561 matches found
Microsoft IIS WebDAV Remote Buffer Overflow (MS03-007; CVE-2003-0109)
The Internet Information Server IIS is a Web server packaged with several versions of the Windows operating system. The server is capable of serving static, as well as dynamic content. Several Microsoft Windows IIS servers support the World Wide Web Distributed Authoring and Versioning WebDAV...
ISS PAM.dll ICQ Parser Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'ISS PAM.dll...
JVN#57040664 ATOK screen lock bypass vulnerability
ATOK from JustSystems Corporation is a software for Japanese Kana-Kanji conversion. ATOK contains an issue with the restriction of launching external applications, which may lead to a screen lock bypass vulnerability. Impact An attacker could execute arbitrary code or program with the privileges ...
SonicWALL Global VPN客户端'RampartSvc'本地特权提升漏洞
Bugraq ID: 35092 CNCAN ID：CNCAN-2009052705 SonicWALL Global VPN Client是一款许移动用户建立到SonicWALL VPN网关安全连接的应用程序。 SonicWALL Global VPN Client安装时设置权限不正确，本地攻击者可以利用漏洞提升特权。 在SonicWALL Global VPN Client安装中，安装文件夹"%ProgramFiles%\SonicWALL\SonicWALL Global VPN...
SonicWALL Global VPN Client Privilege Escalation
SEC Consult Security Advisory ========================================================================== title: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability program: SonicWALL Global VPN Client vulnerable version: Global VPN Client = 4.0.0.835 possibly other versions...
SEC Consult SA-20090525-3 :: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability
SEC Consult Security Advisory 20090525-3 ========================================================================== title: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability program: SonicWALL Global VPN Client vulnerable version: Global VPN Client = 4.0.0.835 possibly other...
Microsoft Windows Vista2008 - Thread Pool ACL Privilege Escalation
Microsoft Windows Vista2008 - Thread Pool ACL Privilege Escalation source: https://www.securityfocus.com/bid/34444/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate th...
Microsoft Windows XPVista20032008 - WMI Service Isolation Privilege Escalation
Microsoft Windows XPVista20032008 - WMI Service Isolation Privilege Escalation source: https://www.securityfocus.com/bid/34442/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would...
Microsoft Windows XP/Vista/2003/2008 - WMI Service Isolation Privilege Escalation
source: https://www.securityfocus.com/bid/34442/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected computers. The issue affects the...
Microsoft Windows WMI Service Isolation Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected computers. The issue affects the following: Windows XP SP2 Windows Server...
Microsoft Windows XP2003 - RPCSS Service Isolation Privilege Escalation
Microsoft Windows XP2003 - RPCSS Service Isolation Privilege Escalation source: https://www.securityfocus.com/bid/34443/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilita...
Microsoft Windows Vista/2008 - Thread Pool ACL Privilege Escalation
source: https://www.securityfocus.com/bid/34444/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected computers. The issue affects the...
Microsoft Windows XP/2003 - RPCSS Service Isolation Privilege Escalation
source: https://www.securityfocus.com/bid/34443/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected computers. The issue affects the...
Oracle MySQL for Microsoft Windows Payload Execution
This module creates and enables a custom UDF user defined function on the target host via the SELECT ... into DUMPFILE method of binary injection. On default Microsoft Windows installations of MySQL = 5.5.9, directory write permissions not enforced, and the MySQL service runs as LocalSystem. NOTE...
MS Windows Token Kidnapping local provide the right solutions-vulnerability warning-the black bar safety net
Today MS updated security Bulletin This vulnerability is due inNetworkService or LocalService the following code running, you can access the same in the NetworkService or LocalService processes that run under that certain processes allow elevation of privileges for theLocalSystem it. For IIS, the...
stunnel < 4.23 Local Privilege Escalation
The remote host is running stunnel, an application for encrypting arbitrary network connections with SSL. The version of stunnel installed on the remote host, when running as a service, allows a local user to gain LocalSystem privileges due to an unspecified error. C Tenable Network Security, Inc...
SNMPc < 7.1.1 UDP Packet Handling Buffer Overflow
The remote host is running SNMPc, a network management application for Windows from Castle Rock Computing. The version of SNMPc installed on the remote host reportedly is affected by a stack-based buffer overflow vulnerability. Using a specially crafted SNMP TRAP packet with an overly long...
Immunity Canvas: NWSPOOL_C
Name| nwspoolc ---|--- CVE| CVE-2008-0639 Exploit Pack| CANVAS Description| Novell Netware Client for Windows Notes| CVE Name: CVE-2008-0639 VENDOR: Novell Notes: Use the setthreadtoken module to revert back to LocalSystem once the exploitation is successful Platforms Tested: References:...
BitDefender Update Server HTTP Request Traversal Arbitrary File Access
The version of BitDefender Update Server running on the remote host fails to sanitize request strings of directory traversal sequences, which allows an unauthenticated attacker to read files outside the web server's document directory. Note that the server runs with LocalSystem privileges by...