PEAR XML_RPC Remote Code Execution Vulnerability

GulfTech Security Research June 29th, 2005 Vendor : The PEAR Group URL : http://pear.php.net/package/XMLRPC/ Version : PEAR XMLRPC 1.3.0 && Earlier Risk : Remote Command Execution Description: PEAR XMLRPC is a PHP implementation of the XML-RPC web RPC protocol, and used by many different develope...

[SA15883] phpAdsNew XML-RPC PHP Code Execution Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Code Injection

tested and working /str0ke !/usr/bin/perl ilo-- This program is no GPL or has nothing to do with FSF, but some code was ripped from romansoft.. sorry, too lazy! xmlrpc bug by James from GulfTech Security Research. http://pear.php.net/bugs/bug.php?id=4692 xmlrpc drupal exploit, but James sais xoop...

XML-RPC Library <= 1.3.0 (xmlrpc.php) Remote Code Injection Exploit

Exploit for unknown platform in category web applications =================================================================== XML-RPC Library \n"; print "special chars allowed are / and - \n\n"; read command line options my $options = GetOptions general options 'host=s' = $host, input host to...

[SA15855] PostNuke XML-RPC Library PHP Code Execution Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

WordPress 1.5.1.2 - xmlrpc Interface SQL Injection

WordPress 1.5.1.2 - xmlrpc Interface SQL Injection !/usr/bin/perl -w sorry for the late posting, had to test it. /str0ke Wordpress 1.5.1.2 Strayhorn // XMLRPC Interface SQL Injection By James Bercegay // http://www.gulftech.org/ // June 21 2005 Quick and dirty proof of concept that uses the XML R...

[Full-disclosure] [DRUPAL-SA-2005-003] Drupal 4.6.2 / 4.5.4 fixes critical XML-RPC issue

---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2005-003 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2005-003 Date: 2005-jun-29 Security risk: highly critical Impact: system...

Microsoft Message Queuing buffer overflow

Buffer overflow in RPC-based protocol...

CVE-2005-0771

VERITAS Backup Exec Server beserver.exe 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106...

CVE-2005-0771: Undefined Security Weakness

VERITAS Backup Exec Server beserver.exe 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106...

XML-RPC for PHP Remote Code Injection Vulnerability

Description XML-RPC for PHP is affected by a remote code-injection vulnerability. An attacker may exploit this issue to execute arbitrary commands or code in the context of the webserver. This may facilitate various attacks, including unauthorized remote access. XML-RPC for PHP 1.1 and prior...

PHP XML-RPC Arbitrary Code Execution

This module exploits an arbitrary code execution flaw discovered in many implementations of the PHP XML-RPC module. This flaw is exploitable through a number of PHP web applications, including but not limited to Drupal, Wordpress, Postnuke, and TikiWiki. Module Options msf use...

CVE-2002-1835: Undefined Security Weakness

The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the device...

[VulnWatch] iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Server Remote Registry Access Vulnerability

Veritas Backup Exec Server Remote Registry Access Vulnerability iDEFENSE Security Advisory 06.23.05 www.idefense.com/application/poi/display?id=269&type=vulnerabilities June 23, 2005 I. BACKGROUND VERITAS Backup Exec is an advanced backup and restore solution for Microsoft Windows server...

CVE-2005-0771

VERITAS Backup Exec Server beserver.exe 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106...

Microsoft Windows - 'SMB' Transaction Response Handling (MS05-011)

/ Windows SMB Client Transaction Response Handling MS05-011 CAN-2005-0045 This works against Win2k cybertronicatgmxdotnet http://www.livejournal.com/users/cybertronic/ usage: gcc -o mssmbpoc mssmbpoc.c ./mssmbpoc connect via \ip and hit the netbios folder! STOP: 0x00000050...

CVE-2005-1792

Memory leak in Windows Management Instrumentation WMI service allows attackers to cause a denial of service memory consumption and crash by creating security contexts more quickly than they can be cleared from the RPC cache...

CVE-2005-1792

The connected Seebug document confirms CVE-2005-1792 affects Microsoft Windows XP via the WMI service. The vulnerability allows remote attackers to trigger a denial-of-service by causing memory leaks and system unresponsiveness because security contexts are created faster than RPC cache entries c...

CVE-2005-1792

Memory leak in Windows Management Instrumentation WMI service allows attackers to cause a denial of service memory consumption and crash by creating security contexts more quickly than they can be cleared from the RPC cache...

CVE-2005-1792: Undefined Security Weakness

Memory leak in Windows Management Instrumentation WMI service allows attackers to cause a denial of service memory consumption and crash by creating security contexts more quickly than they can be cleared from the RPC cache...