CVE-2003-1443

Kaspersky Antivirus (KAV) 4.0.9.0 is affected: it fails to detect viruses in files whose names use MS-DOS device names, allowing local bypass of protection. The issue is demonstrated with aux.vbs and aux.com. The available references confirm the vulnerability exists but do not provide a publicly ...

CVE-2003-1443

Kaspersky Antivirus KAV 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com...

openSUSE 10 Security Update : samba (samba-3350)

Specially crafted MS-RPC packets could overwrite heap memory and therfore could potentially be exploited to execute code CVE-2007-2446. Authenticated users could leverage specially crafted MS-RPC packets to pass arguments unfiltered to /bin/sh CVE-2007-2447. A bug in the local SID/Name translatio...

openSUSE 10 Security Update : samba (samba-3349)

Specially crafted MS-RPC packets could overwrite heap memory and therfore could potentially be exploited to execute code CVE-2007-2446. Authenticated users could leverage specially crafted MS-RPC packets to pass arguments unfiltered to /bin/sh CVE-2007-2447. %NASLMINLEVEL 70300 C Tenable Network...

fsfdt-overflow.txt

$ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000 Microsoft Corp. E:\draft\fsd1110\windows ------------------------------------------- !/usr/bin/perl FSFDT remote exploit by weakatfraglab.at spawns reverse shell to 10.0.0.100:4321 tested against 'FSFDT Windows FSD Bet...

Microsoft SQL Server - Distributed Management Objects Buffer Overflow

Code Execute + Tested Operating System: Windows XP SP2 KR, Windows 2000 Pro SP4 KR + Tested Software: MSDE 2000 SQLDMO.dll version 2000.80.760.0 + Reference & Thanks : code by rgod http://www.milw0rm.com/exploits/4379 code by Trirat Puttaraksa http://www.milw0rm.com/exploits/2426 + Author: 96sysi...

Non Compliant MS-RPC

...

Unauthenticated DCOM SystemActivation/RemoteActivation traffic (CVE-2003-0352; CVE-2003-0605; CVE-2003-0715)

There are several known and widely exploited vulnerabilities through the use of DCOM over MS-RPC. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

SQL Injection in Cisco CallManager

SUMMARY ======= A SQL injection vulnerability exists in the Log On page of the web interface for Cisco CallManager AKA Unified Communications Manager. An unauthenticated attacker who is able to access the Log On page could exploit this vulnerability to run arbitrary SQL commands as the logged in...

cisco-sql.txt

SUMMARY ======= A SQL injection vulnerability exists in the Log On page of the web interface for Cisco CallManager AKA Unified Communications Manager. An unauthenticated attacker who is able to access the Log On page could exploit this vulnerability to run arbitrary SQL commands as the logged in...

MS Windows (GDI32.DLL) Denial of Service Exploit (MS07-046)

No description provided by source. / MS07-046GDI32.dll Integer overflow DOS Proof Of Concept Code by Hong Gil-Dong & Chun Woo-Chi Yang yeon?1542, Korea "I shall keep clenching my left fist unitl i see the real tao". This POC is only for test. If an application read a malformed wmf file like this...

MS Windows (GDI32.DLL) Denial of Service Exploit (MS07-046)

Exploit for unknown platform in category dos / poc =========================================================== MS Windows GDI32.DLL Denial of Service Exploit MS07-046 =========================================================== / MS07-046GDI32.dll Integer overflow DOS Proof Of Concept Code by Hong...

Design/Logic Flaw

Rejected reason: The MS-RPC functionality in smbd in Samba 3 on SUSE Linux before 20070720 does not include "one character in the shell escape handling." NOTE: this issue was originally characterized as a shell metacharacter issue due to an incomplete fix for CVE-2007-2447, which was interpreted ...

CVE-2007-4044

CVE-2007-4044 entry is rejected/not used and does not represent an active vulnerability.

Unfixed XSS vulnerability at www.aliun.com.ar

Security researcher Ms-pro, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.aliun.com.ar, which at the time of submission ranked 411374 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/2007. It is current...

IE 6 / MS Office Outlook Express Address Book Activex DoS

IE 6 / MS Office Outlook Express Address Book Activex DoS Affected Software : MS Internet Explorer 6.x Overview: ----------------- when a browser use MS outlook Express Address book ActiveX , crash the browser immediately. An attacker can exploit this issue to trigger denial-of-service conditions...

MS Windows GDI+ ICO File Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================= MS Windows GDI+ ICO File Remote Denial of Service Exploit ========================================================= highsecu.ico - Microsoft GDI+ Integer division by zero flaw handling .IC...

F-Secure Policy Manager Server fsmsh.dll module DoS

The remote host is running a version a F-Secure Policy Manager Server that is vulnerable to a denial of service. A malicious user can forge a request to query a MS-DOS device name through the 'fsmsh.dll' CGI module, which will prevent legitimate users from accessing the service using the Manager...

F-Secure Policy Manager 7.00 - FSMSH.dll Remote Denial of Service

F-Secure Policy Manager 7.00 - FSMSH.dll Remote Denial of Service source: https://www.securityfocus.com/bid/24233/info F-Secure Policy Manager is prone to a remote denial-of-service vulnerability because the application fails to propelry handle unexpected conditions. Exploiting this issue allows...

FreeBSD : samba -- multiple vulnerabilities (3546a833-03ea-11dc-a51d-0019b95d4f14)

The Samba Team reports : A bug in the local SID/Name translation routines may potentially result in a user being able to issue SMB/CIFS protocol operations as root. When translating SIDs to/from names using Samba local list of user and group accounts, a logic error in the smbd daemon's internal...