Novell iPrint Client ActiveX Control Date/Time Buffer Overflow

This module exploits a stack buffer overflow in Novell iPrint Client 5.30. When passing a specially crafted date/time string via certain parameters to ienipp.ocx an attacker can execute arbitrary code. NOTE: The "operation" variable must be set to a valid command in order to reach this...

Audio Workstation 6.4.2.4.3 pls Buffer Overflow

This module exploits a buffer overflow in Audio Workstation 6.4.2.4.3. When opening a malicious pls file with the Audio Workstation, a remote attacker could overflow a buffer and execute arbitrary code. Module Options msf use exploit/windows/fileformat/audio/wkstnpls msf undefinedwkstnpls show...

gAlan 0.2.1 Buffer Overflow

This module exploits a stack buffer overflow in gAlan 0.2.1 by creating a specially crafted galan file. Module Options msf use exploit/windows/fileformat/galan/fileformatbof msf undefinedfileformatbof show actions ...actions... msf undefinedfileformatbof set ACTION msf undefinedfileformatbof show...

gAlan 0.2.1 Universal Buffer Overflow Exploit (meta)

Exploit for unknown platform in category local exploits ==================================================== gAlan 0.2.1 Universal Buffer Overflow Exploit meta ==================================================== Title: gAlan 0.2.1 Universal Buffer Overflow Exploit meta CVE-ID: OSVDB-ID: Author:...

PointDev IDEAL Migration Buffer Overflow

This module exploits a stack buffer overflow in versions v9.7 through v10.5 of IDEAL Administration and versions 4.5 and 4.51 of IDEAL Migration. All versions are suspected to be vulnerable. By creating a specially crafted ipj file, an attacker may be able to execute arbitrary code. NOTE: IDEAL...

Adobe Illustrator CS4 v14.0.0

Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit Module Options msf use exploit/windows/fileformat/adobe/illustratorv14eps msf undefinedillustratorv14eps show actions ...actions... msf undefinedillustratorv14eps set ACTION msf...

Millenium MP3 Studio 2.0 pls Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================== Millenium MP3 Studio 2.0 pls Buffer Overflow Exploit ==================================================== Title: Millenium MP3 Studio 2.0 pls Buffer Overflow Exploit CVE-ID: OSVDB-ID:...

BolinTech Dream FTP Server 1.02 Format String

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BolinTech...

Symantec AeXNSConsoleUtilities RunCmd buffer overflow

Added: 11/27/2009 CVE: CVE-2009-3033 BID: 37092 OSVDB: 60496 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A buffer overflow vulnerability in the AeXNSConsoleUtilities ActiveX control allows command execution when a user loads a...

Borland InterBase isc_create_database() Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Borland...

Computer Associates Alert Notification Buffer Overflow

$Id: etrustitmalert.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class...

GOM Player ActiveX Control Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'GOM Player...

Alt-N WebAdmin USER Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Alt-N WebAdm...

MailEnable IMAPD (2.35) Login Request Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MailEnable...

Qualcomm WorldMail 3.0 IMAPD LIST Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Qualcomm...

Oracle TNS Listener SERVICE_NAME Buffer Overflow.

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Oracle TNS Listen...

Juniper SSL-VPN IVE JuniperSetupDLL.dll ActiveX Control Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Juniper...

Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruption

msvidctlmpeg2.rb Microsoft DirectShow msvidctl.dll MPEG-2 Memory Corruption exploit for the Metasploit Framework Tested successfully on the following platforms fully patched 06/07/09: - Internet Explorer 6, Windows XP SP2 - Internet Explorer 7, Windows XP SP3 Original exploit was found in-the-wil...

Trend Micro ServerProtect 5.58 EarthAgent.EXE Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Trend Micro...

FreeFTPd 1.0.10 Key Exchange Algorithm String Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'FreeFTPd...