Novell GroupWise Messenger Client (GWIM) Remote Stack Overflow

|| || ISR || Infobyte Security Research || www.infobyte.com.ar || 07.02.2008 || .:: SUMMARY Novell GroupWise Messenger Client GWIM Remote Stack Overflow Version: 2.0, It is suspected that all previous versions of Groupwise Messenger Client are vulnerable. .:: BACKGROUND Novell GroupWise Messenger...

Black Ice软件BiAnno.ocx控件远程栈溢出漏洞

BUGTRAQ ID: 29635 Annotation SDK/ActiveX是Black Ice图形工具包中的图形编辑插件。 Annotation SDK/ActiveX插件所安装的BiAnno Control ActiveX控件（BiAnno.ocx）在处理AnnoSaveToTiff函数参数时存在栈溢出漏洞，如果用户受骗访问了恶意网页并向该函数传送了超长参数的话，就可以触发这个溢出，导致执行任意指令。 Black Ice Annotation SDK/ActiveX Plug-In 10.9.5.0 临时解决方法：...

Alt-N SecurityGateway 1.00-1.01 Remote Stack Overflow Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : Alt-N SecurityGateway v1.00-1.01 ---------------------------------------- Exploit : Alt-N SecurityGateway v1.00-1.01 Remote Stack Overflow Exploit Exploit date : 11.06.2008-14.06.2008 Exploit...

Alt-N SecurityGateway 1.00-1.01 Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= Alt-N SecurityGateway 1.00-1.01 Remote Stack Overflow Exploit ============================================================= / Dreatica-FXP crew...

Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow

/ Dreatica-FXP crew ---------------------------------------- Target : Alt-N SecurityGateway v1.00-1.01 ---------------------------------------- Exploit : Alt-N SecurityGateway v1.00-1.01 Remote Stack Overflow Exploit Exploit date : 11.06.2008-14.06.2008 Exploit writer : Heretic2 [email protected]...

Novell GroupWise Messenger客户端远程栈溢出漏洞

BUGTRAQ ID: 29602 Novell GroupWise Messenger是一款基于GroupWise平台的即时交流工具。 GroupWise Messenger客户端在处理服务端的回应数据时存在漏洞，如果恶意的服务器向GroupWise Messenger客户端请求回复了特制响应的话，就可能触发栈溢出，导致执行任意指令。 Novell GroupWise Messenger 2.0.3 Novell GroupWise Messenger 2.0 Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

MySQL MaxDB Webtool <= 7.5.00.23 Remote Stack Overflow Exploit

No description provided by source. / MySQL MaxDB Webtool Remote Stack Overflow Exploit cybertronicatgmxdotnet 04/27/2005 / / / / / / / / / / / / / / / / / / / // // / // / / / / // / / // / / / / / / /, /./// // // //// // -- exploit by : cybertronic - cybertronicatgmxdotnet -- select...

freeSSHd 1.2.1 - (Authenticated) Remote Stack Overflow (PoC)

freeSSHd 1.2.1 - Authenticated Remote Stack Overflow PoC FreeSSHD remote Buffer Overflow Website: http://freesshd.com/ Version:1.2.1 Bug: Remote Buffer Overflow CD First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=00000001...

Borland InterBase畸形报文远程栈溢出漏洞

BUGTRAQ ID: 29302 Borland InterBase是跨平台的高性能商业数据库。 Borland Interbase数据库在处理发送给默认TCP 3050端口的畸形报文时存在整数溢出漏洞，最终可能导致栈溢出，允许以系统权限执行任意指令。 Solaris版本中的漏洞代码段： /----------- inetacceptconnection+0x164: srl %o5, 0x10, %o7 inetacceptconnection+0x168: ld %l0 + 0xcc, %l1 inetacceptconnection+0x16c: sth %o7, %l1 + 8...

Tumbleweed SecureTransport vcst_eu.dll ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 28666 Tumbleweed SecureTransport是安全的文件传输解决方案，允许用户通过Internet传输敏感文件。 SecureTransport的FileTransfer ActiveX控件（vcsten.dll，CLSID：38681fbd-d4cc-4a59-a527-b3136db711d3）中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 相关代码： interface IActiveXTransfer : IDispatch id0x00000007, helpstring"method TransferFile"...

Microsoft Visual FoxPro FPOLE.OCX ActiveX控件远程栈溢出漏洞（MS08-010）

BUGTRAQ ID: 25571 CVECAN ID: CVE-2007-4790 Visual FoxPro是微软发布的数据库开发工具。 Visual FoxPro的AcitveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Visual FoxPro的Foxtlib.ocx和fpole.ocx ActiveX控件没有正确地验证对FoxDoCmd方式的输入，如果用户受骗访问了恶意站点，就可能触发栈溢出，导致在用户浏览器会话中执行任意指令。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6...

aquick-overflow.txt

Application: QuickTime sub test bar = String515305, "A" foo.SetBgColor bar End Sub ===== 5Credits ===== laurent gaffié laurent.gaffieremovethisatgmaildotcom...

QuickTime 7.4.1 - 'QTPlugin.ocx' Multiple Stack Overflow Vulnerabilities

Application: QuickTime sub test bar = String515305, "A" foo.SetBgColor bar End Sub ===== 5Credits ===== laurent gaffié laurent.gaffieremovethisatgmaildotcom milw0rm.com 2008-02-13...

jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow

Application: jetAudio 7.0.5 .ASX Remote Stack Overflow Web Site: http://www.cowonamerica.com/download/ Platform: Windows Bug:Remote Stack Overflow Extension: ASX special condition: none ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits...

jetAudio 7.0.5 - .asx Remote Stack Overflow (PoC)

jetAudio 7.0.5 - .asx Remote Stack Overflow PoC Application: jetAudio = 7.0.5 .ASX Remote Stack Overflow Web Site: http://www.cowonamerica.com/download/ Platform: Windows Bug:Remote Stack Overflow Extension: ASX special condition: none ------------------------------------------------------- 1...

jetaudioasx-overflow.txt

Application: jetAudio 7.0.5 .ASX Remote Stack Overflow Web Site: http://www.cowonamerica.com/download/ Platform: Windows Bug:Remote Stack Overflow Extension: ASX special condition: none ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits...

jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow Exploit PoC

Exploit for unknown platform in category dos / poc ========================================================== jetAudio = 7.0.5 .ASX Remote Stack Overflow Exploit PoC ========================================================== Application: jetAudio = 7.0.5 .ASX Remote Stack Overflow Web Site:...

jetAudio 7.0.5 - '.asx' Remote Stack Overflow (PoC)

Application: jetAudio $file" or die "Cannot open $file: $!"; print $FILE "http://".$payload; close$FILE; print "$file has been created \n"; ===== 5Credits ===== laurent gaffié laurent.gaffieremovethisatgmaildotcom milw0rm.com 2008-02-08...

Debian Security Advisory DSA 026-1 (bind)

The remote host is missing an update to bind announced via advisory DSA 026-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow

!/usr/bin/python Bug discovered by Jun Mao of VeriSign iDefense https://www.securityfocus.com/bid/26789 CVE-2007-3901 Coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Tested on: Windows 2000 SP4 English, DirectX 7.0 4.07.00.0700...