3proxy 0.5.3g - exec-shield proxy.c logurl() Remote Overflow

3proxy 0.5.3g - exec-shield proxy.c logurl Remote Overflow / Fedora Core 5,6 exec-shield based 3proxy HTTP Proxy 3proxy-0.5.3g.tgz remote overflow root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...

3proxy 0.5.3g - exec-shield 'proxy.c logurl()' Remote Overflow

/ Fedora Core 5,6 exec-shield based 3proxy HTTP Proxy 3proxy-0.5.3g.tgz remote overflow root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL: http://x82.inetcop.org/h0me/papers/FCexploit/FCexploit.txt Reference:...

MyDNS 1.1.0 Remote Heap Overflow PoC

No description provided by source. / mydns-rr-smash.c Copyright c 2007 by [email protected] mydns remote exploit PoC x86-lnx by mu-b - Apr 2007 - Tested on: mydns-1.1.0 .tar.gz This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public...

Novell Groupwise WebAccess GWINTER.EXE Base64 Decoding Remote Overflow

The remote host is running a version of GroupWise WebAccess from Novell that is vulnerable to a stack overflow in the way it handles HTTP Basic Authentication. By sending a specially crafted request, an attacker can exploit this flaw to execute code on the remote host with administrative...

IE NCTAudioFile2.AudioFile ActiveX Remote Overflow Exploit

No description provided by source. / ------------------------------------------------------------------------------------------------- PoC 79 Exes's / IE NCTAudioFile2.AudioFile ActiveX Remote Stack Overfl0w Auther: InTeL Original Advisory: http://secunia.com/secuniaresearch/ Attack Vector: EIP...

Microsoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Overflow

/ ------------------------------------------------------------------------------------------------- PoC 79 Exes's / IE NCTAudioFile2.AudioFile ActiveX Remote Stack Overfl0w Auther: InTeL Original Advisory: http://secunia.com/secuniaresearch/ Attack Vector: EIP smash Type: Remote Malicious webpage...

Wserve HTTP Server GET请求远程溢出漏洞

BUGTRAQ ID: 23341 Wserve HTTP Server是Windows平台下的一款简单HTTP服务器。 如果向Wserve HTTP Server提交了包含有超长目录名的畸形GET请求的话，就可能触发缓冲区溢出，导致服务器拒绝服务。 来源：UniquE-Key （[email protected]） 链接：http://marc.info/?l=bugtraq&m=117580080909866&w=2 Wserve HTTP Server GET请求远程溢出漏洞 厂商补丁： Wserve ------...

Apache Mod_Rewrite Off-by-one Remote Overflow Exploit (win32)

Exploit for unknown platform in category remote exploits ============================================================= Apache ModRewrite Off-by-one Remote Overflow Exploit win32 ============================================================= !/bin/sh Exploit for Apache modrewrite off-by-oneWin32. b...

Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow

!/bin/sh Exploit for Apache modrewrite off-by-oneWin32. by axis http://www.ph4nt0m.org 2007-04-06 Tested on Apache 2.0.58 Win32 Windows2003 CN SP1 Vulnerable Apache Versions: 1.3 branch: 1.3.28 and 2.0.46 and 2.2.0 and 2006-08-20 http://www.milw0rm.com/exploits/2237 to successfully exploit the...

MS Windows XP Animated Cursor (.ANI) Remote Overflow Exploit 2

No description provided by source. Microsoft ANI Buffer Overflow Exploit Author: Trirat Puttaraksa http://sf-freedom.blogspot.com Tested on: Windows XP SP2 fully patched + IE 6 SP2 For educational purpose only There are many confuses about this vulnerability. Someone said that this could not be...

MS Windows XP/Vista Animated Cursor (.ANI) Remote Overflow Exploit

No description provided by source. ..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build 6000 default installation and U...

Microsoft Windows XP - Animated Cursor .ani Remote Overflow (2)

Microsoft Windows XP - Animated Cursor .ani Remote Overflow 2 Microsoft ANI Buffer Overflow Exploit Author: Trirat Puttaraksa http://sf-freedom.blogspot.com Tested on: Windows XP SP2 fully patched + IE 6 SP2 For educational purpose only There are many confuses about this vulnerability. Someone sa...

Microsoft Windows XPVista - Animated Cursor .ani Remote Overflow

Microsoft Windows XPVista - Animated Cursor .ani Remote Overflow ..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build...

Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow

..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build 6000 default installation and UAC enabled Windows Vista Ultimate...

Microsoft Windows XP - Animated Cursor '.ani' Remote Overflow (2)

Microsoft ANI Buffer Overflow Exploit Author: Trirat Puttaraksa http://sf-freedom.blogspot.com Tested on: Windows XP SP2 fully patched + IE 6 SP2 For educational purpose only There are many confuses about this vulnerability. Someone said that this could not be exploited in XP SP2 - that's wrong. ...

IBM Lotus Domino Server 6.5 - Remote Overflow

!/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you Skeleton exploit shamelessly ripped off Winny Thomas bt...

Easy File Sharing FTP Server 2.0 (Windows 2000 SP4) - PASS Remote Overflow

Easy File Sharing FTP Server 2.0 Windows 2000 SP4 - PASS Remote Overflow !/usr/bin/python Remote exploit for Easy File Sharing FTP server V2.0. The vulnerability was discovered by h07 and a POC for windows XP SP2 polish version was provided. This exploit was tested on windows 2000 server SP4. The...

RealNetworks Helix Servers DESCRIBE Request LoadTestPassword Field Remote Overflow

The remote host is running Helix DNA Server or Helix Server, a media streaming server. The version of the Helix server installed on the remote host contains a heap overflow involving an invalid 'LoadTestPassword' field. An unauthenticated, remote attacker can leverage this flaw using a simple...

Mercur Messaging 2005 (Windows 2000 SP4) - IMAP Subscribe Remote Overflow

Mercur Messaging 2005 Windows 2000 SP4 - IMAP Subscribe Remote Overflow !/usr/bin/python Remote exploit for the stack overflow vulnerability in Mercur Messaging 2005 SP3 IMAP service. The exploit was tested on windows 2000 server SP4 in a Vmware environment. At the time of overflow EBX points to...

Helix Server 11.0.1 (Windows 2000 SP4) - Remote Heap Overflow

/usr/bin/python Remote exploit for the vulnerability in Helix server v11.0.1 as described at http://gleg.net/helix.txt The exploit spawns a shell on TCP port 4444 and connects to it. At the time of overflow we control EAX which is used in a call as follows 00420C64: call dword ptr eax + 4 ECX...