IBM AIX 5.2/5.3 - Capture Command Local Stack Buffer Overflow

// source: https://www.securityfocus.com/bid/25075/info IBM AIX is prone to a local, stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input to a program that is installed setuid-superuser. Local attackers can exploit this issue to...

IBM AIX 5.25.3 - Capture Command Local Stack Buffer Overflow

IBM AIX 5.25.3 - Capture Command Local Stack Buffer Overflow // source: https://www.securityfocus.com/bid/25075/info IBM AIX is prone to a local, stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input to a program that is installed...

ASA-2007-014: Stack buffer overflow in IAX2 channel driver

Asterisk Project Security Advisory - ASA-2007-014 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Stack buffer overflow in IAX2 channel driver |...

EnjoySAP SAP GUI ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in SAP KWEdit ActiveX Control kwedit.dll 6400.1.1.41 provided by EnjoySAP GUI. By sending an overly long string to the "PrepareToPostHTML" method, an attacker may be able to execute arbitrary code. Module Options msf use...

SAP DB 7.4 WebTools Buffer Overflow

This module exploits a stack buffer overflow in SAP DB 7.4 WebTools. By sending an overly long GET request, it may be possible for an attacker to execute arbitrary code. Module Options msf use exploit/windows/http/sapdb/webtools msf undefinedwebtools show actions ...actions... msf undefinedwebtoo...

Trend Micro OfficeScan Remote Stack Buffer Overflow

This module exploits a stack buffer overflow in Trend Micro OfficeScan cgiChkMasterPwd.exe running with SYSTEM privileges. Module Options msf use exploit/windows/http/trendmicro/officescan msf undefinedofficescan show actions ...actions... msf undefinedofficescan set ACTION msf undefinedofficesca...

krb5 security update

CentOS Errata and Security Advisory CESA-2007:0562 Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authenticati...

Important: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to...

Critical: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to...

Lhaca文件档未明堆栈缓冲区溢出漏洞

Lhaca是一款解压缩软件。 Lhaca处理恶意LZH档文件存在未明堆栈缓冲区溢出，远程攻击者可以利用漏洞可能以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 Lhaca Lhaca 1.40 Lhaca Lhaca 1.20 目前没有解决方案提供： http://park8.wakwak.com/app/Lhaca/...

[Full-disclosure] [GOODFELLAS - VULN] BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID: VULWAR200706223 Introduction ------------ BarCodeAx.dll is a library...

BarCode ActiveX Control BarCodeAx.dll 4.9 Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= BarCode ActiveX Control BarCodeAx.dll 4.9 Remote Overflow Exploit ================================================================= :. GOODFELLAS Security Research TEAM .: :...

RKD Software BarCode ActiveX Control BarCodeAx.dll 4.9 - Remote Overflow

RKD Software BarCode ActiveX Control BarCodeAx.dll 4.9 - Remote Overflow :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID...

CA BrightStor ARCserve for Laptops and Desktops LGServer Multiple Commands Buffer Overflow

This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup for Laptops & Desktops 11.1. By sending a specially crafted request to multiple commands, an attacker could overflow the buffer and execute arbitrary code. Module Options msf use...

CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow

This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup for Laptops & Desktops 11.1. By sending a specially crafted request, an attacker could overflow the buffer and execute arbitrary code. Module Options msf use exploit/windows/brightstor/lgserver/rxrlogin...

CA BrightStor ARCserve for Laptops and Desktops LGServer rxsSetDataGrowthScheduleAndFilter Buffer Overflow

This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup for Laptops & Desktops 11.1. By sending a specially crafted request rxsSetDataGrowthScheduleAndFilter, an attacker could overflow the buffer and execute arbitrary code. Module Options msf use...

LANDesk Management Suite Alert Service Stack Overflow (CVE-2007-1674)

LANDesk Management Suite automates systems and security management tasks and proactively manages, updates and protects desktops, servers and mobile devices from a single console. A stack buffer overflow vulnerability has been discovered in LANDesk Management Suite. The vulnerability is due to a...

TinyIdentD 2.2 Stack Buffer Overflow

This module exploits a stack based buffer overflow in TinyIdentD version 2.2. If we send a long string to the ident service we can overwrite the return address and execute arbitrary code. Credit to Maarten Boone. Module Options msf use exploit/windows/misc/tiny/identdoverflow msf...

Darwin Streaming Server < 5.5.5 Multiple RCE Vulnerabilities

According to its banner, the version of Apple Darwin Streaming Server running on the remote host is prior to version 5.5.5. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists in the Apple Darwin Streaming Proxy that allows an unauthenticated, remote...

Trend Micro ServerProtect 5.58 - SpntSvc.exe Remote Stack Buffer Overflow

Trend Micro ServerProtect 5.58 - SpntSvc.exe Remote Stack Buffer Overflow source: https://www.securityfocus.com/bid/23868/info Trend Micro ServerProtect is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copyin...