Savant Web Server 3.1 - Remote Buffer Overflow (1)

Savant Web Server 3.1 - Remote Buffer Overflow 1 Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! import struct import socket sc = "\x90" 21 win32adduser - PASS=pwd EXITFUNC=thread USER=...

Newspost 2.0/2.1 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/12418/info Newspost is prone to a remote buffer overflow vulnerability due to an unbounded memory copy operation. The problem occurs in the 'socketgetline' function of 'socket.c' when the vulnerable client handles NNTP server responses. Successful...

Savant Web Server 3.1 - Remote Buffer Overflow (1)

Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! import struct import socket sc = "\x90" 21 win32adduser - PASS=pwd EXITFUNC=thread USER=X Size=232 Encoder=PexFnstenvSub...

ngIRCd 0.6/0.7/0.8 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/12397/info ngIRCd is reported prone to a remote buffer overflow vulnerability. This issue presents itself because the application fails to perform proper boundary checks before copying user-supplied data into process buffers. A successful attack may...

NullSoft Winamp 5.0.x - Variant IN_CDDA.dll Remote Buffer Overflow (PoC)

NullSoft Winamp 5.0.x - Variant INCDDA.dll Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/12381/info A remote buffer overflow vulnerability affects the INCDDA.dll library of Nullsoft's Winamp. This issue is due to a failure of the application to properly validate the length ...

Golden FTP Server 2.02b - Remote Buffer Overflow

!/usr/bin/perl -w Barabas - www.whitehat.co.il - cheers to muts and all peeps at WH. XPSP2 goldenftpserver sploit - bind 4444 use strict; use Net::FTP; my $payload="\x41"x260; $payload .="\x65\x82\xa5\x7c";jmpesp $payload .="\x90"x32;not really necessary...blah win32bind - EXITFUNC=seh LPORT=4444...

Netcat v1.1 "-e" Switch Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ====================================================== Netcat v1.1 "-e" Switch Remote Buffer Overflow Exploit ====================================================== / Netcat v1.1, "-e" Switch, Remote Buffer Overflow Exploit v0.1...

Netcat 1.1 - -e Switch Remote Buffer Overflow

Netcat 1.1 - -e Switch Remote Buffer Overflow / Netcat v1.1, "-e" Switch, Remote Buffer Overflow Exploit v0.1 Homepage..........: http://www.securityfocus.com/tools/139/scoreit Affected versions.: v1.1 Fix...............: Actually none, Hobbit is warned 1 month+ ago, and looks like to not act, we...

Netcat v1.1 ""-e"" Switch Remote Buffer Overflow Exploit

No description provided by source. / Netcat v1.1, "-e" Switch, Remote Buffer Overflow Exploit v0.1 Homepage..........: http://www.securityfocus.com/tools/139/scoreit Affected versions.: v1.1 Fix...............: Actually none, Hobbit is warned 1 month+ ago, and looks like to not act, we let him to...

[Security Bulletin] SSRT4867 rev.0 Netscape Directory Server on HP-UX LDAP remote buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01105 REVISION: 0 SSRT4867 Netscape Directory Server on HP-UX LDAP remote buffer overflow NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in...

Solaris 2.5.12.678 rlogin (SPARC) - binlogin Remote Buffer Overflow

Solaris 2.5.12.678 rlogin SPARC - binlogin Remote Buffer Overflow / $Id: raptorrlogin.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorrlogin.c - rlogin, Solaris/SPARC 2.5.1/2.6/7/8 Copyright c 2004 Marco Ivaldi Buffer overflow in login in various System V based operating systems allows remote...

Seattle Lab Mail (SLmail) 5.5 - POP3 PASS Remote Buffer Overflow (3)

Seattle Lab Mail SLmail 5.5 - POP3 PASS Remote Buffer Overflow 3 / SLMAIL REMOTE PASSWD BOF - Ivan Ivanovic Ivanov Иван-дурак недействительный 31337 Team / include include include include // bind 4444 unsigned char shellcode = "\xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b\x45"...

RealPlayer Unspecified Remote Buffer Overflow

Binary data 2472.prm...

Ability Server 2.34 - APPE Remote Buffer Overflow

Ability Server 2.34 - APPE Remote Buffer Overflow / TESTED ON WINXP SP0 RUS c by Dark Eagle from unl0ck research team http://unl0ck.void.ru HAPPY NEW YEAR! Greetz go out to: nekd0, antiq, fl0wsec setnf, nuTshell, nosystem CoKi, reflux... / include include include include // shellc0de by m00 team...

Ability Server <= 2.34 Remote APPE Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== Ability Server include include include // shellc0de by m00 team bind 61200 char shellcode= "\x90\x90\x90\x90\x90\xEB\x0F\x58\x80\x30\xBB\x40\x81\x38\x6D"...

Samba smbd Security Descriptor Parsing Remote Overflow

The remote Samba server, according to its version number, is vulnerable to a remote buffer overrun resulting from an integer overflow vulnerability. To exploit this flaw, an attacker would need to send to the remote host a malformed packet containing hundreds of thousands of ACLs, which would in...

Ability Server 2.34 - 'APPE' Remote Buffer Overflow

/ TESTED ON WINXP SP0 RUS c by Dark Eagle from unl0ck research team http://unl0ck.void.ru HAPPY NEW YEAR! Greetz go out to: nekd0, antiq, fl0wsec setnf, nuTshell, nosystem CoKi, reflux... / include include include include // shellc0de by m00 team bind 61200 char shellcode=...

abctab2ps 1.6.3 - Write_Heading .ABC Remote Buffer Overflow

abctab2ps 1.6.3 - WriteHeading .ABC Remote Buffer Overflow source: https://www.securityfocus.com/bid/12026/info abctab2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied...

Michael Kohn VB2C 0.02 - .FRM File Remote Buffer Overflow

Michael Kohn VB2C 0.02 - .FRM File Remote Buffer Overflow source: https://www.securityfocus.com/bid/12020/info VB2C is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in...

LinPopUp 1.2 - Remote Buffer Overflow

LinPopUp 1.2 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/11997/info LinPopUp is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive...