Lucene search
+L

192 matches found

Prion
Prion
added 2008/03/31 5:44 p.m.20 views

Integer overflow

Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Remote BETA allows remote attackers to execute arbitrary code via an RPC request that specifies a large number of array dimensions, which triggers a heap-based buffer overflow...

4.6CVSS8.8AI score0.01105EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2008/03/31 5:44 p.m.24 views

CVE-2008-0070

Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Remote BETA allows remote attackers to execute arbitrary code via an RPC request that specifies a large number of array dimensions, which triggers a heap-based buffer overflow...

4.6CVSS8.1AI score0.01105EPSS
SaveExploits1References5
CVE
CVE
added 2008/03/31 5:00 p.m.52 views

CVE-2008-0070

CVE-2008-0070 affects Orb Networks Orb 2.00.1014 and Winamp Remote BETA. Root cause: integer overflow causing a heap-based buffer overflow when an RPC request specifies a very large number of array dimensions. Impact: remote code execution potential. Exploitation details are not provided in the d...

4.6CVSS8.1AI score0.01105EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2008/03/31 5:00 p.m.37 views

CVE-2008-0070

Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Remote BETA allows remote attackers to execute arbitrary code via an RPC request that specifies a large number of array dimensions, which triggers a heap-based buffer overflow...

8.1AI score0.01105EPSS
SaveExploits1References5
seebug.org
seebug.org
added 2008/03/27 12:00 a.m.33 views

Orb Networks Orb RPC请求远程整数溢出漏洞

BUGTRAQ ID: 28431 CVECAN ID: CVE-2008-0070 Orb是用于提供MyCast功能的应用,MyCasting允许用户通过PC或其他internet连接设备访问相片、音乐、视频等数字内容。 Orb在处理RPC请求中所接收到的变量类型数组中维度数时存在整数溢出漏洞,如果用户在提交的请求中执行了超大的数组维度的话,就可能触发堆溢出,导致执行任意指令。 Orb Networks Orb 2.00.1014 Orb Networks ------------ 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...

4.6CVSS6.5AI score0.01105EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2008/03/26 12:00 a.m.17 views

Orb Detection

Orb is installed on the remote Windows host. Orb is a peer-to- peer file sharing application for 'mycasting' digital content from a PC. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31651; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2008/03/25 12:00 a.m.17 views

Orb Client Detection

Binary data 4443.prm...

7.3AI score
SaveExploits0References1
NVD
NVD
added 2007/08/23 7:17 p.m.19 views

CVE-2007-4511

The Sun Admin Console in Sun Application Server 9.00.1 does not apply certain configuration changes persistently, which causes the 1 SSL and 2 SSLMutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass...

5CVSS6.7AI score0.01629EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2007/08/23 7:00 p.m.34 views

CVE-2007-4511

The Sun Admin Console in Sun Application Server 9.00.1 does not apply certain configuration changes persistently, which causes the 1 SSL and 2 SSLMutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass...

6.7AI score0.01629EPSS
SaveExploits0References4
securityvulns
securityvulns
added 2007/03/14 12:00 a.m.59 views

Java Dynamic Management Kit privilege escalation

Invalid appliance of restriction policies allows to access Inter-ORB applications data...

4.3CVSS4.9AI score0.00634EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2007/03/12 11:00 p.m.51 views

CVE-2007-1419

The Java Management Extensions Remote API Remote Method Invocation over Internet Inter-ORB Protocol JMX RMI-IIOP API in Java Dynamic Management Kit 5.1 before 20070309 does not properly enforce the java.policy, which allows local users to obtain certain MBeans data access by operating a server...

5.8AI score0.00634EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2005/08/10 12:00 a.m.5 views

PT-2005-3279 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.20 through 0.10.11 Description: The issue is related to unknown vulnerabilities in certain dissectors, which can cause a denial of service. This happens when the application encounters specific packets that lead to a nul...

7.5CVSS6.2AI score0.06143EPSS
SaveExploits1References21
Rows per page
Query Builder