CVE-2008-4548

CVE-2008-4548 affects RTS Sentry 2.1.0.2 via the PTZCamPanelCtrl ActiveX (CamPanel.dll). The root cause is a stack-based buffer overflow triggered by a long second argument to ConnectServer, enabling remote code execution. Public references (NVD, CVE lists, exploit-db) confirm the vulnerability a...

CVE-2008-4548: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control CamPanel.dll in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method...

RTS Sentry PTZCamPanelCtrl ActiveX控件远程栈溢出漏洞

BUGTRAQ ID: 27304 RTS Sentry是系列视频监控和记录设备。 RTS Sentry的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 RTS Sentry监控设备客户端所安装的PTZCamPanelCtrl ActiveX控件（CamPanel.dll）没有正确地处理对ConnectServer函数的输入参数，如果用户受骗访问了恶意站点并向该方式传送了超长user参数的话，就可能触发栈溢出，导致执行任意指令。 RTS Sentry CamPanel.dll 2.1.0.2 RTS Sentry ----------...

RTS Sentry Digital Surveillance - CamPanel.dll 2.1.0.2 Remote Buffer Overflow

RTS Sentry Digital Surveillance - CamPanel.dll 2.1.0.2 Remote Buffer Overflow //add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" +...

rtssentry-overflow.txt

//add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

RTS Sentry Digital Surveillance (CamPanel.dll 2.1.0.2) BOF Exploit

No description provided by source. !-- RTS Sentry Digital Surveillance PTZCamPanel Class CamPanel.dll 2.1.0.2 remote buffer overflow exploit ie7/xp sp2 check this camera demo: http://www.rtssentry.com/index.asp?PageAction=Custom&ID=10 rgod - stay tuned with us...

RTS Sentry Digital Surveillance - 'CamPanel.dll 2.1.0.2' Remote Buffer Overflow

//add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

CVE-2003-1390

RTS CryptoBuddy 1.2 and earlier stores bytes 53 through 55 of a 55-byte passphrase in plaintext, which makes it easier for local users to guess the passphrase...

CVE-2003-1390

CVE-2003-1390 affects RTS CryptoBuddy 1.2 and earlier. The root cause is that bytes 53–55 of a 55‑byte passphrase are stored in plaintext, enabling local users to infer part of the passphrase. The documents do not specify exploitation status or a remediation/patch. No explicit details on affected...

CVE-2003-1391

The provided data identifies CVE-2003-1391 affecting RTS CryptoBuddy 1.0 and 1.2, where a weak encryption algorithm for the passphrase and generation of predictable keys are cited as the underlying flaws, making passphrase guesses easier. The CVSS metrics indicate a high-severity, network-attack ...

CVE-2003-1389

The vulnerability concerns RTS CryptoBuddy 1.2 and earlier. It truncates long passphrases without warning, which may enable more effective brute‑force guessing attacks by reducing input length visibility. Impact is described as potentially facilitating such attacks with partial confidentiality ex...

CVE-2003-1391

RTS CryptoBuddy 1.0 and 1.2 uses a weak encryption algorithm for the passphrase and generates predictable keys, which makes it easier for attackers to guess the passphrase...

CVE-2003-1390: Undefined Security Weakness

RTS CryptoBuddy 1.2 and earlier stores bytes 53 through 55 of a 55-byte passphrase in plaintext, which makes it easier for local users to guess the passphrase...

CVE-2003-1389: Undefined Security Weakness

RTS CryptoBuddy 1.2 and earlier truncates long passphrases without warning the user, which may make it easier to conduct certain brute force guessing attacks...

CVE-2003-1391: Undefined Security Weakness

RTS CryptoBuddy 1.0 and 1.2 uses a weak encryption algorithm for the passphrase and generates predictable keys, which makes it easier for attackers to guess the passphrase...

CVE-2004-1522

Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service application crash via a nickname that contains format strings...

CVE-2004-1522

CVE-2004-1522 corresponds to a format-string vulnerability in Army Men RTS 1.0. The flaw allows remote attackers to trigger a denial of service (application crash) by sending a nickname containing format strings. The NVD entry indicates an untreated impact: availability is partially affected; oth...

CVE-2004-1522: Undefined Security Weakness

Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service application crash via a nickname that contains format strings...

CVE-2004-1522

Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service application crash via a nickname that contains format strings...

[Full-Disclosure] Format string bug in Army Men RTS

Luigi Auriemma Application: Army Men RTS http://www.3do.com/armymen/armymen/ Versions: 1.0 Platforms: Windows Bug: format string Exploitation: remote, versus server Date: 14 November 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3...