CVE-2004-2388

rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user...

Disclosure of file system information in Mozilla Firefox and Opera Browser:

Title: Disclosure of file system information in Mozilla Firefox and Opera Browser Note: I don't know if it could be considered really a security problem, anyway i'll try to explain my ideas. Sorry for my bad english. Author: Giovanni Delvecchio Bug: Disclosure of file system information...

GD Graphics Library Heap Overflow Proof of Concept Exploit

No description provided by source. include stdio.h include sys/types.h include netinet/in.h include fcntl.h include string.h include unistd.h include stdlib.h include stdint.h include zlib.h define OUTFILE "britnaysparespr0n.png" define BS 0x1000 define ALIGN 0 define diex do perrorx;...

GD Graphics Library - Local Heap Overflow

include include include include include include include include include define OUTFILE "britnaysparespr0n.png" define BS 0x1000 define ALIGN 0 define diex do perrorx; exitEXITFAILURE;while0 / a chunk looks like: 4 byte len - just the length of data 4 byte id - identifies chunk data type 0+ data -...

GD Graphics Library Heap Overflow Proof of Concept Exploit

Exploit for linux platform in category local exploits ========================================================== GD Graphics Library Heap Overflow Proof of Concept Exploit ========================================================== include include include include include include include include...

freebsd/x86 connect 102 bytes

Exploit for freebsd/x86 platform in category shellcode ============================= freebsd/x86 connect 102 bytes ============================= ; Passive Connection Shellcode ; ; Coded by Scrippie - email protected - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades...

WU-FTPD < 2.4.3 Directory Structure Processing Overflow

Binary data 1810.prm...

security flaw

Real time clock RTC routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space...

Novell NetWare LDAP Server Anonymous Bind

The server's directory base is set to NULL. This allows information to be enumerated without any prior knowledge of the directory structure. %NASLMINLEVEL 70300 This script was written by David Kyger Changes by Tenable: - Revised plugin title, output formatting 9/3/09 - Replaced broken URL, added...

Need for Speed 2 Remote Client Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ====================================================== Need for Speed 2 Remote Client Buffer Overflow Exploit ====================================================== / Need for Speed 2 Remote Client Buffer Overflow Exploit - 23.01.2004 by Luigi...

CVE-2003-0984

Real time clock RTC routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space...

[Advisory] Powerslave 4.3 Information Leak Vuln.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================= H Zero Seven Security Advisory Product : FlyingDog Software - Powerslave Portalmanager Impact : information leak vulnerability Issue date: 19 Sept. 2003 Update : Powerslave 4.4.3pl3 Affected :...

MS Windows (RPC DCOM2) Remote Exploit (MS03-039)

No description provided by source. / RPCDCOM2.c ver1.1 copy by FLASHSKY flashsky at xfocus.org 2003.9.14 / include stdio.h include winsock2.h include windows.h include process.h include string.h include winbase.h unsigned char bindstr=...

Flying Dog Software Powerslave 4.3 Portalmanager - sql_id Information Disclosure

Flying Dog Software Powerslave 4.3 Portalmanager - sqlid Information Disclosure source: https://www.securityfocus.com/bid/8659/info It has been reported that Powerslave Portalmanager is prone to an information disclosure issue that may allow remote attackers to gain access to sensitive informatio...

Flying Dog Software Powerslave 4.3 Portalmanager - 'sql_id' Information Disclosure

source: https://www.securityfocus.com/bid/8659/info It has been reported that Powerslave Portalmanager is prone to an information disclosure issue that may allow remote attackers to gain access to sensitive information about the underlying database structure. The problem is reported to exist in t...

Microsoft Windows NetBIOS information leak

Uninitialized memory structure during reply to NetBIOS name request allows attacker to read few bytes from remote host's memory...

RIP Detection

RIP is an Interior Gateway Protocol and is based on the distance vector routing algorithm. Routing tables may disclose your internal network architecture and help a remote attacker. C Tenable Network Security, Inc. References: RFC 1058 Routing Information Protocol RFC 2453 RIP Version 2 0 1 2 3 4...

Shattering SEH II

========================================================================= = Shattering SEH II = = [email protected] = http://www.security-assessment.com = = Originally posted: July 28, 2003 ========================================================================= == Background =...

Windows 2003/XP gethostbyaddr&#40;&#41; NULL pointer bug

If invalid CNAME in reverse lookup zone is specified, gethostbyaddr returns hostent structure with name pointer set to NULL...

TOPO 1.41 - Full Path Disclosure

TOPO 1.41 - Full Path Disclosure source: https://www.securityfocus.com/bid/6768/info It has been reported that TOPo may return information to users that is sensitive in nature. Under some circumstances, it is possible to produce an error message that reveals information about web directory...