[SA17440] b2evolution XML-RPC PHP Code Execution Vulnerabilities

TITLE: b2evolution XML-RPC PHP Code Execution Vulnerabilities SECUNIA ADVISORY ID: SA17440 VERIFY ADVISORY: http://secunia.com/advisories/17440/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: b2evolution 0.x http://secunia.com/product/2126/ DESCRIPTION: Two...

Unchecked Buffer in XP Redirector (Q810577)

The remote host is vulnerable to a flaw in the RPC redirector which can allow a local attacker to run code of its choice with the SYSTEM privileges. OpenVAS Vulnerability Test $Id: smbntms03-005.nasl 6040 2017-04-27 09:02:38Z teissa $ Description: Unchecked Buffer in XP Redirector Q810577 Authors...

Obtain list of all port mapper registered programs via RPC

This script calls the DUMP RPC on the port mapper, to obtain the list of all registered programs. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Detect CIS ports

This detects the CIS ports by connecting to the server and processing the buffer received. CIS COM+ Internet Services are RPC over HTTP tunneling and requires IIS to operate. CIS ports shouldn SPDX-FileCopyrightText: 2005 Alert4Web.com Some text descriptions might be excerpted from a referenced...

Nmap (NASL wrapper)

This plugin runs nmap to find open ports. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.14259";...

snmpXdmid overflow

The remote RPC service 100249 snmpXdmid is vulnerable to a heap overflow which allows any user to obtain a root shell on this host. SPDX-FileCopyrightText: 2001 Intranode Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Detect the HTTP RPC endpoint mapper

This detects the http-rpc-epmap service by connecting to the port 593 and processing the buffer received. This endpoint mapper provides CIS COM+ Internet Services parameters like port 135 epmap for RPC. SPDX-FileCopyrightText: 2005 Alert4Web.com Some text descriptions might be excerpted from a...

SSH Secure-RPC Weak Encrypted Authentication

You are running SSH Communications Security SSH 1.2.27 - 1.2.30. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350)

An information disclosure and denial of service vulnerability exists when the RPC Runtime Library processes specially crafted messages. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

Microsoft RPC Services null pointer reference DoS Vulnerability

MS Windows RPC service RPCSS crashes trying to dereference a null pointer when it receives a certain malformed request. All MS RPC-based services i.e. a large part of MS Windows 2000+ running on the target machine are rendered inoperable. SPDX-FileCopyrightText: 2002 Pavel Kankovsky Some text...

snmpXdmid overflow

The remote RPC service 100249 snmpXdmid is vulnerable to a heap overflow which allows any user to obtain a root shell on this host. OpenVAS Vulnerability Test $Id: snmpXdmid.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: snmpXdmid overflow Authors: Intranode Copyright: Copyright C 2001...

Detect the HTTP RPC endpoint mapper

This detects the http-rpc-epmap service by connecting to the port 593 and processing the buffer received. This endpoint mapper provides CIS COM+ Internet Services parameters like port 135 epmap for RPC. OpenVAS Vulnerability Test $Id: http-rpc-epmap.nasl 8023 2017-12-07 08:36:26Z teissa $...

Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350)

An information disclosure and denial of service vulnerability exists when the RPC Runtime Library processes specially crafted messages. An attacker who successfully exploited this vulnerability could potentially read portions of active memory or cause the affected system to stop responding. OpenV...

Zope Installation Path Disclosure

The remote web server contains an application server that is prone to information disclosure. Description : There is a minor security problem in all releases of Zope prior to version 2.5.1b1 - they reveal the installation path when an invalid XML RPC request is sent. OpenVAS Vulnerability Test $I...

Microsoft RPC Interface Buffer Overrun (823980)

The remote host is running a version of Windows which has a flaw in its RPC interface which may allow an attacker to execute arbitrary code and gain SYSTEM privileges. There is at least one Worm which is currently exploiting this vulnerability. Namely, the MsBlaster worm. SPDX-FileCopyrightText:...

SCO OpenServer RPC protocol DoS

RPC service hangs on invalid RPC BIND request...

CVE-2005-3245

Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service memory consumption...

CVE-2005-3245

Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service memory consumption...

CVE-2005-3245

Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service memory consumption...

CVE-2005-3245

CVE-2005-3245 affects Ethereal (0.10.3–0.10.12) with the ONC RPC dissector. When the option “Dissect unknown RPC program numbers” is enabled, a remote attacker could cause memory exhaustion leading to a denial of service. Advisories and records indicate upgrading to Ethereal 0.10.13 fixes the iss...