CVE-2005-2498: Improper Control of Generation of Code

Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier PEAR XML-RPC for PHP, as used in multiple products including 1 Drupal, 2 phpAdsNew, 3 phpPgAds, and 4 phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be...

MS Windows Plug-and-Play Service Remote Overflow (MS05-039)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows Plug-and-Play Service Remote Overflow MS05-039 =========================================================== / Windows 2000 universal exploit for MS05-039...

Microsoft Windows - Plug-and-Play Service Remote Overflow (MS05-039)

Microsoft Windows - Plug-and-Play Service Remote Overflow MS05-039 / Windows 2000 universal exploit for MS05-039 -\x6d\x35\x6c\x30\x6e\x6e\x79- / define WIN32LEANANDMEAN include include include include include include include pragma commentlib, "mpr" pragma commentlib, "Rpcrt4" BYTE Data10x68 =...

Microsoft Windows - Plug-and-Play Service Remote Overflow (MS05-039)

/ Windows 2000 universal exploit for MS05-039 -\x6d\x35\x6c\x30\x6e\x6e\x79- / define WIN32LEANANDMEAN include include include include include include include pragma commentlib, "mpr" pragma commentlib, "Rpcrt4" BYTE Data10x68 = 0x11,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x11,0x00,0x00,0x00,...

Immunity Canvas: MS05_039

Name| ms05039 ---|--- CVE| CVE-2005-1983 Exploit Pack| CANVAS Description| Microsoft Windows PnP RPC Overflow Notes| CVE Name: CVE-2005-1983 VENDOR: Microsoft MSADV: MS05-039 Repeatability: One shot Note: Windows XP needs a valid username and password References:...

[SA16339] XOOPS PHPMailer and XML-RPC Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

VERITAS Backup Exec Agent Unauthenticated Remote Registry Access

The remote host is running a version of VERITAS Backup Exec for Windows that is vulnerable to a remote registry access. An attacker may exploit this flaw to modify the remote registry and gain a full access to the system. To exploit this flaw, an attacker would need to send requests to the RPC...

CVE-2005-2132

RPC portmapper rpcbind in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service lack of response via multiple invalid portmap requests...

CVE-2005-2132

This CVE (CAN-2005-2132) affects SCO UnixWare 7.x (e.g., 7.1.1 m5, 7.1.3 mp5, 7.1.4 mp2) where the RPC portmapper (rpcbind) can be forced into a denial-of-service state by multiple invalid portmap requests, causing RPC services to fail to respond. OpenServer-related advisories (SCOSA-2005.43 for ...

CVE-2005-2132: Undefined Security Weakness

RPC portmapper rpcbind in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service lack of response via multiple invalid portmap requests...

[NILESA-20050701] UnixWare 7.x RPC portmapper Dos Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================================ NileSOFT Security Advisory - -------------------------------------------------------------------------------- ID : NILESA-20050701 Title : rpcbind Invalid portmap Request...

SCO Unixware RPC request DoS

Invalid bind request causes RPC portmapper service to hang...

SUSE-SA:2005:041: php/pear XML::RPC

The remote host is missing the patch for the advisory SUSE-SA:2005:041 php/pear XML::RPC. A bug in the PEAR::XMLRPC library allowed remote attackers to pass arbitrary PHP code to the eval function. The updated php packages fix the XML::RPC bug, however several third party PHP packages include a...

GLSA-200507-15 : PHP: Script injection through XML-RPC

The remote host is affected by the vulnerability described in GLSA-200507-15 PHP: Script injection through XML-RPC James Bercegay has discovered that the XML-RPC implementation in PHP fails to sanitize input passed in an XML document, which is used in an 'eval' statement. Impact : A remote attack...

PHP: Script injection through XML-RPC

Background PHP is a general-purpose scripting language widely used to develop web-based applications. It can run inside a web server using the modphp module or the CGI version of PHP, or can run stand-alone in a CLI. Description James Bercegay has discovered that the XML-RPC implementation in PHP...

xmlrpc.py.txt

!/usr/bin/python ./xmlrpc.py chk|xpl host uri example check bug: ./xmlrpc.py chk www.postnuke.com /xmlrpc.php example exploit bug: ./xmlrpc.py xpl www.postnuke.com /xmlrpc.php Pear XML-RPC Library 1.3.0 Remote PHP Code Execution Exploit -- Not working for me so i made this python code...

CVE-2005-2224

aspnetwp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service CPU consumption from infinite loop via a crafted SOAP message to an RPC/Encoded method...

CVE-2005-2224

The CVE-2005-2224 entry concerns Microsoft ASP.NET web services, where aspnet_wp.exe is affected by processing crafted SOAP messages sent to an RPC/Encoded method, leading to denial of service via CPU consumption from an infinite loop. The available connected documents confirm the affected compon...

CVE-2005-2224

aspnetwp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service CPU consumption from infinite loop via a crafted SOAP message to an RPC/Encoded method...

CVE-2005-2224: Loop with Unreachable Exit Condition

aspnetwp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service CPU consumption from infinite loop via a crafted SOAP message to an RPC/Encoded method...