samba: Client side SMB2/3 required signing can be downgraded

A flaw was found in the way Samba initiated signed DCE/RPC connections. A man-in-the-middle attacker could use this flaw to downgrade the connection to not use signing and therefore impersonate the server...

Multiple Command Injection Vulnerabilities in Veil-Evasion RPC

Veil-Evasion is a suite of tools designed specifically for generating kill-free MSFPAYLOAD. A command injection vulnerability exists in Veil-Evasion versions 2.5.2 through 2.24, which can be exploited by an attacker to execute arbitrary commands in an affected application...

Apache XML-RPC Remote Code Execution Vulnerability

Apache XML-RPC is the United States Apache Apache Software Foundation of a simple, lightweight set of RPC communication through the HTTP protocol specification. A remote code execution vulnerability exists in Apache XML-RPC, which can be exploited by an attacker to execute arbitrary code in an...

The vulnerability of the Windows operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the Remote Procedure Call LRPC of Microsoft allows attackers to circumvent security restrictions. This vulnerability relates to the leakage of messages sent by the LRPC server to clients, if those messages contain data that is not intended for such messages. RPC considers suc...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub41162C” at address “0x00411688”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x13 “0x0040C95C”. This vulnerability allows a malicious attacker to execute arbitrary code with...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub40FF03” at address “0x004100E0”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of RPC calls numbered 0x11 “0x0040C4CB”. This vulnerability allows a malicious attacker to execute arbitrary code with...

The vulnerability of the Linter Bastion database management system allows a malicious individual to cause errors in the program’s operation or execute arbitrary code.

The design of the RPC server linstmgr.exe is based on the assumption that client applications will always send valid data and behave as expected. Sending invalid data may cause errors in the program’s operation or may execute arbitrary code...

The vulnerability of the Linter Bastion database management system allows a malicious individual to trigger a service failure.

In the “sub416B78” procedure, there is no check for the correctness of input data. This may lead to buffer overflows when processing the RPC call with the number 0x10 “0x0040C284”, resulting in corrupted data that is necessary for the proper functioning of the application. This vulnerability allo...

The vulnerability of the Linter Bastion database management system allows a malicious individual to control any service on a remote computer.

The RPC call with number 0x0A "0x0040AF25" allows a malicious individual to control any Windows service on a remote computer where linstmgr.exe is running, even though they have no authority to do so. This could enable the malicious individual to interfere with the normal operation of the service...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub0040F059” at address “0x0040F092”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x15 “0x0040CD91”. This vulnerability allows a malicious attacker to execute arbitrary code wi...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges or to disrupt the operation of the program.

In the procedure “sub410855” for addresses “0x00410C32”, “0x00410D0C”, “0x00410D4B”, “0x00410DCF”, “0x00410EB1”, “0x00410F98”, “0x00410FEC”, “0x00411141”, there is no verification of the correctness of the input data. This may lead to buffer overflows during the processing of RPC calls with numbe...

The vulnerability of the Linter Bastion database management system allows a malicious individual to disrupt the normal operation of the database management system.

The RPC call with number 0x12 "0x0040C73C" allows a malicious individual to alter the configuration of the kernel startup file of the Linter Bastion database management system, thereby potentially disrupting the normal operation of the database management system...

The vulnerability of the Linter Bastion database management system allows a malicious individual to replace and execute the executable file.

If the database management system Linter Bastion was installed without the “loltp.exe” module being installed, a malicious individual can place any executable file named “loltp.exe” in a directory that will be scanned by the executable file loader. Then, using RPC calls with numbers 0x1A...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub40FBE6” at address “0x0040FC0A”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x1A “0x0040DB0F”. This vulnerability allows a malicious attacker to execute arbitrary code with...

The vulnerability of the Linter Bastion database management system allows a malicious individual to increase their privileges.

The vulnerability in the RPC server linstmgr.exe was due to an erroneous assumption that only users with administrative privileges have access to connect to the server. This oversight, combined with the fact that the RPC server operates with the “SYSTEM” user account, allows for an increase in...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary services on a remote computer.

RPC call of number 0x08 "0x0040AB4E" allows a malicious individual to execute an arbitrary Windows service on a remote computer where linstmgr.exe is running, without having the necessary permissions. As a result, a service with vulnerabilities can be executed by the malicious individual, and tho...

The vulnerability of the Linter Bastion database management system allows a malicious individual to disrupt the normal operation of the database management system.

The RPC call with number 0x19 "0x0040D8F0" allows a malicious individual to alter the configuration of the kernel startup file of the Linter Bastion database management system, thereby potentially disrupting the normal operation of the database management system...

Six Apart Movable Type Pro and Advanced SQL Injection Vulnerabilities

Six Apart Movable Type MT is a blogging system from Six Apart Inc. in the U.S. Pro and Advanced are the professional and advanced versions of the system, respectively. A SQL injection vulnerability exists in Six Apart MT Pro and Advanced. The vulnerability can be exploited to execute arbitrary SQ...

CVE-2016-1543

The RPC API in the RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure...

CVE-2016-1542

The RPC API in RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure...