CVE-2004-0713

The remove method in a stateful Enterprise JavaBean EJB in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through SP4, and 6.1 through SP6, does not properly check EJB permissions before unexporting a bean, which allows remote authenticated users to remove EJB objects from...

Re: [Full-Disclosure] THE VULNERABILITY STILL WORKS AFTER TODAY'S PATCH

Well it's not quite as easy as you make it sound I think you only took a look at http-equiv's example I posted to full disclosure and based your post on that. You see this: --snip-- iframe src="c:windowswebtip.htm" style="width:400px;height:200px;"/iframe textarea id="code" style="display:none;"...

linux kerndel floating point exception DoS

Problem with floating point exceptions lead to unstable kernel state...

Sami FTP Server 1.1.3 - Invalid Command Argument Local Denial of Service

source: https://www.securityfocus.com/bid/9657/info Sami FTP Server has been reported prone to multiple remote denial of service vulnerabilities. It has been reported that an attacker who has sufficient credentials to access a vulnerable server, may cause the pmsystem.exe executable to raise a...

Sami FTP Server 1.1.3 - Invalid Command Argument Local Denial of Service

Sami FTP Server 1.1.3 - Invalid Command Argument Local Denial of Service source: https://www.securityfocus.com/bid/9657/info Sami FTP Server has been reported prone to multiple remote denial of service vulnerabilities. It has been reported that an attacker who has sufficient credentials to access...

Sami FTP Server 1.1.3 - Library Crafted GET Remote Denial of Service

source: https://www.securityfocus.com/bid/9657/info Sami FTP Server has been reported prone to multiple remote denial of service vulnerabilities. It has been reported that an attacker who has sufficient credentials to access a vulnerable server, may cause the pmsystem.exe executable to raise a...

IBM cloudscape SQL Database (DB2J) vulnerable to remote command injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Illegalaccess.org security advisory ii/02-2004 www.illegalaccess.org IBM cloudscape SQL Database DB2J vulnerable to remote command injection Brief ===== Product : IBM cloudscape database Version : 5.1 Vendor : IBM Impact : Code injection, DoS,...

The Bat! 2.01 memory corruption

Dear bugtraq, AGK agk at sandy.ru discovered The Bat! 2.01 to throw exception on few messages. It looks like The Bat! 2.01 in standard configuration with build-in PGP support has a bug with processing PGP signed messages protocol="application/pgp-signature" with multiple recursively included part...

Microsoft Windows Messenger Service (French) - Remote (MS03-043)

// / Crpt MS03-043 - Messenger exploit by MrNice Crpt / / --------------------------------------------------------------- / / / / This Sploit use the unhandledexceptionfilter to redirect / / the execution. When overflow occur we have : / / / / mov eax,esi+8 / / mov ecx,esi+Ch / / mov dword ptr...

Microsoft Windows Messenger Service (French) - Remote (MS03-043)

Microsoft Windows Messenger Service French - Remote MS03-043 // / Crpt MS03-043 - Messenger exploit by MrNice Crpt / / --------------------------------------------------------------- / / / / This Sploit use the unhandledexceptionfilter to redirect / / the execution. When overflow occur we have : ...

MS Windows Messenger Service Remote Exploit FR (MS03-043)

Exploit for unknown platform in category remote exploits ========================================================= MS Windows Messenger Service Remote Exploit FR MS03-043 ========================================================= // / Crpt MS03-043 - Messenger exploit by MrNice Crpt / /...

LeapWare LeapFTP 2.7.x - Remote Buffer Overflow

/ ,---------------------------------------------------- ; LeapFTP remote buffer overflow exploit ; by drG4njubas \ DWC Group ---------------------------------------------------- ,---------------------------------------------------- ;This exploit works against LeapFTP 2.7.3.600 ;running on windows...

LeapWare LeapFTP 2.7.x - Remote Buffer Overflow

LeapWare LeapFTP 2.7.x - Remote Buffer Overflow / ,---------------------------------------------------- ; LeapFTP remote buffer overflow exploit ; by drG4njubas \ DWC Group ---------------------------------------------------- ,---------------------------------------------------- ;This exploit...

LeapFTP 2.7.x Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================ LeapFTP 2.7.x Remote Buffer Overflow Exploit ============================================ / ,---------------------------------------------------- ; LeapFTP remote buffer overflow exploit ; by...

BaSoMail 1.24 - POP3 Server Denial of Service

source: https://www.securityfocus.com/bid/7724/info BaSoMail POP3 server has been reported prone to a remote denial of service vulnerability. It has been reported that a remote authenticated attacker, may supply negative value integers to several POP3 commands successively. If the attacker then...

Eudora 5.2.1 buffer overflow DoS

Building on my Eudora attachment spoof http://www.securityfocus.com/archive/1/322286 I notice that sending a filename with many dots crashes Eudora, e.g. From: me To: you Attachment ConvertedCR: "B.A.A.A ... .A.A.A" with 122 repetitions of ".A" make it crash, writing an Exception.log file. Fewer...

Phantom of the Opera (GM#003-OP)

GreyMagic Security Advisory GM003-OP ===================================== By GreyMagic Software, Israel. 04 Feb 2003. Available in HTML format at http://security.greymagic.com/adv/gm003-op/. Topic: Phantom of the Opera. Discovery date: 29 Jan 2003. Affected applications: ======================...

ColdFusion Heap Overflow -continued

Hi all, I am attempting to write exploit code for the coldfusion heap overflow still. On advice from various on the secfocus list i have installed softice and located the exception handler in question. The handler code starts at 0x77f82b95 The code I am trying to manipulate is at 0x77f8e43b Mov...

Multiple bugs in SolarWinds TFTP

Directory traversal, invalid exception handling...

MSIEv6 % encoding - Konqueror 3.0.3 also vulnerable

Hello, Test page for Konqueror is at: http://pp.siedziba.pl/2f/ I have also tested it with Mozilla 1.0 Gecko/20020829 and Galeon 1.2.5 Gecko/20020606 and found not vulnerable - the script throws "Permission denied to get property HTMLDocument.body" exception. -- Piotr Pawow mailto:[email protected]...