3706 matches found
Sendmail <= 8.13.5 Remote Signal Handling Exploit PoC
Exploit for linux platform in category dos / poc ===================================================== Sendmail 1: IP = sys.argv1 ifargc 2: defarch = intsys.argv2 ifargc 3: PORT = intsys.argv3 def ia32o: s='' w=chri % 256 o = o 8 x=chri % 256 o = o 8 y=chri % 256 o =...
Microsoft SMB Driver Local Denial Of Service Vulnerability
Description The Microsoft SMB driver is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to create processes that cannot be killed in affected operating systems, potentially denying service to legitimate users and other software on affected computers. This...
Microsoft SMB Driver - Local Denial of Service
Microsoft SMB Driver - Local Denial of Service // source: https://www.securityfocus.com/bid/18357/info The Microsoft SMB driver is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to create processes that cannot be killed in affected operating systems,...
Internet Explorer Javaprxy.dll heap overflow
Added: 06/05/2006 CVE: CVE-2005-2087 BID: 14087 OSVDB: 17680 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. One such object, the JView Profiler Javaprxy.dll, is a debugger interface for Microsoft...
Internet Explorer IFRAME buffer overflow
Added: 05/03/2006 CVE: CVE-2004-1050 BID: 11515 OSVDB: 11337 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A buffer overflow when processing the name attribute in an IFRAME tag allows command execution when a malformed web page ...
CVE-2006-1206
Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service connection slot exhaustion via a large number of connection attempts that exceeds the MAXUNAUTHCLIENTS defined value...
CVE-2006-1206
Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service connection slot exhaustion via a large number of connection attempts that exceeds the MAXUNAUTHCLIENTS defined value...
Microsoft Visual Studio .dbp and .sln buffer overflow
Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...
Microsoft Visual Studio .dbp and .sln buffer overflow
Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...
[NT] Microsoft Internet Explorer Drag-and-Drop Redeux
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2006-0023
CVE-2006-0023 describes a privilege-elevation vulnerability in Windows XP SP1/SP2 (and possibly other OS) where default service-discretionary access control lists (DACLs) are overly permissive (the so-called Permissive Windows Services DACLs). This allows a low-privileged local user to modify cri...
Windows Access Control Demystified
Hello everybody, We have constructed a logical model of Windows XP access control, in a declarative but executable Datalog format. We have built a scanner that reads access-control configuration information from the Windows registry, file system, and service control manager database, and feeds ra...
CVE-2006-0376
The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user when 1 it establishes an association with a station in ad hoc aka peer-to-peer mode or 2 a station in ad hoc mode establishes an association with it, which...
CVE-2006-0176
Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow local users to gain privileges via a long 1 -lang, 2 -ctrlr, 3 -pb, or 4 -rec argument on many operating systems, and via a long 5 -jdev argument on Ubuntu Linux...
CVE-2006-0176
Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow local users to gain privileges via a long 1 -lang, 2 -ctrlr, 3 -pb, or 4 -rec argument on many operating systems, and via a long 5 -jdev argument on Ubuntu Linux...
Microsoft Security Bulletin MS06-001 Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919)
Microsoft Security Bulletin MS06-001 Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution 912919 Published: January 5, 2006 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severi...
Appfluent Database IDS 2.1.0.103 - Environment Variable Local Overflow
Appfluent Database IDS 2.1.0.103 - Environment Variable Local Overflow / $ An open security advisory 14 - Appfluent Database IDS Environment Variable Overflow 1: Bug Researcher: c0ntex - c0ntexbatgmail.com -+- www.open-security.org 2: Bug Released: December 07th 2005 3: Bug Impact Rate: Hi 4: Bug...
Internet Explorer onload window vulnerability
Added: 12/01/2005 CVE: CVE-2005-1790 BID: 13799 OSVDB: 17094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Internet Explorer fails to properly initialize the window function when called from an onLoad event in a body tag. This...
Internet Explorer inline content filename extension vulnerability
Added: 11/25/2005 CVE: CVE-2001-0727 BID: 3578 OSVDB: 3033 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Using a null byte %00 in the filename field found in the Content-disposition header, a remote web server may be able to...
Macromedia Flash Player fails to properly validate the frame type identifier read from a "SWF" file
Overview A buffer overflow vulnerability in some versions of the Macromedia Flash Player may allow a remote attacker to execute code on a vulnerable system. Description The Macromedia Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed...