Microsoft Windows 8.1 - Local WebDAV NTLM Reflection Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=222 Windows: Local WebDAV NTLM Reflection Elevation of Privilege Platform: Windows 8.1 Update, Windows 7 Class: Elevation of Privilege Summary: A default installation of Windows 7/8 can be made to perform a NTLM reflectio...

Microsoft Windows 8.1 - Local WebDAV NTLM Reflection Privilege Escalation

Microsoft Windows 8.1 - Local WebDAV NTLM Reflection Privilege Escalation Source: https://code.google.com/p/google-security-research/issues/detail?id=222 Windows: Local WebDAV NTLM Reflection Elevation of Privilege Platform: Windows 8.1 Update, Windows 7 Class: Elevation of Privilege Summary: A...

CVE-2014-0605

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method...

CVE-2014-0604

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method...

Memory corruption

The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service memory corruption and execute arbitrary code via vectors related to the 1 GetGlobalSettings or 2 GetSiteProperties3 methods, which triggers a dereference of an...

Directory traversal

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method...

CVE-2014-0603

The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service memory corruption and execute arbitrary code via vectors related to the 1 GetGlobalSettings or 2 GetSiteProperties3 methods, which triggers a dereference of an...

CVE-2014-0605

The connected advisories confirm CVE-2014-0605 affects Attachmate Reflection FTP Client (rftpcom.dll ActiveX) with a directory traversal flaw in the SaveSettings method that enables remote code execution. Affected software includes versions prior to 14.1.429; ZDI notes exploitation requires user ...

CVE-2014-0603

The issue is Attachmate Reflection FTP Client’s rftpcom.dll ActiveX control (GetGlobalSettings, GetSiteProperties3) causing memory corruption leading to remote code execution. CVE-2014-0603 details: memory corruption with execution of arbitrary code via those methods on affected builds before 14....

CVE-2014-0605

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method...

CVE-2014-0604

CVE-2014-0604 is a directory traversal vulnerability in the Attachmate Reflection FTP Client’s rftpcom.dll ActiveX control (and Attachmate Reflection Secure FTP Client per ZDI) that allows remote code execution via the StartLog method. The flaw exists before version 14.1.429. Exploitation details...

Validator: JSM bypass via ReflectionHelper

It was discovered that the implementation of org.hibernate.validator.util.ReflectionHelper together with the permissions required to run Hibernate Validator under the Java Security Manager could allow a malicious application deployed in the same application container to execute several actions wi...

CVE-2015-0869

I-O DATA DEVICE NP-BBRM routers allow remote attackers to cause a denial of service SSDP reflection via UPnP requests...

Code injection

I-O DATA DEVICE NP-BBRM routers allow remote attackers to cause a denial of service SSDP reflection via UPnP requests...

CVE-2015-0869

The CVE-2015-0869 entry concerns I-O DATA DEVICE NP-BBRM routers. A vulnerability in the UPnP functionality allows remote attackers to cause a denial of service via SSDP reflection by sending UPnP requests. Affected product: NP-BBRM router. Impact: potential DoS through SSDP reflection. CVSS metr...

CVE-2015-0869

I-O DATA DEVICE NP-BBRM routers allow remote attackers to cause a denial of service SSDP reflection via UPnP requests...

Stack overflow

Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response...

CVE-2014-5211

Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response...

CVE-2014-5211

CVE-2014-5211 affects Attachmate Reflection FTP Client prior to 14.1.433. It is a stack-based buffer overflow caused by insufficient boundary checking when processing the PWD command response, allowing remote code execution in the context of the current user. Exploitation involves a crafted large...

Microsoft SQL Server (MSSQL) Resolution Service Amplification Reflected DRDoS (UDP)

The remote Microsoft SQL Server MSSQL allows distributed reflection and amplification DRDoS attacks. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...