HP-UX PHNE_29449 : s700_800 11.22 ONC/NFS General Release/Performance Patch

s700800 11.22 ONC/NFS General Release/Performance Patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a...

HP-UX PHNE_30808 : HP-UX Running RPC, Remote Denial of Service (DoS) (HPSBUX01020 SSRT2384 rev.2)

s700800 11.04 VVOS ONC/NFS General Release/Perf Patch : A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a denial of service DoS. %NASLMINLEVEL 70300 C Tenable Network Security...

Mandrake Linux Security Advisory : python (MDKSA-2005:035)

A flaw in the python language was found by the development team. The SimpleXMLRPCServer library module could permit remote attackers unintended access to internals of the registered object or it's module, or possibly even other modules. This only affects python XML-RPC servers that use the...

CVE-2003-1079

Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service memory consumption via certain arguments in RPC calls that cause large amounts of memory to be allocated...

CVE-2002-1584

Technical details about CVE-2002-1584 are not publicly disclosed in the provided documents; no concrete information on affected products, root cause, or remediation is available here. Monitor for updates.

CVE-2003-1079

The CVE-2003-1079 entry concerns a vulnerability in UDP RPC used by Solaris (SPARC: 2.5.1–9; x86: 2.5.1–8). The underlying issue is that certain RPC call arguments can cause excessive memory allocation, enabling remote attackers to trigger a denial of service via memory consumption. The descripti...

CVE-2002-1584

Unknown vulnerability in the AUTHDES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges...

Python: Arbitrary code execution through SimpleXMLRPCServer

Background Python is an interpreted, interactive, object-oriented, cross-platform programming language. Description Graham Dumpleton discovered that XML-RPC servers making use of the SimpleXMLRPCServer library that use the registerinstance method to register an object without a dispatch method ar...

CVE-2003-1079: Undefined Security Weakness

Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service memory consumption via certain arguments in RPC calls that cause large amounts of memory to be allocated...

CVE-2002-1584: Undefined Security Weakness

Unknown vulnerability in the AUTHDES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges...

[SECURITY] [DSA 666-1] New Python2.2 packages fix unauthorised XML-RPC internals access

-------------------------------------------------------------------------- Debian Security Advisory DSA 666-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 666-1] New Python2.2 packages fix unauthorised XML-RPC internals access

-------------------------------------------------------------------------- Debian Security Advisory DSA 666-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2005 http://www.debian.org/security/faq -...

python -- SimpleXMLRPCServer.py allows unrestricted traversal

According to Python Security Advisory PSF-2005-001, The Python development team has discovered a flaw in the SimpleXMLRPCServer library module which can give remote attackers access to internals of the registered object or its module or possibly other modules. The flaw only affects Python XML-RPC...

Samba: Integer overflow

Background Samba is a freely available SMB/CIFS implementation which allows seamless interoperability of file and print services to other SMB/CIFS clients. Description Samba contains a bug when unmarshalling specific MS-RPC requests from clients. Impact A remote attacker may be able to execute...

Immunity Canvas: MS04_031

Name| ms04031 ---|--- CVE| CVE-2004-0206 Exploit Pack| CANVAS Description| Microsoft Windows NetDDE RPC Overflow Notes| CVE Name: CVE-2004-0206 VENDOR: Microsoft MSADV: MS04-031 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/MS04-031.mspx CVE Url:...

CVE-2004-0569

The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service system crash via a malicious message, possibly related to improper length values...

CVE-2004-0569

CVE-2004-0569 corresponds to a RPC Runtime Library vulnerability in Windows NT 4.0 that allows remote attackers to read active memory or trigger a denial of service via specially crafted RPC messages. The underlying issue is an unchecked buffer in the RPC Runtime Library when processing messages,...

CVE-2004-0569: Undefined Security Weakness

The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service system crash via a malicious message, possibly related to improper length values...

[VulnWatch] BindView Advisory: Memory Leak and DoS in NT4 RPC server

BindView Security Advisory -------- Remote anonymous attackers can read large amounts of memory from and/or crash any NT4 RPC server Issue Date: 12Oct2004 Contact: [email protected] Author: Todd Sabin Topic: A flaw in rpcmgmtinqstats allows attackers to retrieve memory from and crash NT4 RPC...

MS04-029: Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350)

The remote Windows operating system contains a bug in RPC Runtime Library. RPC is a protocol used by Windows to provide an inter-process communication mechanism that allows a program running on one system to access services on another one. A bug affecting the implementation of this protocol could...