9313 matches found
[EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability
Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability Release Date: October 11, 2005 Date Reported: August 3, 2005 Severity: High Remote Code Execution with Authentication Medium Privilege Escalation to SYSTEM Vendor: Microsoft Systems Affected: Windows NT 4.0 Windows 2000 Windows XP eEy...
MS05-046: Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution (899589) (uncredentialed check)
The remote host contains a version of the Client Service for NetWare that is vulnerable to a buffer overflow. An attacker may exploit this flaw by connecting to the NetWare RPC service possibly over IP and triggering the overflow by sending a malformed RPC request. C Tenable Network Security, Inc...
MS-RPC over CIFS Inspection Properties (CVE-2003-0533)
DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...
Advisory: WZCS vulnerabilities
Summary "The Wireless Zero Configuration system service enables automatic configuration for IEEE 802.11 wireless adapters for wireless communication." There are two closely related vulnerabilities: Once the "View Available Wireless Networks" dialogue box is opened the Pair-wise Master Keys of the...
Debian DSA-842-1 : egroupware - missing input sanitising
Stefan Esser discovered a vulnerability in the XML-RPC libraries which are also present in egroupware, a web-based groupware suite, that allows injection of arbitrary PHP code into eval statements. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...
GLSA-200509-19 : PHP: Vulnerabilities in included PCRE and XML-RPC libraries
The remote host is affected by the vulnerability described in GLSA-200509-19 PHP: Vulnerabilities in included PCRE and XML-RPC libraries PHP makes use of a private copy of libpcre which is subject to an integer overflow leading to a heap overflow see GLSA 200508-17. It also ships with an XML-RPC...
Mandrake Linux Security Advisory : php-pear (MDKSA-2005:146)
A problem was discovered in the PEAR XML-RPC Server package included in the php-pear package. If a PHP script which implements the XML-RPC Server is used, it would be possible for a remote attacker to construct an XML-RPC request which would cause PHP to execute arbitrary commands as the 'apache'...
[SECURITY] [DSA 842-1] New egroupware packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 842-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 842-1] New egroupware packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 842-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2005 http://www.debian.org/security/faq -...
DSA-842-1 egroupware - missing input sanitising
Bulletin has no description...
Ruby library contains vulnerable default value
Overview Ruby includes a vulnerable default value that may be used to bypass security restrictions and execute arbitrary code. Description Ruby is vulnerable to an attack on applications using the XML-RPC services via XMLRPC.iPIMethods, due to an insecure default value in utils.rb. Any program or...
PHP: Vulnerabilities in included PCRE and XML-RPC libraries
Background PHP is a general-purpose scripting language widely used to develop web-based applications. It can run inside a web server using the modphp module or the CGI version of PHP, or can run stand-alone in a CLI. Description PHP makes use of a private copy of libpcre which is subject to an...
DriverStudio Remote Control Authentication Bypass Vulnerability
DriverStudio Remote Control Authentication Bypass Vulnerability by cocoruder page:http://ruder.cdut.net email:[email protected] && [email protected] Last Update:2005.09.10 class:design error date:10/9/2005 Remote:yes local:yes Product Affected: =NuMega.DriverStudio.v2.7 I test successfully o...
PBLang <= 4.65 Remote Command Execution Exploit (2)
Exploit for unknown platform in category web applications =================================================== PBLang php.exe ..\www\r57pblang465.php localhost /pbl/ "pblcookie732128=Pe ng0; PBLsecid=a4c2f845c002ac54f5751440647f3c91;" Peng0 PrSrS $ARGV = $SERVER'argv'; global $ARGV; ifcount$ARGV =...
GLSA-200508-20 : phpGroupWare: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200508-20 phpGroupWare: Multiple vulnerabilities phpGroupWare improperly validates the 'mid' parameter retrieved via a forum post. The current version of phpGroupWare also adds several safeguards to prevent XSS issues, and disable...
Debian DSA-798-1 : phpgroupware - several vulnerabilities
Several vulnerabilities have been discovered in phpgroupware, a web-based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2498 Stefan Esser discovered another vulnerability in the XML-RPC libraries that allows...
GLSA-200508-21 : phpWebSite: Arbitrary command execution through XML-RPC and SQL injection
The remote host is affected by the vulnerability described in GLSA-200508-21 phpWebSite: Arbitrary command execution through XML-RPC and SQL injection phpWebSite uses an XML-RPC library that improperly handles XML-RPC requests and responses with malformed nested tags. Furthermore, 'matrixkiller'...
[SECURITY] [DSA 798-1] New phproupware packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 798-1 [email protected] http://www.debian.org/security/ Martin Schulze September 2nd, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 798-1] New phproupware packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 798-1 [email protected] http://www.debian.org/security/ Martin Schulze September 2nd, 2005 http://www.debian.org/security/faq -...