7689 matches found
CVE-2008-3838
Unspecified vulnerability in the NFS Remote Procedure Calls RPC zones implementation in Sun Solaris 10 and OpenSolaris before snv88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of...
Denial of service
Unspecified vulnerability in the NFS Remote Procedure Calls RPC zones implementation in Sun Solaris 10 and OpenSolaris before snv88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of...
CVE-2008-3838
CVE-2008-3838 affects Sun Solaris 10 and OpenSolaris prior to snv_88. The vulnerability resides in the NFS RPC zones implementation, enabling local administrators of non-global zones to read/modify NFS traffic across arbitrary non-global zones, potentially enabling file modifications or a denial ...
CVE-2008-3838
Unspecified vulnerability in the NFS Remote Procedure Calls RPC zones implementation in Sun Solaris 10 and OpenSolaris before snv88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of...
Sun Solaris NFS RPC本地拒绝服务漏洞
BUGTRAQ ID:30853 CNCAN ID：CNCAN-2008082707 Sun Solaris是一款商业性质的操作系统。 Sun Solaris NFS远程过程调用域实现存在安全问题，本地拥有管理员权限的攻击者可以利用漏洞在非全局域中截获或破坏到其他非全局域的通信。 可对受此漏洞影响的非全局域的NFS服务进行拒绝服务攻击。目前没有详细漏洞细节提供。 Sun Solaris 10x86 Sun Solaris 10sparc Sun Solaris 10.0x86 Sun Solaris 10 Sun OpenSolaris build snv87 Sun OpenSolar...
The TrustedApplicationsFilter doesn't work for /rpc/* URLs
The sessioninview filter doesn't cover rpc URLs I think because this meant that RPC actions didn't show up in the DB until the response what completely written This means that lazily loaded data returned by the HibernateTrustedApplicationDao causes problems when the TrustedApplicationsFilter trie...
The TrustedApplicationsFilter doesn't work for /rpc/* URLs
The sessioninview filter doesn't cover rpc URLs I think because this meant that RPC actions didn't show up in the DB until the response what completely written This means that lazily loaded data returned by the HibernateTrustedApplicationDao causes problems when the TrustedApplicationsFilter trie...
The TrustedApplicationsFilter doesn't work for /rpc/* URLs
The sessioninview filter doesn't cover rpc URLs I think because this meant that RPC actions didn't show up in the DB until the response what completely written This means that lazily loaded data returned by the HibernateTrustedApplicationDao causes problems when the TrustedApplicationsFilter trie...
Solaris <= 10 LPD Arbitrary File Delete Exploit (metasploit)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
Preemptive Protection against Sun Solaris rpc.ypupdated Command Injection Vulnerability
A command injection vulnerability exists in Sun Solaris Network Information Service NIS. Sun Solaris provides its NIS services through the SUN-RPC remote procedure call RPC mechanism. A remote attacker may exploit this issue to inject and execute arbitrary code on a vulnerable system via a...
Wordpress XML-RPC接口非授权操作漏洞
BUGTRAQ ID: 27669 CVECAN ID: CVE-2008-0664 WordPress是一款免费的论坛Blog系统。 如果启用了注册的话，WordPress的XML-RPC实现（xmlrpc.php）就无法对页面所设置的posttype执行检查，这允许远程攻击者向论坛提交恶意请求更改编辑其他用户的张贴。 WordPress 2.3.2 临时解决方法： 禁止创建帐号，或临时删除xmlrpc.php文件。 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1601-1）以及相应补丁: DSA-1601-1：New wordpress...
DSA-1601-1 wordpress - several vulnerabilities
Bulletin has no description...
NULL pointer in the HTTP/XML-RPC service of Crysis 1.21
Luigi Auriemma Application: Crysis http://www.ea.com/crysis/home.jsp Versions: = 1.21 1.1.1.6156 showed as gamever Platforms: Windows Bug: NULL pointer in the HTTP/XML-RPC service Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web:...
Crysis games server DoS
NULL pointer dereference on oversized request to HTTP/XML-RPC interface...
Debian DSA-1597-2 : mt-daapd - multiple vulnerabilities
Three vulnerabilities have been discovered in the mt-daapd DAAP audio server also known as the Firefly Media Server. The Common Vulnerabilities and Exposures project identifies the following three problems : - CVE-2007-5824 Insufficient validation and bounds checking of the Authorization: HTTP...
[SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1597-1 [email protected] http://www.debian.org/security/ Devin Carraway June 12, 2008 http://www.debian.org/security/faq -...
DSA-1597-1 mt-daapd - several vulnerabilities
Bulletin has no description...
MS Windows XP/2K Lsasrv.dll Remote Universal Exploit (MS04-011)
No description provided by source. / HOD-ms04011-lsasrv-expl.c: MS04011 Lsasrv.dll RPC buffer overflow remote exploit Version 0.1 coded by .:: houseofdabus ::. ------------------------------------------------------------------- Usage: expl target victim IP bindport connectback IP options Targets:...
MS Windows Lsasrv.dll RPC Remote Buffer Overflow Exploit (MS04-011)
No description provided by source. include windows.h pragma commentlib,"mpr.lib" pragma commentlib, "ws232" unsigned char scode = "\xEB\x10\x5B\x4B\x33\xC9\x66\xB9\x25\x01\x80\x34\x0B\x99\xE2\xFA" "\xEB\x05\xE8\xEB\xFF\xFF\xFF" "\x70\x62\x99\x99\x99\xC6\xFD\x38\xA9\x99\x99\x99\x12\xD9\x95\x12"...
CA ARCserve Backup caloggerd opcode 79 buffer overflow
Added: 05/30/2008 CVE: CVE-2008-2242 BID: 29283 OSVDB: 45368 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. The logger daemon caloggerd is an RPC service which handles event logs. Problem A buffer overflow vulnerability in caloggerd allows...