RhinoSoft Serv-U FTPd Server 3.x/4.x/5.x - 'MDTM' Remote Overflow

/ exservu.c - Serv-U FTPD 3.x/4.x/5.x "MDTM" Command remote overflow exploit Copyright c SST 2004 All rights reserved. Public version BUG find by bkbll [email protected], cool! :ppPPppPPPpp :D code by Sam and 2004/01/07 Revise History: 2004/01/14 add rebind shellcode : we can bind shellport at...

[SECURITY] [DSA 434-1] New gaim packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 434-1 [email protected] http://www.debian.org/security/ Martin Schulze February 5th, 2004 http://www.debian.org/security/faq -...

lftp <= 2.6.9 Remote Stack based Overflow Exploit

Exploit for linux platform in category remote exploits ================================================= lftp -p -r -t -f : create index.html -p : run a fake lftp server on port default: 80 -r : return address you would like to u...

Apache mod_gzip (with debug_mode) 1.2.26.1a - Remote Overflow

/ \ exploit code for modgzip with debugmode include include include include include sys/s...

NIPrint LPD-LPR Print Server String Handling Remote Overflow

A vulnerability in the NIPrint could allow an attacker to remotely overflow an internal buffer which could allow code execution. include"compat.inc"; ifdescription scriptid11926; scriptversion"1.17"; scriptcveid"CVE-2003-1141"; scriptbugtraqid8968; scriptnameenglish:"NIPrint LPD-LPR Print Server...

NIPrint LPD-LPR Print Server 4.10 - Remote Overflow

/ \ remote exploit for NIPrint LPD-LPR Print Server Version include else include include include include include include include include endif include // JMP ESP ADDRESS in Win XP 5.1.2600 define RET 0x77F5801c define SHELL 7788 char shellcode =...

[SECURITY] [DSA 396-1] New thttpd packages fix information leak, DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 396-1 [email protected] http://www.debian.org/security/ Martin Schulze October 29th, 2003 http://www.debian.org/security/faq -...

Remote overflow in thttpd

----------------------------------------------------------------------- Texonet Security Advisory 20030908 ----------------------------------------------------------------------- Advisory ID : TEXONET-20030908 Authors : Joel Soderberg and Christer Oberg Issue date : Monday, September 8, 2003...

Cfengine cfservd ReceiveTransaction Function Remote Overflow (intrusive check)

The remote Cfserver seems to be vulnerable to a remote buffer overflow bug. Such a bug might be exploited by an attacker to execute arbitrary code on this host, with the privileges cfservd is running with. C Tenable Network Security, Inc. script based on exploit code by kokaninATdtors.net...

Linux pam_lib_smb < 1.1.6 - '/bin/login' Remote Overflow

/ Linux pamlibsmb include include include include include include include include include / first negotiate / / packet capture by ethereal / char packet1 = 0xff, 0xfd, 0x03, 0xff, 0xfb, 0x18, 0xff, 0xfb, 0x1f, 0xff, 0xfb, 0x20, 0xff, 0xfb, 0x21, 0xff, 0xfb, 0x22, 0xff, 0xfb, 0x27, 0xff, 0xfd, 0x0...

Gopherd 3.0.5 - FTP Gateway Remote Overflow

Gopherd 3.0.5 - FTP Gateway Remote Overflow / UMN gopherd2.x.x/3.x.x: remote "ftp gateway" buffer overflow. by: vade79/v9 v9 at fakehalo.deadpig.org fakehalo/realhalo three years since last audit, code is a little more secure. but, still found a few potentially exploitable situations. this exploi...

TrueType Font Server for X11 (xfstt) Malformed Packet Remote Overflow

The remote X Font Service for TrueType xfstt is vulnerable to a remote buffer overflow which may lead to code execution as root or a denial of service. C Tenable Network Security, Inc. Ref: Date: Tue, 15 Jul 2003 00:38:20 +0200 From: ruben unteregger To: [email protected] Subject: xfstt-1...

Microsoft Windows Media Services - 'nsiislog.dll' Remote Overflow

include include include include include char hostName = NULL; unsigned char shellcode= "\x90\xeb\x03\x5d\xeb\x05\xe8\xf8\xff\xff\xff\x83\xc5\x15\x90\x90" "\x90\x8b\xc5\x33\xc9\x66\xb9\x10\x03\x50\x80\x30\x97\x40\xe2\xfa" "\x7e\x8e\x95\x97\x97\xcd\x1c\x4d\x14\x7c\x90\xfd\x68\xc4\xf3\x36"...

Yahoo Messenger 5.5 - 'DSR-ducky.c' Remote Overflow

/ --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |- ^^ / include include include include include / These are the usual header files / include include include define MAXDATASIZE 555 / Max number of bytes of data /...

Dune Web Server GET Request Remote Overflow

The remote host is running a version of the Dune Web server that is older than 0.6.8. There is a flaw in this software that could be exploited by an attacker to gain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

HP-UX multiple bugs

Multiple bugs including remote overflow in rpc.yppasswdd...

Pi3Web Malformed GET Request Remote Overflow

The remote Pi3Web web server may crash when it is sent a malformed request, like : GET //?SortName=A This issue may allow the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11695;...

Xeneo Web Server 2.2.9.0 GET Request Remote Overflow DoS

Requesting an overly long URL starting with a question mark as in '/?AAAAA....AAAA' crashes the remote Xeneo web server. This script was written by BEKRAR Chaouki Xeneo Web Server 2.2.9.0 Denial of Service http://www.k-otik.com/bugtraq/04.22.Xeneo.php From : "badpack3t" To :...

Samba 2.2.x - 'nttrans' Remote Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Samba nttran...

Microsoft Windows 2000NT 4 - RPC Locator Service Remote Overflow

Microsoft Windows 2000NT 4 - RPC Locator Service Remote Overflow / rpcexp.c RPC LOCATOR Exploit Autor: Marcin Wolak mail: [email protected] Last update: 30 march 2003 / / About Compilation: What You need to compile rpcexp.c ? 1. MS Platform SDK August SDK is sufficient. 2. Compilator f.e. MS Visual...