eXtremail 2.1.1 - Remote Heap Overflow (PoC)

!/usr/bin/perl extremail-v8.pl Copyright c 2007 by eXtremail Connected\n"; sleep16; print"- Sending payload\n"; $buf = "\x00".$NOP x 0x2710-1; sendSOCKET, $buf, 0; sleep$senddelay; $buf = $NOP x 0x2710; while $loop-- print"- Sending payload ".$loop."\n"; sendSOCKET, $buf, 0; sleep$senddelay;...

[CAID 35690, 35691, 35692]: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities

Title: CAID 35690, 35691, 35692: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities CA Vuln ID CAID: 35690, 35691, 35692 CA Advisory Date: 2007-09-26 Reported By: Sean Larsson, iDefense Labs anonymous researcher working with the iDefense VCP Aaron Portnoy of DV Labs...

CVE-2007-4881

The CVE-2007-4881 issue affects the psi-labs.com social networking script (psisns), specifically the profile/myprofile.php component. The vulnerability is an SQL injection that can be triggered via the u parameter, potentially allowing remote attackers to execute arbitrary SQL commands. This corr...

CVE-2007-4734

CVE-2007-4734 involves a buffer overflow in Ots Labs OTSTurntables 1.00. The vulnerability allows user-assisted remote attackers to trigger code execution via a long file path in an M3U file. The initial and connected documents describe the issue but do not provide concrete details about affected...

Memory corruption

vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet Irp in a METHODNEITHER 1 IOCTL 0x8400000F or 2 IOCTL 0x84000013 request, which can be used to overwrite arbitrary memory locations...

CVE-2007-4216

The CVE-2007-4216 issue affects ZoneAlarm’s vsdatant.sys (Zone Labs Zone Alarm)

CVE-2005-2932: Undefined Security Weakness

Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls...

CVE-2007-4216: Improper Input Validation

vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet Irp in a METHODNEITHER 1 IOCTL 0x8400000F or 2 IOCTL 0x84000013 request, which can be used to overwrite arbitrary memory locations...

ZoneAlarm产品多个本地权限提升漏洞

BUGTRAQ ID: 25365 CVECAN ID: CVE-2007-4216,CVE-2005-2932 ZoneAlarm是一款个人电脑防火墙，能保护个人数据和隐私安全。 ZoneAlarm的实现和安装上存在多个安全漏洞，本地攻击者可能利用此漏洞提升自己的权限。 ZoneAlarm产品vsdatant.sys设备驱动的IOCTL处理代码没有验证传送给IOCTL 0x8400000F和IOCTL...

iDefense Security Advisory 08.20.07: Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability

Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability iDefense Security Advisory 08.20.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 20, 2007 I. BACKGROUND Zone Alarm products provide security solutions such as anti-virus, firewall, spy-ware, and ad-ware...

iDefense Security Advisory 08.20.07: Check Point Zone Labs VSDATANT Multiple IOCTL Privilege Escalation Vulnerabilities

Check Point Zone Labs VSDATANT Multiple IOCTL Privilege Escalation Vulnerabilities iDefense Security Advisory 08.20.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 20, 2007 I. BACKGROUND Zone Alarm products provide security solutions such as anti-virus, firewall, spy-ware, and ad-wa...

[Reversemode Advisory] CheckPoint ZoneLabs Vsdatant.sys multiple local privilege escalation vulnerabilities

CHECK POINT ZONE LABS PRODUCTS MULTIPLE LOCAL PRIVILEGE ESCALATION VULNERABILITIES Ruben Santamarta rubenatreversemodedotcom 08.20.2007 Affected Products: ZoneAlarm 7.0.362 Vsdatant.sys is exposed via “.vsdatant”. The permissive ACL allows everyone to invoke privileged IOCTLs implemented in the...

[Full-disclosure] ASA-2007-019: Remote crash vulnerability in Skinny channel driver

Asterisk Project Security Advisory - ASA-2007-019 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Remote crash vulnerability in Skinny channel | | | driver |...

CAL-20070730-1.txt

CAL-20070730-1 BlueSkyCat ActiveX Remote Heap Overflow vulnerability BACKGROUND: =========== BlueSkychat is a professional voice and video chat software widely used by large chat websites in china. DESCRIPTION: ============ Code Audit Labs Code Audit for BlueSkyCat ActiveX Control and discovered ...

linkedin-overflow.txt

In God We Trust, VDA Labs, LLC function repeatn,c retval=""; for i=0;i...

LinkedIn Toolbar 3.0.2.1098 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== LinkedIn Toolbar 3.0.2.1098 Remote Buffer Overflow Exploit ========================================================== In God We Trust, VDA Labs, LLC function repeatn,c retval=""; fo...

LinkedIn Toolbar 3.0.2.1098 - Remote Buffer Overflow

LinkedIn Toolbar 3.0.2.1098 - Remote Buffer Overflow In God We Trust, VDA Labs, LLC function repeatn,c retval=""; for i=0;i milw0rm.com 2007-07-24...

LinkedIn Toolbar 3.0.2.1098 - Remote Buffer Overflow

In God We Trust, VDA Labs, LLC function repeatn,c retval=""; for i=0;i milw0rm.com 2007-07-24...

A malicious torrent can cause Opera to execute arbitrary code – Opera Security Advisories

A malicious torrent can cause Opera to execute arbitrary code – Opera Security Advisories OPCOM Team | July 19, 2007 Summary A malicious torrent file can cause Opera to execute arbitrary code. Severity: High Problem description Removing a specially crafted torrent from the download managercan cra...

MPack with virtual hosting and PHP security-vulnerability warning-the black bar safety net

MPack is by a self-proclaimed "Dream Coders Team" of the organization development of the PHP program, which contain a number of the latest exploit code can be used to manipulate the distal end of attacks on Panda Labs at the end of last year when for the first time found that, at the time someone...