Microsoft Visual Studio .NET msdds.dll Remote Code Execution Vulnerability

...

Microsoft Visual Studio .NET - 'msdds.dll' Remote Code Execution

source: https://www.securityfocus.com/bid/14594/info Microsoft Visual Studio .NET is prone to a vulnerability that could allow remote arbitrary code execution. This is due to a buffer overflow that is exposed during COM object instantiation. The list of vulnerable packages has been updated to...

CVE-2002-1780

BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that enables a remote attacker to cause a denial of service (crash) by sending a URL request for a MS-DOS device such as con. The note indicates that some of these application-level DOS device issues may stem from a Windows bug, and the pro...

CVE-2002-1780

BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service crash by sending a URL request for a MS-DOS device such as con. NOTE: it has been disputed that this and possibly other application-level DOS device issues stem from a bug in Window...

CVE-2005-1605

Cross-site scripting XSS vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to 1 psoft.guestbook.GuestBookServ in Standalone Site Studio or 2 E-Guestsign.pl in Integrated Site Studio with H-Sphere...

Microsoft IIS FrontPage Visual Studio RAD Support fp30reg.dll Overflow

Binary data 1691.prm...

Ошибка переполнения буффера в aGsm версии 2.35c и в последней developer-версии (beta)...

Доброго времени суток! Мною обнаружена ошибка переполнения буффера и вероятно возможность удалённого исполнения вредоносного кода в последних версиях aGsm. Заключается она в следующем: При обработке ответа от Half-Life серверов, aGsm, как выяснилось, не проверяет длинну строки hostname, а копируе...

CVE-2004-0204

CVE-2004-0204 describes a directory traversal in Crystal Reports and Crystal Enterprise Web viewers redistributed with Microsoft Visual Studio .NET 2003, Outlook 2003 with Business Contact Manager, and Microsoft Business Solutions CRM 1.2. The vulnerability arises from improper validation of HTTP...

Microsoft Security Bulletin MS04-017 Vulnerability in Crystal Reports Web Viewer Could Allow Information Disclosure and Denial of Service (842689)

Microsoft Security Bulletin MS04-017 Vulnerability in Crystal Reports Web Viewer Could Allow Information Disclosure and Denial of Service 842689 Issued: June 8, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Visual Studio .NET 2003, who use Microsoft Office...

Business Objects Crystal Reports 910 Web Form Viewer - Directory Traversal

Business Objects Crystal Reports 910 Web Form Viewer - Directory Traversal source: https://www.securityfocus.com/bid/10260/info Crystal Reports and Crystal Enterprise Web Form Viewer is prone to a directory traversal vulnerability. This issue can allow an attacker to retrieve and delete files,...

Microsoft MCWNDX.OCX ActiveX buffer overflow

Microsoft MCWNDX.OCX ActiveX buffer overflow ================================================= PROGRAM: MICROSOFT MCIWNDX.OCX ACTIVEX BUFFER OVERFLOW HOMEPAGE: www.microsoft.com VULNERABLE VERSIONS: MCWNDX is an ActiveX shipped with Visual Studio 6 to support multimedia programming. DESCRIPTION...

CVE-2002-1780

BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service crash by sending a URL request for a MS-DOS device such as con. NOTE: it has been disputed that this and possibly other application-level DOS device issues stem from a bug in Window...

CVE-2002-0331

Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP request...

CVE-2002-0331

CVE-2002-0331 describes a directory traversal vulnerability in the HTTP server of BPM Studio Pro 4.2, enabling remote attackers to read arbitrary files by using a dot-dot sequence in the HTTP request. Per the provided records, the impact is listed as confidentiality: none , integrity: partial , a...

CVE-2002-0331

Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP request...

Многочисленные ошибки в BPM Studio (multiple bugs)

Доступ к специальным устройствам, обратный путь в каталогах...

BPM STUDIO PRO 4.2 DIRECTORY ESCAPE VULNERABILITY

Hi bugtraq again... Now i' ve found another vulnerability in BPM STUDIO PRO 4.2 http server implementation. Anyone can download any file in some host running this software simply like performing this http request : http://BPM-HOST/../../../../autoexec.bat http server is not activated by default...

BPM STUDIO PRO 4.2 DOS DEVICE PATH VULNERABILITY

Hi Bugtraq !! BPM STUDIO PRO 4.2 is one of the most famous mp3 mixer and player and it has an http server implementation for manage the player via the web browser. Unfortunatly, when you perform a simple http request like: http://BPM-HOST/con/con you can crash instantly non-patched Win9x host wit...

BPM Studio Pro 4.2 - HTTPd Directory Traversal

BPM Studio Pro 4.2 - HTTPd Directory Traversal source: https://www.securityfocus.com/bid/4198/info BPM Studio Pro is a shareware MP3 mixer and player. It runs on Microsoft Windows operating systems. BPM Studio Pro includes a HTTP server for managing the player via a web interface. The BPM Studio...

BPM Studio Pro 4.2 - HTTPd Directory Traversal

source: https://www.securityfocus.com/bid/4198/info BPM Studio Pro is a shareware MP3 mixer and player. It runs on Microsoft Windows operating systems. BPM Studio Pro includes a HTTP server for managing the player via a web interface. The BPM Studio Pro HTTPD does not adequately filter...