Linter Bastion Code Execution

In the “sub41149F” authentication process at the address “0x0041150E”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x13 “0x0040C95C”. This vulnerability allows a malicious attacker to execute...

Linter Bastion Code Execution

In the procedure “sub40FBE6” at address “0x0040FC0A”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x1A “0x0040DB0F”. This vulnerability allows a malicious attacker to execute arbitrary code with...

Linter Bastion Code Execution

In the procedure “sub4101B4”, there is no validation of the correctness of the input data at addresses “0x004104D1”, “0x004105AB”, and “0x004105EA”. This may lead to buffer overflows during the processing of RPC calls numbered 0x13 and 0x12 “0x0040C73C”. This vulnerability allows a malicious...

Linter Bastion DoS

In the “sub416B78” procedure, there is no check for the correctness of input data. This may lead to buffer overflows when processing the RPC call with the number 0x10 “0x0040C284”, resulting in corrupted data that is necessary for the proper functioning of the application. This vulnerability allo...

Linter Bastion Arbitrary Service Execution

RPC call of number 0x08 "0x0040AB4E" allows a malicious individual to execute an arbitrary Windows service on a remote computer where linstmgr.exe is running, without having the necessary permissions. As a result, a service with vulnerabilities can be executed by the malicious individual, and tho...

Linter Bastion Database Disruption

The RPC call with number 0x19 "0x0040D8F0" allows a malicious individual to alter the configuration of the kernel startup file of the Linter Bastion database management system, thereby potentially disrupting the normal operation of the database management system...

Linter Bastion Code Execution

The decompression algorithm in the zlib library version 1.1.3, which is part of the Linter Bastion database management system, allows for the use of the inflateEnd function to clean the memory more than once double-free. Exploiting this vulnerability enables attackers to execute arbitrary code by...

Linter Bastion Code Execution

Exploiting vulnerabilities in the libpng library version 1.0.6 allows a malicious individual to execute arbitrary code using an improperly created PNG file...

PT-2013-1288

Name of the Vulnerable Software and Affected Versions Linter Bastion versions affected versions not specified Description The issue concerns the use of an insecure encryption algorithm for user passwords in the Linter Bastion database management system. Password recovery from ciphertext can occur...

PT-2013-1287

Name of the Vulnerable Software and Affected Versions Linter Bastion affected versions not specified Description The issue concerns the encryption of BLOB data in Linter Bastion, where a static sequence of 255 bytes is used as the encryption key. This key is the same for all databases, allowing a...

PT-2013-1285

Name of the Vulnerable Software and Affected Versions Linter Bastion affected versions not specified Description The issue allows an attacker to modify the configuration file of the Linter Bastion database management system kernel by making a specific RPC call, numbered 0x12 0x0040C73C. This can...

PT-2013-1284

Name of the Vulnerable Software and Affected Versions Linter Bastion affected versions not specified Description The issue allows an attacker to modify the configuration file of the Linter Bastion database management system kernel by exploiting the RPC call number 0x19 0x0040D8F0. This can disrup...

PT-2013-1270

Name of the Vulnerable Software and Affected Versions Linter Bastion versions affected versions not specified Description The issue arises from an incorrect assumption in the RPC server linstmgr.exe that only users with administrator rights can connect to the server. This oversight, combined with...

PT-2013-1293

Name of the Vulnerable Software and Affected Versions Linter Bastion affected versions not specified Description The issue occurs when the database management system Linter Bastion processes a malformed SQL query, specifically a low-level SELECT command. This causes one of the system threads to...

PT-2013-1292

Name of the Vulnerable Software and Affected Versions Linter Bastion affected versions not specified Description The issue occurs when the database management system Linter Bastion processes a malformed SQL query, specifically a low-level SELECT command. This causes one of the system threads to...

PT-2013-1290

Name of the Vulnerable Software and Affected Versions Linter Bastion affected versions not specified Description The issue allows a remote or local attacker without prior authentication to execute arbitrary code with system privileges by sending an incorrect request to open a session OPEN with th...