A Zeus botnet self-destructs

From The H Security According to information which only recently came to light, in early April a botnet consisting of an estimated 100,000 PCs apparently destroyed itself – as its control server send out a command that made Windows inoperable. The botnet was based on the Zeus rsa.com botnet tool...

Companies still dragging their feet with patches

From IDG News Service Jeremy Kirk A study from security vendor Qualys has found that companies are patching just a hair faster than they were five years ago. The latest data was collected throughout 2008, said Wolfgang Kandek, Qualys’ CTO. Qualys scanned 80 million IP Internet Protocol addresses...

XRDP 0.4.1 Buffer Overflow

/ XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 root@crateria:/xrdp gcc -w -lssl -lX11 xrdp-poc.c -o xrdp-poc 02:00:29 root@crateria:/xrdp ./xrdp-poc 10.0.0.13 = Connected to 10.0.0.13 = Hit CTRL-C if the progress bar stops. Be patient! It takes about a minute, the RDP...

Symantec pcAnywhere本地格式串漏洞

BUGTRAQ ID: 33845 CVECAN ID: CVE-2009-0538 Symantec PCAnywhere是全球最畅销的用于管理服务器和提供管理人员支持的远程控制解决方案。 pcAnywhere中存在格式串漏洞，通过授权的本地用户可以通过提交恶意请求导致pcAnywhere应用崩溃。 Symantec pcAnywhere 12.5 Symantec pcAnywhere 12.1 Symantec pcAnywhere 12.0 厂商补丁： Symantec -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Free Download Manager 2.5/3.0 (Authorization) Stack BOF PoC

Exploit for unknown platform in category dos / poc =========================================================== Free Download Manager 2.5/3.0 Authorization Stack BOF PoC =========================================================== !usr/bin/perl -w Stack-based buffer overflow in Remote Control Serve...

Free Download Manager 2.53.0 - Authorisation Stack Buffer Overflow (PoC)

Free Download Manager 2.53.0 - Authorisation Stack Buffer Overflow PoC !usr/bin/perl -w Stack-based buffer overflow in Remote Control Server in Free Download Manager FDM 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP...

Free Download Manager Remote Control Server HTTP Authorization buffer overflow

Added: 02/04/2009 CVE: CVE-2009-0183 BID: 33554 OSVDB: 51745 Background Free Download Manager is a download accelerator and manager for Windows systems. Problem A buffer overflow vulnerability in the Free Download Manager Remote Control Server allows remote attackers to execute arbitrary commands...

Free Download Manager 2.5/3.0 (Authorization) Stack BOF PoC

No description provided by source. !usr/bin/perl -w Stack-based buffer overflow in Remote Control Server in Free Download Manager FDM 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request. Refer:...

Free Download Manager Remote Control Server HTTP Authorization buffer overflow

Added: 02/04/2009 CVE: CVE-2009-0183 BID: 33554 OSVDB: 51745 Background Free Download Manager is a download accelerator and manager for Windows systems. Problem A buffer overflow vulnerability in the Free Download Manager Remote Control Server allows remote attackers to execute arbitrary commands...

Preemptive Protection against Free Download Manager Remote Control Server

A buffer overflow vulnerability was reported in Free Download Manager, a free download accelerator and manager. The vulnerability is caused due to a boundary error in the Remote Control Server when processing "Authorization" headers in HTTP requests. This issue can be triggered via an HTTP reques...

Free Download Manager Remote Control Server HTTP Authorization buffer overflow

Added: 02/04/2009 CVE: CVE-2009-0183 BID: 33554 OSVDB: 51745 Background Free Download Manager is a download accelerator and manager for Windows systems. Problem A buffer overflow vulnerability in the Free Download Manager Remote Control Server allows remote attackers to execute arbitrary commands...

Free Download Manager Remote Control Server HTTP Authorization buffer overflow

Added: 02/04/2009 CVE: CVE-2009-0183 BID: 33554 OSVDB: 51745 Background Free Download Manager is a download accelerator and manager for Windows systems. Problem A buffer overflow vulnerability in the Free Download Manager Remote Control Server allows remote attackers to execute arbitrary commands...

Free Download Manager多个远程安全漏洞

CVECAN ID: CVE-2009-0183,CVE-2009-0184 Free Download Manager是一种强大易用而且免费的网络下载管理及加速软件。 Free Download Manager的实现上存在多个远程安全漏洞，远程攻击者可能利用此漏洞控制运行了FDM的用户系统。 Free Download Manager处理torrent文件中的文件名、注释、URL等字串时存在堆或栈缓冲区溢出，攻击者可能通过诱使用户处理恶意的torrent文件触发漏洞控制用户系统。FDM的Remote Control...

CVE-2009-0183

Stack-based buffer overflow in Remote Control Server in Free Download Manager FDM 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request...

Stack overflow

Stack-based buffer overflow in Remote Control Server in Free Download Manager FDM 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request...

CVE-2009-0183

Stack-based buffer overflow in Remote Control Server in Free Download Manager FDM 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request...

CVE-2009-0183

Stack-based buffer overflow in Remote Control Server in Free Download Manager FDM 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request...

CVE-2009-0183: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Remote Control Server in Free Download Manager FDM 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request...

Free Download Manager Remote Control Server Buffer Overflow

This module exploits a stack buffer overflow in Free Download Manager Remote Control 2.5 Build 758. When sending a specially crafted Authorization header, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/http/fdm/authheader msf undefinedauthheader show...

Profense Web Application Firewall XSRF / XSS

Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html "Defenses against all OWASP Top Ten vulnerabilities" Too bad it doesn't defend its self against all of these...