iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTServer Multiple Untrusted Loop Bounds Vulnerabilities

iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND TIBCO SmartSockets is a message passing framework used to transport messages over disparate channels. The RTserver is the server component of the framework. More information can b...

iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTserver Multiple Untrusted Pointer Offset Vulnerabilities

iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND TIBCO SmartSockets is a message passing framework used to transport messages over disparate channels. The RTserver is the server component of the framework. More information can b...

iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTServer Multiple Untrusted Pointer Vulnerabilities

iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND TIBCO SmartSockets is a message passing framework used to transport messages over disparate channels. The RTserver is the server component of the framework. More information can b...

netOctopus Agent nantsys.sys MSR Write Local Privilege Escalation

netOctopus Agent, an asset management agent, is installed on the remote host. The installed version of netOctopus Agent includes a driver, named 'nantsys.sys', that exposes a device interface writable by all local users, allowing them to read and write arbitrary CPU Model Specific Registers MSRs....

iDefense Security Advisory 01.09.08: Novell NetWare Client nicm.sys Local Privilege Escalation Vulnerability

iDefense Security Advisory 01.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 09, 2008 I. BACKGROUND The Novell Client software provides a workstation with access to Novell NetWare networks as well as Novell Open Enterprise Server OES services. Novell Clients can access the full...

Microsoft DirectX SAMI File Parsing Remote Stack Overflow Exploit

No description provided by source. !/usr/bin/python Bug discovered by Jun Mao of VeriSign iDefense http://www.securityfocus.com/bid/26789 CVE-2007-3901 Coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Tested on: Windows 2000 SP4 English, DirectX 7.0 4.07.00.0700...

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow !/usr/bin/python Bug discovered by Jun Mao of VeriSign iDefense https://www.securityfocus.com/bid/26789 CVE-2007-3901 Coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Tested on: Windows 2000 SP4 English...

iDefense Security Advisory 01.07.08: Motorola netOctopus Agent MSR Write Privilege Escalation Vulnerability

iDefense Security Advisory 01.07.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 07, 2008 I. BACKGROUND Motorola netOctopus is an asset management agent. It is used to deploy software, monitor performance, and configure client machines from a central administrative console. More...

Microsoft DirectX SAMI File Parsing Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= Microsoft DirectX SAMI File Parsing Remote Stack Overflow Exploit ================================================================= !/usr/bin/python Bug discovered by Jun Mao...

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow

!/usr/bin/python Bug discovered by Jun Mao of VeriSign iDefense https://www.securityfocus.com/bid/26789 CVE-2007-3901 Coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Tested on: Windows 2000 SP4 English, DirectX 7.0 4.07.00.0700...

iDefense Security Advisory 12.24.07: Novell ZENworks Endpoint Security Management Local Privilege Escalation Vulnerability

iDefense Security Advisory 12.24.07 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 24, 2007 I. BACKGROUND Novell ZENworks Endpoint Security Management ESM Security Client provides centrally managed, policy based firewall protection for clients. It is designed to be installed on all...

installshield-overflow.txt

The InstallShield Update Service Web Agent version 5.1.100.47363 suffers from an exploitable buffer overflow in the ProductCode parameter of the DownloadAndExecute function. This object is marked safe for scripting. Note that this issue appears to different from...

applesmb-overflow.txt

/ Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179 http://seclists.org/fulldisclosure/2007/Dec/0445.html...

iDefense Security Advisory 12.17.07: Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Vulnerability

iDefense Security Advisory 12.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 17, 2007 I. BACKGROUND The mountsmbfs utility is used to mount a remote SMB share locally. It is installed set-uid root, so as to allow unprivileged users to mount shares, and is present in a default...

Microsoft DirectX SAMI parsing buffer overflow

Overview Microsoft DirectX is vulnerable to a stack-based buffer overflow. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft DirectX is a feature of the Microsoft Windows operating system used for streaming...

iDefense Security Advisory 12.11.07: Microsoft Internet Explorer JavaScript setExpression Heap Corruption Vulnerability

iDefense Security Advisory 12.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 11, 2007 I. BACKGROUND Internet Explorer is a graphical web browser developed by Microsoft Corp. and included as part of Microsoft Windows since 1995. The setExpression method is commonly used to assign...

Oracle XDB component PITRIG_DROPMETADATA buffer overflow

Added: 11/23/2007 CVE: CVE-2007-4517 BID: 26374 OSVDB: 39918 Background The PITRIGDROPMETADATA function is included in the XDB.XDBPITRIGPKG package which is included with Oracle Database. Problem A buffer overflow vulnerability in the PITRIGDROPMETADATA function allows remote, authenticated...

Lotus Notes TagAttributeListCopy buffer overflow

Added: 11/21/2007 CVE: CVE-2007-4222 BID: 26200 OSVDB: 40949 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the TagAttributeListCopy function in nnotes.dll could allow command execution when a user receives a specially crafted e-mail message and forwar...

[Full-disclosure] iDefense Security Advisory 11.14.07: Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability

iDefense Security Advisory 11.14.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 14, 2007 I. BACKGROUND Mach ports are used to provide inter-process communication IPC facilities on Mac OS X. More information can be found on the vendor's site at the following URL...

[Full-disclosure] iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk mbuf Kernel Heap Overflow Vulnerability

iDefense Security Advisory 11.14.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 14, 2007 I. BACKGROUND AppleTalk, a set of networking protocols developed by Apple, was originally implemented on early Mac operating systems. Although it is a legacy protocol, it is still supported on...