracle Vuln 1 DB04 for Web Distributed Authoring and Versioning DAV and 2 DB23 for XMLDB...

Multiple tor distributed anonymizing service security vulnerabilities

Log entries spoofing, integer overflows, DoS...

CVE-2006-2327

Multiple integer overflows in the DPRPC library DPRPCNLM.NLM NDPS/iPrint module in Novell Distributed Print Services in Novell NetWare 6.5 SP3, SP4, and SP5 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which...

Microsoft Distributed Transaction Coordinator DoS

Two different buffer overflows causing service to crash...

CVE-2006-0034

Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or...

CVE-2006-1184

Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service crash via a BuildContextW request with a large 1 UuidString or 2 GuidIn of a certain length, which causes an out-of-range memory...

[EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow

Microsoft Distributed Transaction Coordinator Heap Overflow http://www.eeye.com/html/research/advisories/AD20060509a.html Release Date: May 9, 2006 Date Reported: October 11, 2005 Patch Development Time In Days: 210 Severity: High Remote Code Execution Systems Affected: Windows NT 4.0 Windows 200...

MS06-018: Vulnerability in Microsoft Distributed Transaction Coordinator Could Allow DoS (913580) (uncredentialed check)

The remote version of Windows contains a version of MSDTC Microsoft Data Transaction Coordinator service that is affected by several remote code execution and denial of service vulnerabilities. An attacker may exploit these flaws to obtain complete control of the remote host 2000, NT4 or to crash...

[EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service

Microsoft Distributed Transaction Coordinator Denial of Service http://www.eeye.com/html/research/advisories/AD20060509b.html Release Date: May 9, 2006 Date Reported: October 11, 2005 Patch Development Time In Days: 210 Severity: Low Denial of Service Systems Affected: Windows NT 4.0 Windows 2000...

CVE-2006-1184

Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service crash via a BuildContextW request with a large 1 UuidString or 2 GuidIn of a certain length, which causes an out-of-range memory...