EasyMail Objects IMAP4 Component Connect Method Remote Overflow

EasyMail Objects, a set of COM objects for supporting email protocols, is installed on the remote Windows host. The IMAP4 component of the version of the DjVu Browser Plug-in installed on the remote host reportedly is affected by a stack buffer overflow in the 'Connect' method that can be trigger...

Remotesoft .NET Explorer远程堆栈缓冲区溢出漏洞

Remotesoft .NET Explorer是一款反汇编工具。 Remotesoft .NET Explorer处理cpp文件存在一个缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 构建恶意cpp文件，诱使用户打开可触发。 Remotesoft .NET Explorer 2.0.1 目前没有详细解决方案提供： http://www.remotesoft.com/linker/ /usr/bin/ python print "--------------------------------------------------------------" print...

libxine -- buffer overflow vulnerability

xine Team reports: A new xine-lib version is now available. This release contains a security fix array index vulnerability which may lead to a stack buffer overflow...

EasyMail Objects 6.x - Connect Method Remote Stack Buffer Overflow

EasyMail Objects 6.x - Connect Method Remote Stack Buffer Overflow source: https://www.securityfocus.com/bid/22583/info EasyMail Objects is prone to a remote stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data prior to copying it to ...

Computer Associates BrightStor ARCserve Backup LGSERVER.EXE stack buffer overflow

Overview Computer Associates BrightStor ARCserve Backup contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Computer Associates BrightStor ARCserve Backup products come with a service called LGSERVER.EX...

Citrix Presentation/MetaFrame Server cpprov.dll畸形参数栈缓冲区溢出漏洞

Citrix Presentation Server允许用户通过网络远程访问应用程序。 Citrix Presentation Server的打印提供程序（ccprov.dll）在处理传送给EnumPrintersW和OpenPrinter函数的参数时存在栈溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果攻击者能够通过本地API调用或RPC请求向OpenPrinter传送超过130字节的超长字符串做为其第一个参数的话，就可以触发这个溢出，导致在本地系统环境中执行任意代码。 Citrix MetaFrame XP 1.0 Citrix Presentation Server...

NCTAudioFile2 v2.x ActiveX Control SetFormatLikeSample() Buffer Overflow

This module exploits a stack buffer overflow in the NCTAudioFile2.Audio ActiveX Control provided by various audio applications. By sending an overly long string to the "SetFormatLikeSample" method, an attacker may be able to execute arbitrary code. Module Options msf use...

Novell NetWare LSASS CIFS.NLM Driver Stack Buffer Overflow

This module exploits a stack buffer overflow in the NetWare CIFS.NLM driver. Since the driver runs in the kernel space, a failed exploit attempt can cause the OS to reboot. Module Options msf use exploit/netware/smb/lsass/cifs msf undefinedcifs show actions ...actions... msf undefinedcifs set...

Novell NetMail IMAP SUBSCRIBE Buffer Overflow

This module exploits a stack buffer overflow in Novell's NetMail 3.52 IMAP SUBSCRIBE verb. By sending an overly long string, an attacker can overwrite the buffer and control program execution. Module Options msf use exploit/windows/imap/novell/netmailsubscribe msf undefinednetmailsubscribe show...

EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability

eEye Research - http://research.eeye.com Adobe Download Manager AOM Stack Buffer Overflow Vulnerability Release Date: December 5, 2006 Date Reported: November 10, 2006 Severity: High Code Execution Systems Affected: Adobe Download Manager 2.1.x and earlier Overview: eEye Digital Security has...

BlazeVideo HDTV PLF堆栈缓冲区溢出漏洞

BlazeVideo HDTV Player是一款功能强大、简单易用的高清数字电视播放软件。 BlazeVideo HDTV处理plf时存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 攻击者可以构建恶意的播放列表文件，诱使用户打开来触发，可导致以应用程序进程权限执行任意指令。 BlazeVideo BlazeVideo HDTV 2.1 目前没有解决方案提供： http://www.blazevideo.com/ / include stdio.h include stdlib.h include string.h int mainint argc, char argv...

Microsoft Plug and Play Service Registry Overflow

This module triggers a stack buffer overflow in the Windows Plug and Play service. This vulnerability can be exploited on Windows 2000 without a valid user account. Since the PnP service runs inside the service.exe process, this module will result in a forced reboot on Windows 2000. Obtaining cod...

Allied Telesyn TFTP Server 1.9 Long Filename Overflow

This module exploits a stack buffer overflow in AT-TFTP v1.9, by sending a request get/write for an overly long file name. Module Options msf use exploit/windows/tftp/attftp/longfilename msf undefinedlongfilename show actions ...actions... msf undefinedlongfilename set ACTION msf...

MS06-066 Microsoft Services nwwks.dll Module Exploit

This module exploits a stack buffer overflow in the svchost service, when the netware client service is running. This specific vulnerability is in the nwapi32.dll module. Module Options msf use exploit/windows/smb/ms06/066nwwks msf undefined066nwwks show actions ...actions... msf undefined066nwwk...

MS06-066 Microsoft Services nwapi32.dll Module Exploit

This module exploits a stack buffer overflow in the svchost service when the netware client service is running. This specific vulnerability is in the nwapi32.dll module. Module Options msf use exploit/windows/smb/ms06/066nwapi msf undefined066nwapi show actions ...actions... msf undefined066nwapi...

MS06-070 Microsoft Workstation Service NetpManageIPCConnect Overflow

This module exploits a stack buffer overflow in the NetApi32 NetpManageIPCConnect function using the Workstation service in Windows 2000 SP4 and Windows XP SP2. In order to exploit this vulnerability, you must specify the name of a valid Windows DOMAIN. It may be possible to satisfy this conditio...

D-Link DWL-G132 - Wireless Driver Beacon Rates Overflow (Metasploit)

D-Link DWL-G132 - Wireless Driver Beacon Rates Overflow Metasploit $Id: dlinkwifirates.rb 9670 2010-07-03 03:19:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Broadcom Wireless Driver - Probe Response SSID Overflow (Metasploit)

$Id: broadcomwifissid.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

D-Link DWL-G132 - Wireless Driver Beacon Rates Overflow (Metasploit)

$Id: dlinkwifirates.rb 9670 2010-07-03 03:19:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Omni-NFS Server nfsd.exe栈缓冲区溢出漏洞

Omni-NFS Server可以将Windows机器转换为NFS服务器，这样UNIX用户就可以访问从远程NFS客户端导入Windows资源。 Omni-NFS Server的nfsd.exe在处理接收到的数据时存在边界条件错误，允许攻击者通过发送特制的网络报文触发栈溢出，成功的攻击可能导致执行任意指令。 Xlink Technologies Omni-NFS Server 5.2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.xlink.com/nfsproducts/NFSServer/NFSServer.htm...