AgentX++ Master AgentX::receive_agentx Stack Buffer Overflow

This exploits a stack buffer overflow in the AgentX++ library, as used by various applications. By sending a specially crafted request, an attacker can execute arbitrary code, potentially with SYSTEM privileges. This module was tested successfully against master.exe as included with Real Network'...

Microsoft SMTP Server DNS Handling (MS04-035; CVE-2004-0840)

Both Microsoft Windows and Microsoft Exchange include an SMTP service that, among other things, delivers outgoing email messages without the use of an external SMTP server. To perform such email delivery, the SMTP service follows these steps for every recipient email address. A vulnerability exis...

Authentium SafeCentral <= 2.6 shdrv.sys local kernel ring0 SYSTEM exploit

No description provided by source. / safecentral-unharden-v2.c Copyright c 2009 by [email protected] Authentium SafeCentral = 2.6 shdrv.sys local kernel ring0 SYSTEM exploit by mu-b - Thu 3 Sep 2009 - Tested on: shdrv.sys 2.0.0.146 Compile: MinGW + -lntdll - Private Source Code -DO NOT DISTRIBU...

Citrix MetaFrame IMA Authentication Processing Buffer Overflow (CVE-2006-5821)

The Citrix MetaFrame products are remote access and application publishing products built on Citrix' Independent Computing Architecture ICA. The products allow for access and control of the remote hosts as well as deploying applications. There exists a buffer overflow vulnerability in Citrix...

IIS RSA Authentication Agent for Web Redirect Buffer Overflow (CVE-2005-4734)

The RSA Authentication Agent for Web for Internet Information Services IIS provides protection for selected web pages by securing them with the RSA SecurID authentication mechanism. When a user attempts to access a resource that is secured with the RSA SecurID, the RSA Agent authenticates the use...

Oracle Application Server Forms Arbitrary System Command Execution (CVE-2005-2372)

Oracle Application Server is a multi-platform solution for developing and deploying enterprise applications and web sites. The server ships with several additional components that extend its functionality. One of such component is the Oracle Forms Services. The Forms Services component allows for...

HP Enterprise Discovery未明远程特权提升漏洞

BUGTRAQ ID: 30865 CVE ID: CVE-2008-3538 CNCVE ID：CNCVE-20083538 HP Enterprise Discovery是一款识别并了解数据中心或计算网络中正在运行的应用程序和进程的解决方案。 HP Enterprise Discovery存在一个未明安全问题，远程攻击者可以利用漏洞获得SYSTEM高特权，控制应用程序所在系统。 目前没有详细漏洞细节提供。 HP Enterprise Discovery 2.1.3 HP Enterprise Discovery 2.1.2 HP Enterprise Discovery 2.1.1 ...

DSA-1402-1 gforge - insecure temporary files

Bulletin has no description...

SAP Internet Graphics Server远程缓冲区溢出漏洞

SAP Internet Graphics Server是SAP R/3企业环境的一个组件，可提供图形服务。 SAP Internet Graphics Server不正确处理用户提交的HTTP请求，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 目前没有详细漏洞细节提供，成功利用漏洞可导致在UNIX系统下获得SAP系统管理员特权，而在windows下可导致获得SYSTEM权限。 SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 6.40 SAP Internet...

Novell firewall client privilege escalation

"Save Configuration As..." dialog allows execute application with Local System privilege...

Unchecked Buffer in ntdll.dll (Q815021)

The remote host is vulnerable to a flaw in ntdll.dll which may allow an attacker to gain system privileges, by exploiting it through, for instance, WebDAV in IIS5.0 other services could be exploited, locally and/or remotely SPDX-FileCopyrightText: 2003 Trevor Hemsley Some text descriptions might ...

Default Password (synnet) for 'debug' Account

The account 'debug' on the remote host uses the password 'synnet'. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "debug"; password = "synnet"; include'deprecatednasllevel.inc'; include'compat.inc'; if description...

VentaFax Privilege escalation

VentaEngine available via systray runs with Local System privilege. On double click file selsction meny is open. It allows "Execute" command to be choosen for executable files...

Microsoft Windows Server 2000 - Utility Manager All-in-One (MS04-019)

Microsoft Windows Server 2000 - Utility Manager All-in-One MS04-019 / COROMPUTER2004 Crpt Utility Manager exploit v2.666 modified by kralor Crpt It gets system language and sets windows names to work on any win2k :P Feel free to add other languages : v2.666: added autonomous allinone remote...

Open the WS_FTP Server backdoor to SYSTEM

Advisory Name: Open the WSFTP Server backdoor to SYSTEM Impact : Privilege escalation Discovered by: Hugh Mann [email protected] Tested progs : Ipswitch WSFTP Server 4.0.2.EVAL Description Any local user or any remote user who can execute programs on the FTP server as any user can start progra...

wsftp402eval3.txt

Advisory Name: Open the WSFTP Server backdoor to SYSTEM Impact : Privilege escalation Discovered by: Hugh Mann [email protected] Tested progs : Ipswitch WSFTP Server 4.0.2.EVAL Description Any local user or any remote user who can execute programs on the FTP server as any user can start progra...

[Full-Disclosure] [vulnwatch] Serv-U MDTM Command Buffer Overflow Vulnerability

vulnwatch Serv-U MDTM Command Buffer Overflow Vulnerability www.cnhonker.com Security Advisory Advisory Name: Serv-U MDTM Command Buffer Overflow Vulnerability Release Date: 02/26/2004 Affected version: Serv-U 5.0.0.4 Author: bkbll [email protected] URL:...

NSFOCUS SA2003-06 : Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-06 Topic: Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability Release Date: 2003-09-11 CVE CAN ID: CAN-2003-0528 http://www.nsfocus.com/english/homepage/research/0306.htm Affected system: ==================...

Default Password (D13hh[) for 'root' Account

The account 'root' has the password 'D13hh'. An attacker may use it to gain further privileges on this system. The presence of this account suggests the system may have the D13HH rootkit typically found on Solaris systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root";...

[SNS Advisory No.41] iPlanet Messaging Server 5.1(evaluation copy) Buffer Overflow Vulnerability

---------------------------------------------------------------------- SNS Advisory No.41 iPlanet Messaging Server 5.1evaluation copy Buffer Overflow Vulnerability Problem first discovered: 6 Aug 2001 Published: Mon, 3 Sep 2001 ---------------------------------------------------------------------...