OpenVms 8.3 Finger Service - Stack Buffer Overflow

source: https://www.securityfocus.com/bid/30589/info The finger service 'fingerd' on OpenVMS is prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input. Attackers can exploit this issue to execute arbitrary code in the context of the...

IrfanView <= 3.99 IFF File Local Stack Buffer Overflow Exploit

No description provided by source. /Irfan View 3.99 .IFF File Local Stack Buffer Overflow This sploit runs calc.exe tested on Win XP Pro sp3;If you run it on another vs of Win make sure you chance the retaddress,but it works almost all the time so.. . Credits for finding the bug and sploit go to...

IrfanView 3.99 - .IFF File Local Stack Buffer Overflow

IrfanView 3.99 - .IFF File Local Stack Buffer Overflow /Irfan View 3.99 .IFF File Local Stack Buffer Overflow This sploit runs calc.exe tested on Win XP Pro sp3;If you run it on another vs of Win make sure you chance the retaddress,but it works almost all the time so.. . Credits for finding the b...

irfanviewiff-overflow.txt

/Irfan View 3.99 .IFF File Local Stack Buffer Overflow This sploit runs calc.exe tested on Win XP Pro sp3;If you run it on another vs of Win make sure you chance the retaddress,but it works almost all the time so.. . Credits for finding the bug and sploit go to fl0 fl0w. Gretez to all romanian...

IrfanView 3.99 - '.IFF' File Local Stack Buffer Overflow

/Irfan View 3.99 .IFF File Local Stack Buffer Overflow This sploit runs calc.exe tested on Win XP Pro sp3;If you run it on another vs of Win make sure you chance the retaddress,but it works almost all the time so.. . Credits for finding the bug and sploit go to fl0 fl0w. Gretez to all romanian...

BlazeVideo HDTV Player PLF文件堆栈缓冲区溢出漏洞

BUGTRAQ ID: 30442 CNCAN ID：CNCAN-2008073108 BlazeVideo HDTV Player是一款支持HDTV播放的媒体播放程序。 BlazeVideo HDTV Player处理播放列表文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建恶意的PLF文件，诱使用户使用BlazeVideo HDTV Player处理，可触发此漏洞。 BlazeVideo HDTV Player 3.5 目前没有解决方案提供： http://www.blazevideo.com/ /Blaze Video HDTV Player V 3.5...

Novell iPrint Client ActiveX Control Stack Buffer Overflow (CVE-2008-2908)

Novell iPrint is an application that enables users to install and manage printers, or submit print job from a web browser. A stack buffer overflow vulnerability has been reported in Novell iPrint Client. The vulnerability is due to a boundary error in a Novell iPrint ActiveX control. To trigger...

BakBone NetVault 6.x/7.x Local Stack Buffer Overflow Exploit

No description provided by source. / for more informations class101.org/netv-locsbof.pdf / include stdio.h include string.h ifdef WIN32 include "winsock2.h" pragma commentlib, "ws232" else include sys/socket.h include sys/types.h include netinet/in.h include netinet/insystm.h include netinet/ip.h...

Novell GroupWise Messenger Client Buffer Overflow

This module exploits a stack buffer overflow in Novell's GroupWise Messenger Client. By sending a specially crafted HTTP response, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/novell/groupwisemessenger/client msf undefinedclient show actions...

Novell iPrint Client ActiveX control stack buffer overflows

Overview The Novell iPrint Client ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Novell iPrint is a software printing solution that allows for printing over the internet. On...

Novell iPrint Client ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Novell iPrint Client 4.34. When sending an overly long string to the GetDriverSettings property of ienipp.ocx an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/novelliprint/getdriversettings msf...

CitectSCADA/CitectFacilities ODBC Buffer Overflow

This module exploits a stack buffer overflow in CitectSCADA's ODBC daemon. This has only been tested against Citect v5, v6 and v7. Module Options msf use exploit/windows/scada/citect/scadaodbc msf undefinedscadaodbc show actions ...actions... msf undefinedscadaodbc set ACTION msf undefinedscadaod...

CA Secure Content Manager HTTP Gateway Service FTP Vulnerabilities

The remote host is running Computer Associates' Secure Content Manager, a gateway product for filtering messaging and web traffic. The HTTP Gateway component 'icihttp.exe' of the version of Secure Content Manager installed on the remote host does not sufficiently check responses to FTP 'LIST' and...

CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates eTrust Secure Content Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists in the HTTP Gateway service icihttp.exe running on port 8080. By...

NASA Ames Research Center BigView 1.8 - .PNM Stack Buffer Overflow (PoC)

NASA Ames Research Center BigView 1.8 - .PNM Stack Buffer Overflow PoC source: https://www.securityfocus.com/bid/29517/info NASA Ames Research Center BigView is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying ...

DoubleTake/HP StorageWorks Storage Mirroring Service Authentication Overflow

This module exploits a stack buffer overflow in the authentication mechanism of NSI Doubletake which is also rebranded as HP Storage Works. This vulnerability was found by Titon of Bastard Labs. Module Options msf use exploit/windows/misc/doubletake msf undefineddoubletake show actions...

Creative Software AutoUpdate Engine ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Creative Software AutoUpdate Engine. When sending an overly long string to the cachefolder property of CTSUEng.ocx an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/creative/softwarecachefolder msf...

Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX stack buffer overflows

Overview The Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control contains multiple stack buffer overflows, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Online Media Technologies, which was formerly known as NCT...

Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX stack buffer overflows

Overview The Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control contains multiple stack buffer overflows, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Online Media Technologies, which was formerly known as NCT...

EMC AlphaStor Agent Buffer Overflow

This module exploits a stack buffer overflow in EMC AlphaStor 3.1. By sending a specially crafted message, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/emc/alphastor/agent msf undefinedagent show actions ...actions... msf undefinedagent set ACTION msf...