7769 matches found
Windows NTLM Weak Nonce Vulnerability
No description provided by source. Windows SMB NTLM Authentication Weak Nonce Vulnerability Security Advisory Hernan Ochoa [email protected] - Agustin Azubel [email protected] Title: Windows SMB NTLM Authentication Weak Nonce Vulnerability Advisory ID: OCHOA-2010-0209 Advisory UR...
Microsoft Print Spooler Service Impersonation Vulnerability
No description provided by source. $Id: ms10061spoolss.rb 11766 2011-02-17 19:22:11Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Solaris sadmind Command Execution
No description provided by source. $Id: sadmindexec.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft Server Service NetpwPathCanonicalize Overflow
No description provided by source. $Id: ms06040netapi.rb 11762 2011-02-17 03:56:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Xi Graphics Maximum CDE 1.2.3,TriTeal TED CDE 4.3,Sun Solaris <= 2.5.1 ToolTalk RPC Service Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/122/info An implementation fault in the ToolTalk object database server allows a remote attacker to run arbitrary code as the superuser on hosts supporting the ToolTalk service. The affected program runs on many popular...
IBM AIX 3.2/4.1,SCO Unixware <= 7.1.1,SGI IRIX <= 5.3,Sun Solaris <= 2.5.1
No description provided by source. source: http://www.securityfocus.com/bid/127/info Statd is the RPC NFS status daemon. It is used to communicate status information to other services or host. The version of statd shipped with many unix implementations contains a buffer overflow condition. This...
PHP <= 5.3.2 xmlrpc Extension Multiple Remote Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38708/info PHP's xmlrpc extension library is prone to multiple denial-of-service vulnerabilities because it fails to properly handle crafted XML-RPC requests. Exploiting these issues allows remote attackers to cause...
Zope 2.x Incorrect XML-RPC Request Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5806/info A vulnerability has been reported for Zope 2.5.1 and earlier. Reportedly, Zope does not handle XML-RPC requests properly. Specially crafted XML-RPC requests may cause Zope to respond to a request with an error...
Solaris ypupdated Command Execution
No description provided by source. $Id: ypupdatedexec.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Snort 2 DCE/RPC preprocessor Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Samba SetInformationPolicy AuditEventsInfo Heap Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Computer Associates BrightStor ARCserve Backup <= 11.5 mediasvr caloggerd Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24017/info Computer Associates BrightStor ARCserve Backup is prone to multiple denial-of-service vulnerabilities due to memory-corruption issues caused by errors in processing arguments passed to RPC procedures. A remote...
Microsoft Windows DNS RPC - Remote Buffer Overflow Exploit (port 445) (2)
No description provided by source. Exploit v2 features: - Target Remote port 445 by default but requires auth - Manual target for dynamic tcp port without auth - Automatic search for dynamic dns rpc port - Local and remote OS fingerprinting auto target - Windows 2000 server and Windows 2003 serve...
CA Arcserve D2D GWT RPC Credential Information Disclosure
No description provided by source. $Id: caarcserverpcauthbypass.rb 13467 2011-08-01 21:20:29Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Microsoft ASP.NET 1.0/1.1 RPC/Encoded Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14217/info ASP.NET is susceptible to a remote denial of service vulnerability. This issue is due to the possibility of causing an infinite loop on the server when handling RPC/encoded requests. This issue presents itself...
Trend Micro ServerProtect 5.58 SpntSvc.EXE Remote Stack Based Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23868/info Trend Micro ServerProtect is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...
Microsoft Windows XP/2000/NT 4 RPC Service Denial of Service Vulnerability (4)
No description provided by source. source: http://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the RPC service will be disabled. This...
Microsoft DNS RPC Service extractQuotedChar() Overflow (TCP)
No description provided by source. $Id: ms07029msdnszonename.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
Trend Micro ServerProtect eng50.dll - Remote Stack Overflow Exploit
No description provided by source. / Copyright c 2007 devcode ^^ D E V C O D E ^^ Trend Micro ServerProtect eng50.dll Stack Overflow CVE-2007-1070 Description: A boundary error within a function in eng50.dll can be exploited to cause a stack-based buffer overflow via a specially crafted RPC reque...
EMC NetWorker <= 7.6 sp3 Denial of Service
No description provided by source. Luigi Auriemma Application: EMC NetWorker Legato http://www.emc.com/backup-and-recovery/networker/networker.htm Versions: = 7.6 sp3 7.6.3.2 Build 860 Platforms: AIX, HP-UX, Linux, Solaris, Windows Bug: invalid read access Exploitation: remote Date: 14 Mar 2012...