2101 matches found
Samba smbd Security Descriptor Parsing Remote Overflow
The remote Samba server, according to its version number, is vulnerable to a remote buffer overrun resulting from an integer overflow vulnerability. To exploit this flaw, an attacker would need to send to the remote host a malformed packet containing hundreds of thousands of ACLs, which would in...
abctab2ps 1.6.3 - 'Trim_Title' '.ABC' File Remote Buffer Overflow
source: https://www.securityfocus.com/bid/12028/info abctab2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that th...
Michael Kohn VB2C 0.02 - .FRM File Remote Buffer Overflow
Michael Kohn VB2C 0.02 - .FRM File Remote Buffer Overflow source: https://www.securityfocus.com/bid/12020/info VB2C is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in...
abctab2ps 1.6.3 - Write_Heading .ABC Remote Buffer Overflow
abctab2ps 1.6.3 - WriteHeading .ABC Remote Buffer Overflow source: https://www.securityfocus.com/bid/12026/info abctab2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied...
abctab2ps 1.6.3 - 'Write_Heading' '.ABC' Remote Buffer Overflow
source: https://www.securityfocus.com/bid/12026/info abctab2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that th...
LinPopUp 1.2 - Remote Buffer Overflow
LinPopUp 1.2 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/11997/info LinPopUp is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive...
Michael Kohn VB2C 0.02 - '.FRM' File Remote Buffer Overflow
source: https://www.securityfocus.com/bid/12020/info VB2C is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that this...
NapShare 1.2 - Remote Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/11967/info It is reported that NapShare is susceptible to a remote buffer overflow vulnerability. This is due to a failure of the application to properly bounds check user-supplied data prior to copying it to a fixed-size memory buffer. Attackers runni...
Open DC Hub RedirectAll Value Remote Buffer Overflow
Binary data 2434.prm...
WS_FTP Server <= 5.03 MKD Remote Buffer Overflow Exploit
No description provided by source. / no@0x00:/Exploits/IPS-WSFTP$ ./IPSWSFTP-exploit 10.20.30.2 test test Ipswitch WSFTP Remote buffer overflow exploit by NoPh0BiA. x Connected to: 10.20.30.2 on port 21. x Sending Login..done. x Sending bad code..done. x Checking if exploitation was successful.. ...
Orbz Game 2.10 - Remote Buffer Overflow (PoC)
/ by Luigi Auriemma / include include include include / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295. Probably not the fastest bit packing functions existent, but I like them. /...
Orbz Game <= 2.10 Remote Buffer Overflow Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295. Probabl...
Orbz Game 2.10 - Remote Buffer Overflow (PoC)
Orbz Game 2.10 - Remote Buffer Overflow PoC / by Luigi Auriemma / include include include include / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295. Probably not the fastest bit...
Ipswitch WS_FTP Server 5.03 - MKD Remote Buffer Overflow
/ no@0x00:/Exploits/IPS-WSFTP$ ./IPSWSFTP-exploit 10.20.30.2 test test Ipswitch WSFTP Remote buffer overflow exploit by NoPh0BiA. x Connected to: 10.20.30.2 on port 21. x Sending Login..done. x Sending bad code..done. x Checking if exploitation was successful.. x Connected to: 10.20.30.2 on port...
MailEnable Mail Server IMAP 1.52 - Remote Buffer Overflow
/ MailEnable , IMAP Service, Remote Buffer Overflow Exploit v0.4 Homepage : www.mailenable.com Affected versions: Pro v1.52 Enterprise v1.01 Bug discovery : Nima Majidi at www.hat-squad.com Exploit code : class101 at www.hat-squad.com & dfind.kd-team.com Fix :...
Open DC Hub RedirectAll Value Remote Overflow
The remote host is running Open DC Hub, a peer-to-peer file sharing application, which is vulnerable to a remote buffer overflow. A successful exploit would allow a remote attacker to execute code on the remote host. It must be noted that the remote attacker needs administrative access to this...
Jabber Server 2.0 - Multiple Remote Buffer Overflow Vulnerabilities
source: https://www.securityfocus.com/bid/11741/info Multiple remote buffer overflow vulnerabilities affect the Jabber Server. These issues are due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into finite process buffers. An attack...
jabberd -- remote buffer overflow vulnerability
Caused by improper bounds-checking of username and password in the C2S module, it is possible for an attacker to cause a remote buffer overflow. The server directly handles the userinput with SQL backend functions - malicious input may lead to buffer overflow...
Winamp 5.06 - 'IN_CDDA.dll' Remote Buffer Overflow
/ Credits go to the author How to fix and study the bug: - The cdda library only reserves 20 bytes for names when files are ".cda" - run Winamp with ollye - when loaded locate and break at: 10009BBB 8D4C24 20 LEA ECX,DWORD PTR SS:ESP+20 10009BBF 84C0 TEST AL,AL 10009BC1 74 0F JE SHORT...