Microsoft Security Bulletin MS03-027: Unchecked Buffer in Windows Shell Could Enable System Compromise (Q821557)

-----BEGIN PGP SIGNED MESSAGE----- - - --------------------------------------------------------------- Title: Unchecked Buffer in Windows Shell Could Enable System Compromise 821557 Date: 16 July 2003 Software: Microsoftr Windows r XP Impact: Run code of attacker's choice Max Risk: Important...

[Full-Disclosure] Megabook 2.0 -XSS & UA execution

------------------------------------------------------------------ - EXPL-A-2003-011 exploitlabs.com Advisory 011 ------------------------------------------------------------------ -= MegaBook =- exploitlabs.com June 29, 2003 Vunerabilitys: ---------------- 1. XSS and Unchecked Input Length 2...

Monkey Http Daemon

After reading the PHP XSS "exploit" I dont know if it qualifies as one in phpinfo, I found out that on the default page of the Monkey Http Daemon, there is a Test of Supports section. Two links are included: http://whateverhost/php/index.php and http://whateverhost/cgi-bin/test.pl index.php just...

SRT2003-04-15-1029 - Progres BINPATHX overflow

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

Unchecked Buffer in Opera 7.02

Tested version : Opera 7.02 Build 2668 Vendor Status : Vendor was contacted on 8-4-2003 Description : Opera web browser has an unchecked buffer in his code that allow a malicious website to crash it and in certain circumstances , execute code with user priviliges . To reproduce the bug open this...

MS02-030: Unchecked Buffer in SQLXML (321911)

The remote host is running SQLXML. There are flaws in this application that could allow a remote attacker to execute arbitrary code on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11304;...

MS02-014: Unchecked buffer in Windows Shell (313829)

The Windows shell of the remote host has an unchecked buffer that can be exploited by a local attacker to run arbitrary code on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11307; scriptversion"1.36"; scriptcvsdate"Date: 2018/11/15 20:50:29";...

MS02-040 / MS03-033: Unchecked buffer in MDAC Function (326573 / 823718)

The remote Microsoft Data Access Component MDAC server is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host, provided he can load and execute a database query on this server. C Tenable Network Security, Inc. MS03-033 supercedes MS02-040 Note: The fix for thi...

Microsoft Security Bulletin MS03-006: Flaw in Windows Me Help and Support Center Could Enable Code Execution (812709)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------- Title: Flaw in Windows Me Help and Support Center Could Enable Code Execution 812709 Date: 26 February, 2003 Software: Microsoft Windows Me Impact: Run Code of Attacker's Choice Max Risk: Critica...

eSafe gateway and Check Point FW-1 protection bypass

Archives packed with lates RA version are not checked...

Microsoft Security Bulletin MS03-005: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577)

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation 810577 Date: 05 February 2003 Software: Microsoft Windows XP Impact: Privilege elevation Max Risk: Important...

MS03-001: Unchecked buffer in Locate Service (810833)

The Microsoft Locate service is a name server that maps logical names to network-specific names. There is a security vulnerability in this server that allows an attacker to execute arbitrary code in it by sending a specially crafted packet to it. C Tenable Network Security, Inc...

Microsoft Security Bulletin MS03-001: Unchecked Buffer in Locator Service Could Lead to Code Execution (810833)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Unchecked Buffer in Locator Service Could Lead to Code Execution 810833 Date: 22 January, 2003 Software: Microsoft Windows NT 4.0, Windows 2000, and Windows XP Impact: Run code of th...

phpmynuke css and phpinfo() vuls

myphpnuke version 1.8.8final7 and prior that contain sysinfo are vulnerable to both css attack and phpinfo Disclosure. The problem is that unlike the rest of the scripts under /admin/, sysinfo's footer script called systemfooter.php does not check who the user is. Inside systemfooter.php the...

MS02-072: Unchecked Buffer in XP Shell Could Enable System Compromise (329390)

The remote version of Windows contains a flaw in the handling of audio files MP3, WMA in the Windows Shell component, that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid1119...

Microsoft Security Bulletin MS02-072: Unchecked Buffer in Windows Shell Could Enable System Compromise (Q329390)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Unchecked Buffer in Windows Shell Could Enable System Compromise 329390 Date: 18 December 2002 Software: Microsoft Windows XP Impact: Run code of an attacker's choice Max Risk:...

Unchecked buffer in PC-cillin

---------------------------------------------------------------------------- - Texonet Security Advisory 20021210 ---------------------------------------------------------------------------- - Advisory ID : TEXONET-20021210 Authors : Joel Soderberg and Christer Oberg [email protected] Issue...

Solaris priocntl() privelege escalation

During external module loaging path is not checked...

MS02-063: Unchecked Buffer in PPTP Implementation Could Enable DOS Attacks (329834)

The remote version of Windows contains a flaw in its PPTP implementation. If the remote host is configured to act as a PPTP server, a remote attacker can send a specially crafted packet to corrupt the kernel memory and crash the remote system. C Tenable Network Security, Inc. include"compat.inc";...

MS02-055: Unchecked Buffer in Windows Help Facility Could Enable Code Execution (323255)

The remote host contains a version of the HTML Helpfacility ActiveX control module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit it. C Tenable Network Security, Inc. include"compat.inc"; if description...