NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability

NSFOCUS Security Advisory SA2006-07 ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability Release Date: 2006-07-27 CVE ID: CVE-2006-3840 http://www.nsfocus.com/english/homepage/research/0607.htm Affected systems & software =================== RealSecure Network Sensor...

CVE-2006-3840

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU 24.39/1.78/epj/x.x.x.1780, including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service infinite loop via a crafted...

CVE-2006-3840

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU 24.39/1.78/epj/x.x.x.1780, including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service infinite loop via a crafted...

ms06-035-coco.txt

include include include / Microsoft SRV.SYS Mailslot Ring0 Memory CorruptionMS06-035 Exploit by cocoruderfrankruderathotmail.com,2006.7.19 page:http://ruder.cdut.net / unsigned char SmbNeg = "\x00\x00\x00\x2f\xff\x53\x4d\x42\x72\x00"...

Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)

Microsoft Windows - Mailslot Ring0 Memory Corruption MS06-035 include include include / Microsoft SRV.SYS Mailslot Ring0 Memory CorruptionMS06-035 Exploit by cocoruderfrankruderathotmail.com,2006.7.19 page:http://ruder.cdut.net / unsigned char SmbNeg = "\x00\x00\x00\x2f\xff\x53\x4d\x42\x72\x00"...

MS Windows Mailslot Ring0 Memory Corruption Exploit (MS06-035)

Exploit for unknown platform in category dos / poc ============================================================== MS Windows Mailslot Ring0 Memory Corruption Exploit MS06-035 ============================================================== include include include / Microsoft SRV.SYS Mailslot Ring0...

Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)

include include include / Microsoft SRV.SYS Mailslot Ring0 Memory CorruptionMS06-035 Exploit by cocoruderfrankruderathotmail.com,2006.7.19 page:http://ruder.cdut.net / unsigned char SmbNeg = "\x00\x00\x00\x2f\xff\x53\x4d\x42\x72\x00"...

Heap overflow

Heap-based buffer overflow in the Server Service SRV.SYS driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size...

CVE-2006-1314

Heap-based buffer overflow in the Server Service SRV.SYS driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size...

CVE-2006-1314

CVE-2006-1314 is a heap-based buffer overflow in the Windows Server Service (SRV.SYS) that affects Windows 2000 SP4, XP SP1/SP2, and Server 2003 (up to SP1). The vulnerability allows remote code execution via crafted first-class Mailslot messages, triggering memory corruption and bypassing size r...

TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability

TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability http://www.tippingpoint.com/security/advisories/TSRT-06-02.html July 11, 2006 -- CVE ID: CVE-2006-1314 -- Affected Vendor: Microsoft -- Affected Products: Windows 2000 Windows XP SP1 Windows XP SP2 Windows 2003 Windows...

Microsoft Server Service Mailslot vulnerable to heap overflow

Overview A buffer overflow vulnerability in the Microsoft mailslot server service may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Mailslot A mailslot is a temporary mechanism that can facilitate data transfer between hosts. Mailslots messages are limited ...