Friendly Technologies (fwRemoteCfg.dll) ActiveX Remote BOF Exploit

No description provided by source. !-- "Friendly Technologies" provide software like L2TP and PPPoE clients to ISPs, who give the software to their customers on CD so they have less trouble setting up thire connections. They also provide remote configuration solutions .. not the best idea if you...

Friendly Technologies 'fwRemoteCfg.dll' ActiveX控件远程缓冲区溢出漏洞

BUGTRAQ ID:30891 CNCAN ID：CNCAN-2008082904 Friendly Technologies是一款提供类似L2TP和PPPoE客户端的解决方案。 Friendly Technologies fwRemoteCfg.dll存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 fwRemoteCfg.dll用于提供拨号相关功能，由于对其他参数缺少充分边界检查，构建恶意WEB页，诱使用户访问，可导致触发缓冲区溢出以应用程序权限执行任意指令。 Friendly Technologies fwRemoteCfg.dll 目前没有解决方案提供：...

Friendly Technologies Read/Write Registry/Read Files Exploit

Exploit for unknown platform in category remote exploits ============================================================ Friendly Technologies Read/Write Registry/Read Files Exploit ============================================================ Friendly Technologies - Read/Write Registry // Write to...

friendly-fwremotecfg.txt

Friendly Technologies - wayyy too friendly... function exploit var Evil = ""; // Our Evil Buffer var DamnIE = "\x0C\x0C\x0C\x0C"; // Damn IE changes address when not in the 0x00 - 0x7F range : // Need to use heap spray rather than overwrite EIP ... // Skyland win32 bindshell 28876/tcp shellcode v...

friendly-exec.txt

lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0...

Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Remote Buffer Overflow

Friendly Technologies - wayyy too friendly... function exploit var Evil = ""; // Our Evil Buffer var DamnIE = "\x0C\x0C\x0C\x0C"; // Damn IE changes address when not in the 0x00 - 0x7F range : // Need to use heap spray rather than overwrite EIP ... // Skyland win32 bindshell 28876/tcp shellcode v...

Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Command Execution

lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0 milw0rm.com 2008-08-28...

Friendly Technologies - fwRemoteCfg.dll ActiveX Command Execution

Friendly Technologies - fwRemoteCfg.dll ActiveX Command Execution lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0 milw0rm.com 2008-08-28...

Friendly Technologies - fwRemoteCfg.dll ActiveX Remote Buffer Overflow

Friendly Technologies - fwRemoteCfg.dll ActiveX Remote Buffer Overflow Friendly Technologies - wayyy too friendly... function exploit var Evil = ""; // Our Evil Buffer var DamnIE = "\x0C\x0C\x0C\x0C"; // Damn IE changes address when not in the 0x00 - 0x7F range : // Need to use heap spray rather...

Friendly Technologies (fwRemoteCfg.dll) ActiveX Remote BOF Exploit

Exploit for unknown platform in category remote exploits ================================================================== Friendly Technologies fwRemoteCfg.dll ActiveX Remote BOF Exploit ================================================================== Friendly Technologies - wayyy too...

Core Security Technologies Advisory 2008.0624

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Anzio Web Print Object Buffer Overflow Advisory Information Title: Anzio Web Print Object Buffer Overflow Advisory ID: CORE-2008-0624 Advisory URL:...

Directory traversal

Directory traversal vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

Improper access control

Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to determine the installation path, IP addresses, and error messages via direct requests to files under LOG/...

CVE-2008-3726

Cross-site scripting XSS vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2008-3729

Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to bypass authentication and obtain administrative access via a direct request with 1 an IsAdmin=true cookie value or 2 no cookie...

CVE-2008-3727

CVE-2008-3727 describes a directory traversal vulnerability in the Web Based Administration component of MicroWorld Technologies MailScan 5.6.a espatch 1. An unauthenticated or remote attacker could read arbitrary files by presenting a URI path containing .. (dot dot). The available connected sou...

CVE-2008-3728

CVE-2008-3728 affects MicroWorld Technologies MailScan 5.6.a espatch 1. Web-based administration stores sensitive information under the web root with insufficient access control, enabling remote attackers to discover installation path, IP addresses, and error messages by requesting files under LO...

CVE-2008-3729

CVE-2008-3729 affects MicroWorld Technologies MailScan Web-Based Administration (MailScan 5.6.a espatch 1). The issue allows remote attackers to bypass authentication and obtain administrative access by sending a direct request with (1) an IsAdmin=true cookie value or (2) no cookie. This is a coo...

CVE-2008-3726

Cross-site scripting XSS vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2008-3728

Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to determine the installation path, IP addresses, and error messages via direct requests to files under LOG/...