Immunity Canvas: MS05_043

Name| ms05043 ---|--- CVE| CVE-2005-1984 Exploit Pack| CANVAS Description| Windows Print Spooler Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS05-043.mspx CVE Name: CVE-2005-1984 VENDOR: Microsoft MSADV: MS05-043 Repeatability: One shot Note: Run setthreadtoken0...

CVE-2005-1984: Undefined Security Weakness

Buffer overflow in the Print Spooler service Spoolsv.exe for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message...

Sun Solaris printd print daemon unauthorized files access

It's possible to remove arbitrary files with printd user's privileges...

Microsoft Windows print Spooler service buffer overflow

Buffer overflow on named pipes request processing...

Microsoft Security Bulletin MS05-043 Vulnerability in Print Spooler Service Could Allow Remote Code Execution (896423)

Microsoft Security Bulletin MS05-043 Vulnerability in Print Spooler Service Could Allow Remote Code Execution 896423 Issued: August 9, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Ratin...

Microsoft Print Spooler service contains a buffer overflow

Overview A buffer overflow in the Microsoft Print Spooler service may allow a remote attacker to execute arbitrary code on a vulnerable system. Description According to Microsoft, the Print Spooler service is ...an executable file that is installed as a service. The spooler is loaded when the...

MS05-043: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (896423)

The remote host contains a version of the Print Spooler service that is vulnerable to a security flaw that could allow an attacker to execute code on the remote host or crash the spooler service. An attacker can execute code on the remote host with a NULL session against : - Windows 2000 An...

CVE-2004-2166: Undefined Security Weakness

The print-from-email feature in the Canon ImageRUNNER iR 5000i and C3200 digital printer, when not using IP address range filtering, allows remote attackers to print arbitrary text without authentication via a text/plain email to TCP port 25...

CVE-2002-1834

CVE-2002-1834 concerns the default configuration of Xerox DocuTech 6110 and 6115, where the web server allows remote attackers to (1) submit print jobs directly into the “print now” queue or (2) read the scanner job history. The connected sources repeat this description but do not provide additio...

CVE-2002-1834: Undefined Security Weakness

The default configuration of Xerox DocuTech 6110 and DocuTech 6115 allows remote attackers to connect to the web server and 1 submit print jobs directly into the "print now" queue or 2 read the scanner job history...

CVE-2005-1267

The bgpupdateprint function in tcpdump 3.x does not properly handle a -1 return value from the decodeprefix4 function, which allows remote attackers to cause a denial of service infinite loop via a crafted BGP packet...

CVE-2005-1550: Undefined Security Weakness

easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...

security flaw

The isisprint function, as called by isoclnsprint, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service infinite loop via a zero length, as demonstrated using a GRE packet...

CVE-2003-1142

Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows local users to gain privileges...

CVE-2003-1142

The CVE-2003-1142 entry affects NIPrint LPD-LPR Print Server versions 4.10 and earlier. The underlying issue allows a local user to have Windows Explorer executed with SYSTEM privileges, enabling local privilege escalation. The provided sources describe the vulnerability impact but do not specify...

CVE-2003-1142: Undefined Security Weakness

Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows local users to gain privileges...

DEBIAN-CVE-2005-1278

The isisprint function, as called by isoclnsprint, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service infinite loop via a zero length, as demonstrated using a GRE packet...

BakBone NetVault 7.1 - Local Privilege Escalation

// ===== Start UnhideNetVaultServiceWindow.c ====== include include int main void HWND hWnd; char szWindowName = "C:\Program Files\BakBone Software\NetVault\bin\nvstatsmngr.exe"; printf "Finding window %s\n", szWindowName ; hWnd = FindWindow NULL, szWindowName ; if hWnd == NULL printf "ERROR!...

CVE-2001-1451

Memory leak in the SNMP LAN Manager LANMAN MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service memory consumption via a large number of GET or GETNEXT requests...

GLSA-200501-30 : CUPS: Stack overflow in included Xpdf code

The remote host is affected by the vulnerability described in GLSA-200501-30 CUPS: Stack overflow in included Xpdf code The Decrypt::makeFileKey2 function in Xpdf's Decrypt.cc insufficiently checks boundaries when processing /Encrypt /Length tags in PDF files GLSA 200501-28. Impact : This issue...