2330 matches found
OpenConnect Webconnect MS-DOS device name denial-of-service
Overview OpenConnect WebConnect may stop responding after processing an HTTP request with an MS-DOS device name in it. Description OpenConnect Webconnect provides secured web access and emulation services for backend mainframes and UNIX servers. Versions of Webconnect prior to 6.4.5 and 6.5.1...
CVE-2004-1675
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service application crash via a STORE UNIQUE STOU command with an MS-DOS device name argument such as 1 COM1, 2 LPT1, 3 PRN, or 4 AUX...
CVE-2004-1514
04WebServer 1.42 is affected by a DoS vulnerability triggered by an HTTP request for an MS-DOS device name (e.g., COM2), causing the server to fail to restart properly. The CVE entry notes a partial availability impact. No additional exploit details or fixes are provided in the connected documents.
Microsoft Windows COM/OLE multiple bugs
Privilege escalation during parsing files with COM structure e.g. MS Office, buffer overflow on OLE objects, including MS Exchange MS-TNEF data format...
MS-SQL Monitor Protocol (CVE-2002-0649; CVE-2002-0650)
...
MS-SQL Server Protocol - General Settings (CAN-2000-1209; CVE-2002-1123)
...
CVE-2004-1841
SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request...
CVE-2004-1514
04WebServer 1.42 allows remote attackers to cause a denial of service fail to restart properly via an HTTP request for an MS-DOS device name such as COM2...
CVE-2004-2224
Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service crash via an HTTP GET request that contains MS-DOS device names such as com1...
CVE-2004-2316
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via a GET request containing an MS-DOS device name such as COM1...
MS Internet Explorer Remote Code Execution with Parameters - PoC
Exploit for unknown platform in category remote exploits ================================================================ MS Internet Explorer Remote Code Execution with Parameters - PoC ================================================================ CMDExe - Windows Exploit - Remote code...
MS Windows Kernel ANI File Parsing Crash Vulnerability
Exploit for unknown platform in category dos / poc ====================================================== MS Windows Kernel ANI File Parsing Crash Vulnerability ====================================================== 111111111111111111111111111111 0day.today 2018-04-08...
Samba: Integer overflow
Background Samba is a freely available SMB/CIFS implementation which allows seamless interoperability of file and print services to other SMB/CIFS clients. Description Samba contains a bug when unmarshalling specific MS-RPC requests from clients. Impact A remote attacker may be able to execute...
Hydra: MS SQL
This plugin runs Hydra to find MS SQL passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...
CVE-2004-0552
Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as 1 LPT1, 2 COM1, 3 AUX, 4 CON, or 5 PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed...
MS Windows IIS WebDAV XML Denial of Service Exploit (MS04-030)
Exploit for unknown platform in category dos / poc ============================================================== MS Windows IIS WebDAV XML Denial of Service Exploit MS04-030 ============================================================== !/usr/bin/perl IIS BlowOut POC exploit for MS04-030. Found ...
MS Windows NNTP Service (XPAT) Denial of Service Exploit (MS04-036)
Exploit for unknown platform in category dos / poc =================================================================== MS Windows NNTP Service XPAT Denial of Service Exploit MS04-036 =================================================================== -- IIS NNTP Service XPAT command heap overflow...
[Full-Disclosure] [HV-HIGH] MS Word multiple exceptions, at least one exploitable
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MS Word multiple exceptions, at least one exploitable. Classification: =============== Level: low-MED-high-crit ID: HEXVIEW200410061 Overview: ========= MS Word is a highly overrated and widely used text processor, a part of monstrous collection of...
Samba MS-DOS Path Request Arbitrary File Retrieval
According to its version number, the remote Samba server is affected by a flaw that allows an attacker to access arbitrary files which exist outside of the shares's defined path. An attacker needs a valid account to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...