Omni-NFS Server Buffer Overflow

This module exploits a stack buffer overflow in Xlink Omni-NFS Server 5.2 When sending a specially crafted nfs packet, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

Microsoft IIS 5.0 FTP Server Remote Stack Overflow Exploit in the English common Edition-vulnerability warning-the black bar safety net

Author: Inking Because some character issues, so the English version of the exp can't be directly used to Chineseoperating system, spend some time to modify the milw0rm on exp, in their English Win2k sp4 virtual machine in the test are passed. ftp.pl 0 !/ usr/bin/perl IIS 5.0 FTP Server / Remote...

SuSE9 Security Update : SLES9-SP4: Security update for bind (YOU Patch Number 11717)

CVE-2007-2926, cryptographically weak query ids RT 16915. Applied fix extracted from 9.2.8-P1 version. - version update to 9.3.x because ISC will no longer maintain version 9.2.x %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : SLES9-SP4: Security update for yast2-mail-server (YOU Patch Number 11602)

If you go to YaST -- Mail Server -- FetchMail and select add account window. While entering the password for the remote user, it shows the password. Now the password field echoes '', instead of plain text. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...

MP3 Studio 1.0 (.m3u File) Local Buffer Overflow Exploit

No description provided by source. / mplode.c vs MP3 Studio v1.0 Tested on: Windows 2000 SP4 Author: Dominic Chell [email protected] PoC: http://www.milw0rm.com/exploits/9277 The PoC author said he could not exploit it so I decided to try. A bit of fun for a boring night in Peterborough : Good...

MP3 Studio 1.0 (.m3u File) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================== MP3 Studio 1.0 .m3u File Local Buffer Overflow Exploit ======================================================== / mplode.c vs MP3 Studio v1.0 Tested on: Windows 2000 SP4 Author: Domini...

IPSwitch IMAP Server 9.20 - Remote Buffer Overflow

/ Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h" include include include include include "winsock2.h" prag...

Microsoft IIS FTP Server NLST Command Remote Overflow

Added: 09/03/2009 CVE: CVE-2009-3023 BID: 36189 OSVDB: 57589 Background Microsoft Internet Information Server IIS includes a web server and an FTP server. Problem A stack overflow in the FTP server in IIS 5 and 6.0 via a crafted NLST command that uses wildcards allows remote authenticated users t...

Microsoft IIS 5.0 FTP Server Remote Stack Overflow Exploit (win2k sp4)

No description provided by source. !/usr/bin/perl IIS 5.0 FTP Server / Remote SYSTEM exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2atgooglemail.com Affects IIS6 with stack cookie protection Modded by muts, additional egghunter added for secondary larger payload Might take a...

Microsoft IIS 5.0/6.0 FTP Server Remote Stack Overflow Exploit (win2k)

No description provided by source. IIS 5.0 FTPd / Remote r00t exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2atgooglemail.com Affects IIS6 with stack cookie protection August 2009 - KEEP THIS 0DAY PRIV8 use IO::Socket; $|=1; metasploit shellcode, adduser "winown:nwoniw" $sc =...

Microsoft IIS 5.0 FTP Server (Windows 2000 SP4) - Remote Stack Overflow

Microsoft IIS 5.0 FTP Server Windows 2000 SP4 - Remote Stack Overflow !/usr/bin/perl IIS 5.0 FTP Server / Remote SYSTEM exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2googlemail.com Affects IIS6 with stack cookie protection Modded by muts, additional egghunter added for...

Microsoft IIS FTP Server Stack Overflow

IIS 5.0 FTPd / Remote r00t exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2googlemail.com Affects IIS6 with stack cookie protection August 2009 - KEEP THIS 0DAY PRIV8 use IO::Socket; $|=1; metasploit shellcode, adduser "winown:nwoniw" $sc =...

Microsoft IIS 5.0 FTP Server (Windows 2000 SP4) - Remote Stack Overflow

!/usr/bin/perl IIS 5.0 FTP Server / Remote SYSTEM exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2googlemail.com Affects IIS6 with stack cookie protection Modded by muts, additional egghunter added for secondary larger payload Might take a minute or two for the egg to be found...

NaviCopa Web Server 3.01 Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ======================================================= NaviCopa Web Server 3.01 Remote Buffer Overflow Exploit ======================================================= / navicpntxp1.c NaviCopa Web Server 3.01 Remote Buffer Overflow Exploit...

Integer overflow

Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, ...

ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability

ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-053 August 11, 2009 -- CVE ID: CVE-2009-1923 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows 2003 SP2 Microsoft Windows 2000 SP4 -- TippingPointTM IPS...

Input validation

The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute...

CVE-2009-1122

The WebDAV extension in Microsoft Internet Information Services IIS 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication Bypass Vulnerability...

CVE-2009-0228

Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service win32spl.dll in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a crafted ShareName in a response to an RPC request, related to "printing data structures," aka...

Stack overflow

Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service win32spl.dll in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a crafted ShareName in a response to an RPC request, related to "printing data structures," aka...