Mercury Mail Transport System 4.01b - PH SERVER Remote Overflow

mercurysexywarez Okayokay THiS iS 0DAY!!! Mercury Mail Transport System 4.01b REMOTE ROOT EXPLOIT PH SERVER since me and my folks didn't find enough wild targets, i release this pretty warez to the public :PP kcope kingcopeatgmx.net in 2005! JUUAREZ! Big thanx to...

Mercury Mail Transport System 4.01b Remote Exploit (PH SERVER)

No description provided by source. mercurysexywarez Okayokay THiS iS 0DAY!!! Mercury Mail Transport System 4.01b REMOTE ROOT EXPLOIT PH SERVER since me and my folks didn't find enough wild targets, i release this pretty warez to the public :PP kcope kingcopeatgmx.net in 2005! JUUAREZ! Big thanx t...

Watchfire AppScan QA 5.0.x - Remote Code Execution

Watchfire AppScan QA PoC - Coded by Mariano Nuñez Di Croce @ CYBSEC How to use: 1. Run this script to setup the fake web server. 2. Scan the server with AppScan QA, either in Interactive or Manual mode. 3. If you get an "You are vulnerable!" popup, you should upgrade inmediatly. PoC developed for...

Watchfire AppScan QA 5.0.x - Remote Code Execution

Watchfire AppScan QA 5.0.x - Remote Code Execution Watchfire AppScan QA PoC - Coded by Mariano Nuñez Di Croce @ CYBSEC How to use: 1. Run this script to setup the fake web server. 2. Scan the server with AppScan QA, either in Interactive or Manual mode. 3. If you get an "You are vulnerable!" popu...

MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)

Exploit for unknown platform in category dos / poc ====================================================================== MS Windows Metafile mtNoObjects Denial of Service Exploit MS05-053 ====================================================================== / Author: Winny Thomas Pune, INDIA Th...

MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)

No description provided by source. / Author: Winny Thomas Pune, INDIA The crafted metafile WMF from this code when viewed in explorer crashes it. The issue is seen when the field 'mtNoObjects' in the Metafile header is set to 0x0000. The code was tested on Windows 2000 server SP4. The issue does...

CVE-2005-2123: Undefined Security Weakness

Multiple integer overflows in the Graphics Rendering Engine GDI32.DLL in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile WMF and Enhanced Metafile EMF format images that lead to heap-based buffer overflows, as...

CVE-2005-3644: Undefined Security Weakness

PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...

CVE-2005-2117: Undefined Security Weakness

Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code...

CVE-2005-1985: Undefined Security Weakness

The Client Service for NetWare CSNW on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages...

CVE-2005-2120: Undefined Security Weakness

Stack-based buffer overflow in the Plug and Play PnP service UMPNPMGR.DLL in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" backslash characters in a registry key name, which triggers the overflow i...

CVE-2005-3169

Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized...

CVE-2005-3176

Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection...

CVE-2005-3170

The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer LDAPS even when the Certificate Authority CA is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site...

CVE-2005-3168

The CVE-2005-3168 issue affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4. The SECEDIT ACL application fails to enforce ACLs on folders that appear after a long folder entry when using a security template, leading to potentially less secure permissions than intended. The concrete im...

CVE-2005-3169

Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized...

CVE-2005-3170

CVE-2005-3170 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4. The LDAP client accepts LDAPS certificates even when the CA is not trusted, enabling attackers to mislead users into thinking they are on a trusted site. No exploitation details are provided in the sources. Remediation...

CVE-2005-3169

CVE-2005-3169 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4 when the audit directory service access policy is enabled. The vulnerability is that a 565 event message for File Delete Child operations on Active Directory objects is not recorded in the security event log, potentiall...

CVE-2005-3177

Affected software : Microsoft Windows 2000 (before Update Rollup 1 for SP4), Windows XP, and Windows Server 2003. Vulnerable component : CHKDSK running in fix mode. Root cause : CHKDSK does not properly handle security descriptors when the master file table contains a large number of files or whe...

Savant Web Server 3.1 - Remote Buffer Overflow (2)

!/usr/local/bin/perl Savant Buffer Overflow Exploit ---------------------------------- Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com Vendor URL: http://savant.sourceforge.net $ARGC=@ARGV; if $ARGC !=3 print "\nUsage: $0 remote IP Port\n"; print...