138 matches found
Build simple hidden crazy ddos attack tools-vulnerability warning-the black bar safety net
xdos attack effect is better, but we have to do is let him as the leader of the zombies above, put in a lot of meat on the chicken run, auto-attack the target server. xdos to run a cmd window, we can use delphi to write a small program to let him hide the window, and to achieve a boot from the...
Then talk about the Exchange environment session hijacking(For windows2000)-vulnerability warning-the black bar safety net
The first step is to open the IP Routing function, modify the registry HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter to 0x1, and restart the system. The second step is ARP spoofing, the specific principle I will not say. The third step is to start the hijackin...
Create your own powerful bomb-vulnerability warning-the black bar safety net
Figure/text spirit dove Musketeers/1jjk Small-tech network original article www.xker.com reproduced Please note the name of the The New Year has arrived, and my friends are busy with a rush project, just before I accidentally write an infinite loop, reminiscent of a very old bomb---the blue scree...
CVE-2005-0771
VERITAS Backup Exec Server beserver.exe 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106...
CVE-2005-0771
CVE-2005-0771 affects VERITAS Backup Exec Server (beserver.exe) on Windows versions 9.0–10.0. It permits unauthenticated remote RPC access on TCP port 6106 that can modify the Windows registry, enabling an attacker to gain full registry control and potentially compromise the host. The vulnerabili...
CVE-2003-1121
Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to 1 modify arbitrary registry entries via the ScriptLogic RPC service SLRPC or 2 modify arbitrary configuration via the RunAdmin services...
Skype URI callto username overflow
Here is a cute little URI I found crashing skype on it's latest version 0.98.0.04. It's proboby a buffer overflow of some sort, so, a special crafted URI culd potentionally lead to remote code execution. would probobly be extreamly hard doing it threw a URI, but still an option...
DATEV Nutzungskontrolle 2.12.2 - Unauthorized Access
DATEV Nutzungskontrolle 2.12.2 - Unauthorized Access source: https://www.securityfocus.com/bid/8950/info It has been reported that DATEV Nutzungskontrolle may be prone to a access validation issue that may allow a local attacker to gain access to sensitive data. The issue presents itself as a loc...
CVE-2000-0802
The vulnerability CVE-2000-0802 affects the BAIR program. It does not properly restrict access to the Internet Explorer Internet options menu, allowing a local user to obtain access to the menu by modifying the registry key that starts BAIR. The issue is described in public records (NVD CVE entry...
H. Nomura Tiny FTPDaemon 0.52 - Multiple Buffer Overflow Vulnerabilities
H. Nomura Tiny FTPDaemon 0.52 - Multiple Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/961/info Tiny FTPd is a freeware FTP server for Win9x with a Japanese interface. Version .52 and possible previous versions have unchecked buffers in the code that handles the...
Microsoft Windows NT 4.0SP1SP2SP3SP4SP5 - RASMAN Privilege Escalation
Microsoft Windows NT 4.0SP1SP2SP3SP4SP5 - RASMAN Privilege Escalation source: https://www.securityfocus.com/bid/645/info Any authenticated NT user ie domain user can modify the pathname for the RASMAN binary in the Registry. The next time the RAS Service is started, the trojan service referenced ...
Microsoft Windows NT 4.0 - DCOM Server
Microsoft Windows NT 4.0 - DCOM Server source: https://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registr...
Portal of Doom Backdoor Detection
Portal of Doom is installed. This backdoor allows anyone to partially take the control of the remote system. An attacker may use it to steal your password or prevent your from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Ipswitch IMail 5.0 Ipswitch WS_FTP Server 1.0.11.0.2 - Local Privilege Escalation
Ipswitch IMail 5.0 Ipswitch WSFTP Server 1.0.11.0.2 - Local Privilege Escalation source: https://www.securityfocus.com/bid/218/info Non-administrative Imail and WSFTP Server users may elevate their privileges to administrator for these applications by modifying a specific registry value. Once a...
Ipswitch IMail 5.0 / Ipswitch WS_FTP Server 1.0.1/1.0.2 - Local Privilege Escalation
source: https://www.securityfocus.com/bid/218/info Non-administrative Imail and WSFTP Server users may elevate their privileges to administrator for these applications by modifying a specific registry value. Once a person has obtained administrative privileges, they may use the application...
Microsoft security advisory: Updated support for Diffie-Hellman Key Exchange
None None...
MS10-092: Vulnerability in Task Scheduler could allow for elevation of privilege
None None...
MS09-042: Vulnerability in Telnet could allow remote code execution
None None...