CVE-2007-2139

CVE-2007-2139 is a real vulnerability affecting CA BrightStor ARCserve Media Server (and related BrightStor ARCserve Backup/Enterprise components). Connected sources describe a stack-based buffer overflow in the MediaSrv SUN RPC handling caused by insufficient boundary checks when processing craf...

CA BrightStor ARCserve Backup Multiple Vulnerabilities (QO87569)

According to its version, the installation of BrightStor ARCserve Backup on the remote host is affected by multiple vulnerabilities in the Mediasrv RPC service. First, the service does not properly sanitize a string given as an argument to different RPC functions prior to calling the function...

CA BrightStor ARCserve Backup Media Server RPC service buffer overflows

Overview The CA BrightStor ARCserve Backup Media Server contains multiple buffer overflows in the RPC service, which can allow a remote, unauthenticated attacker to execute arbitrary code with elevated privileges. Description BrightStor ARCserve Backup is a backup and data retention tool that...

Integer overflow

Integer overflow in the RPC library in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to execute arbitrary code via crafted requests to portmap...

CVE-2007-0736

Integer overflow in the RPC library in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to execute arbitrary code via crafted requests to portmap...

CVE-2007-0736

CVE-2007-0736 describes an integer overflow in the Libinfo RPC library on Apple Mac OS X 10.3.9–10.4.9. The underlying issue in the RPC portmap handling allows remote attackers to execute arbitrary code. Documents consistently cite this as a remote code execution via crafted requests to portmap, ...

CVE-2007-0736

Integer overflow in the RPC library in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to execute arbitrary code via crafted requests to portmap...

[Full-disclosure] [MU-200704-01] Pre-Authentication Vulnerability in Mac OS X RPC runtime library

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pre-Authentication Vulnerability in Mac OS X RPC runtime library MU-200704-01 April 20, 2007 http://labs.musecurity.com/advisories.html Affected Product/Versions: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.9, Mac OS X Server v10.4.9...

Apple Mac OS X RPC portmapper service integer overflow

Integer overflow during AUTHUNIX RPC uahtneitcation...

Microsoft Windows - DNS RPC Remote Buffer Overflow (2)

Exploit v2 features: - Target Remote port 445 by default but requires auth - Manual target for dynamic tcp port without auth - Automatic search for dynamic dns rpc port - Local and remote OS fingerprinting auto target - Windows 2000 server and Windows 2003 server Spanish supported by default -...

MS Windows DNS RPC Remote Buffer Overflow Exploit (port 445) v2

Exploit for unknown platform in category remote exploits =============================================================== MS Windows DNS RPC Remote Buffer Overflow Exploit port 445 v2 =============================================================== Exploit v2 features: - Target Remote port 445 by...

MS Windows DNS RPC Remote Buffer Overflow Exploit (port 445) v2

No description provided by source. Exploit v2 features: - Target Remote port 445 by default but requires auth - Manual target for dynamic tcp port without auth - Automatic search for dynamic dns rpc port - Local and remote OS fingerprinting auto target - Windows 2000 server and Windows 2003 serve...

Microsoft Windows - DNS RPC Remote Buffer Overflow (2)

Microsoft Windows - DNS RPC Remote Buffer Overflow 2 Exploit v2 features: - Target Remote port 445 by default but requires auth - Manual target for dynamic tcp port without auth - Automatic search for dynamic dns rpc port - Local and remote OS fingerprinting auto target - Windows 2000 server and...

Microsoft Windows DNS服务器RPC接口远程栈溢出漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows DNS服务器的RPC接口在处理畸形请求时存在栈溢出漏洞，远程攻击者可能利用此漏洞获取服务器的管理权限。 如果远程攻击者能够向有漏洞的系统发送特制的RPC报文的话，就可以触发这个溢出，导致以DNS服务的安全环境执行任意指令（默认为Local SYSTEM）。 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1 Microsoft Windows 2000SP4 临时解决方法：...

msdns_zonename.rb.txt

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...

mswin-dns-overflow.txt

/ Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows DNS DnssrvQuery Stack Overflow CVE-2007-1748 Description: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary erro...

mswin-dns-meta.txt

!/usr/bin/python Remote exploit for the 0day Windows DNS RPC service vulnerability as described in http://www.securityfocus.com/bid/23470/info. Tested on Windows 2000 SP4. The exploit if successful binds a shell to TCP port 4444 and then connects to it. Cheers to metasploit for the first exploit...

MS Windows DNS DnssrvQuery Remote Stack Overflow Exploit

No description provided by source. / Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows DNS DnssrvQuery Stack Overflow CVE-2007-1748 Description: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerabili...

MS Windows DNS DnssrvQuery Remote Stack Overflow Exploit-vulnerability warning-the black bar safety net

/ Copyright c 2 0 0 7 devcode ^^ D E V C O D E ^^ Windows DNS DnssrvQuery Stack Overflow CVE-2 0 0 7-1 7 4 8 Description: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a...

Hidden DCERPC Service Discovery

This module will query the endpoint mapper and make a list of all ncacntcp RPC services. It will then connect to each of these services and use the management API to list all other RPC services accessible on this port. Any RPC service found attached to a TCP port, but not listed in the endpoint...