RHEL 2.1 : glibc (RHSA-2003:090)

Updated glibc packages are available to fix an integer overflow in the XDR decoder. The glibc package contains standard libraries which are used by multiple programs on the system. Sun RPC is a remote procedure call framework which allows clients to invoke procedures in a server process over a...

Microsoft CIS and RPC over HTTP Proxy components fail to properly handle responses

Overview A vulnerability in a Microsoft HTTP Proxy component may lead to a denial of service. Description Microsoft's COM Internet Sevices CIS and Remote Procedure Call RPC over HTTP Proxy contain a vulnerability that could permit an attacker to cause a denial of service. When a forwarded request...

EUVD-2003-0985

Buffer overflow in the Microsoft Message Queue Manager MSQM allows remote attackers to cause a denial of service RPC service crash via a queue registration request...

CVE-2003-0938

vos24u.c in SAP database server SAP DB 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure...

MS Windows XP/2000 RPC Remote (non exec memory) Exploit

No description provided by source. / have you recently bought one of those expensive new windows security products on the market? do you think you now have strong protection? Look again: rpc!exec by ins1der trixterjack yahoo com windows remote return into libc exploit! remote rpc exploit breaking...

Microsoft Windows XP2000 - RPC Remote Non Exec Memory

Microsoft Windows XP2000 - RPC Remote Non Exec Memory / have you recently bought one of those expensive new windows security products on the market? do you think you now have strong protection? Look again: rpc!exec by ins1der trixterjack yahoo com windows remote return into libc exploit! remote r...

MS Windows (RPC2) Universal Exploit & DoS (RPC3) (MS03-039)

漏洞描述：Remote Procedure Call RPC是Windows操作系统使用的一种远程过程调用协议，RPC提供进程间交互通信机制，允许在某台计算机上运行程序无缝的在远程系统上执行代码。协议本身源自OSF RPC协议，但增加了Microsoft特定的扩展。MS RPC在处理畸形消息时存在问题，远程攻击者可以利用这个漏洞进行拒绝服务攻击，在RPC服务崩溃后，可用来权限提升攻击。 攻击者发送畸形消息给DCOM RemoteGetClassObject接口，RPC服务就会崩溃，所有依靠RPC服务的应用程序和服务就会变的不正常。...

DEBIAN-CVE-2003-0776

saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences...

PT-2003-1696 · Microsoft · Windows 2000 +3

Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 Blaster/Nachi and CVE-2003-0715...

PT-2003-1814 · Microsoft · Windows 2000 +3

Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352...

Microsoft Security Bulletin MS03-039: Buffer Overrun In RPCSS Service Could Allow Code Execution(824146)

-----BEGIN PGP SIGNED MESSAGE----- - - ----------------------------------------------------------------- Title: Buffer Overrun In RPCSS Service Could Allow Code Execution 824146 Date: September 10, 2003 Software: Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Serverr 4.0 Microsoft...

CVE-2003-0619

Integer signedness error in the decodefh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service kernel panic via a negative size value within XDR data of an NFSv3 procedure call...

CVE-2003-0232

Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls LPC port that leads to a buffer overflow...

ZH2003-24SA (security advisory): ChitChat.NET XSS Vulnerability

ZH2003-24SA security advisory: ChitChat.NET XSS Vulnerability Published: 13 august 2003 Released: 13 august 2003 Name: ChitChat.NET Affected Systems: 2.0 Issue: Remote attackers can inject XSS script Author: [email protected] Vendor: http://clickcess.com/ Description Zone-h Security Team has...

CVE-2003-0232

Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls LPC port that leads to a buffer overflow...

Windows 2000 RPC DoS and privilege escalation

Malformed DCOM RemoteGetClassObject request causes RPC mapper service to crash. After RPC crashes, it's possible for local attacker to hijack epmapper pipe and impersonate local system...

PT-2003-1555 · Microsoft · Windows 2000 +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows NT 4.0, 2000, XP, and Server 2003 Description: A buffer overflow issue in a certain DCOM interface for RPC allows remote attackers to execute arbitrary code via a malformed message. This issue has been exploited by the...

Coda DoS

DoS on invalid RPC packet...

Cerberus FTP Server 2.1 - Information Disclosure

source: https://www.securityfocus.com/bid/7369/info It has been reported that Cerberus FTP Server is prone to an information disclosure weakness. The problem exists in the way the FTP server handles the authentication procedure. An attacker may exploit a weakness in error handling to disclose val...

CVE-2002-0678

CVE-2002-0678 relates to the CDE ToolTalk RPC database server (rpc.ttdbserverd). The OpenVAS/CERT CORE disclosures describe two vulnerabilities: (1) _TT_ISCLOSE range-check flaw permitting memory overwriting of the process when a local or remote client calls _TT_ISCLOSE; (2) _TT_TRANSACTION/log_f...