iDefense Security Advisory 05.08.07: Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability

Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability iDefense Security Advisory 05.08.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 08, 2007 I. BACKGROUND Microsoft Exchange Server 2000 is a messaging product developed by Microsoft, part of the Windows Server...

iDefense Security Advisory 04.03.07: Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability

Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability iDefense Security Advisory 04.03.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2007 I. BACKGROUND The Microsoft Windows kernel controls which processes are allowed to run and is responsible for accessing...

Microsoft Windows - DCE-RPC svcctl ChangeServiceConfig2A() Memory Corruption

Microsoft Windows - DCE-RPC svcctl ChangeServiceConfig2A Memory Corruption !/usr/bin/python MS Windows DCE-RPC svcctl ChangeServiceConfig2A 0day Memory Corruption PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Windows 2000 SP4 Polish all patches Requires.. - Impacket :...

Remote DOS BrightStor ARCserve Backup for Laptops & Desktops

======= Summary ======= Today: 31 January 2007 Reference: NGS00402 Discover: Mark Litchfield Name: Remote DOS BrightStor ARCserve Backup for Laptops & Desktops r11.1 Vendor: Computer Associates Systems Affected: BrightStor ARCserve Backup for Laptops & Desktops r11.1 Risk: High Status: Published...

eiq-dos.txt

Title: ------------------- EIQ Networks Network Security Analyzer DoS Vulnerability Vendor Notified: ------------------- Now? Background Info: ------------------- EIQ Networks Product Site: http://www.eiqnetworks.com/products/NetworkSecurityAnalyzer.shtml Description: ------------------- Remote...

WMF CreateBrushIndirect vulnerability (DoS)

The following WMF exploit appeared on milw0rm today: http://www.milw0rm.com/exploits/3111 The vulnerability is a result of the WMF parser passing a value from the file as a pointer argument to the CreateBrushIndirect function. The function dereferences the pointer and dies with an access violatio...

eIQnetworks Network Security Analyzer Null Pointer Dereference Exploit

No description provided by source. !c:\python\python.exe uncomment whichever function youd like. theyll all crash in a similar way. Any of the following "function names" will cause the service to throw an access violation while dereferencing the return value from a call to FindIndex ...

eIQnetworks Network Security Analyzer - Null Pointer Dereference

!c:\python\python.exe uncomment whichever function youd like. theyll all crash in a similar way. Any of the following "function names" will cause the service to throw an access violation while dereferencing the return value from a call to FindIndex...

Durian Web Application Server 3.02 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================ Durian Web Application Server 3.02 Denial of Service Exploit ============================================================ http://sourceforge.net/projects/durian/ //by rgod mail: retrog ...

Durian Web Application Server 3.02 - Denial of Service

Durian Web Application Server 3.02 - Denial of Service http://sourceforge.net/projects/durian/ //by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org errorreportingEALL; $serviceport = "4002"; $address = "192.168.1.3"; $ch =array"\xaa","\xa0","\x41";...

DeepBurner 1.8.0 .dbr File Parsing Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ========================================================== DeepBurner 1.8.0 .dbr File Parsing Buffer Overflow Exploit ========================================================== / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 18\12\06...

DeepBurner 1.8.0 .dbr File Parsing Buffer Overflow Exploit

No description provided by source. / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | | \ / | |/ | |/ / \ / \ | / \ // | Y / ^ /\ | //\ \ /| / / || /\ | \ | \ / / / / 18\12\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet...

Golden FTP server 1.92 (USER/PASS) Heap Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================== Golden FTP server 1.92 USER/PASS Heap Overflow PoC ==================================================== ?php 23.07 03/12/2006 Golden FTP server 1.92 freeware edition USER/PASS heap based overfl...

VUPlayer <= 2.44 m3u parsing remote buffer overflow

No description provided by source. / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | | \ / | |/ | |/ / \ / \ | / \ // | Y / ^ /\ | //\ \ /| / / || /\ | \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet...

VUPlayer <= 2.44 (M3U UNC Name) Buffer Overflow Exploit (c)

No description provided by source. / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | | \ / | |/ | |/ / \ / \ | / \ // | Y / ^ /\ | //\ \ /| / / || /\ | \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet...

VUPlayer <= 2.44 (M3U UNC Name) Buffer Overflow Exploit (c)

Exploit for unknown platform in category local exploits =========================================================== VUPlayer | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going...

VUPlayer 2.44 - '.m3u' UNC Name Buffer Overflow

/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...

VUPlayer 2.44 - .m3u UNC Name Buffer Overflow

VUPlayer 2.44 - .m3u UNC Name Buffer Overflow / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer...

Microsoft Windows - NAT Helper Components 'ipnathlp.dll' Remote Denial of Service

!/usr/bin/python Microsoft Windows NAT Helper Components ipnathlp.dll 0day Remote DoS Exploit Bug discovered by h07 Tested on XP SP2 Polish Details: Exploit192.168.0.2 -- Microsoft NAT192.168.0.1 -- ..Internet.. Process svchost.exe, module ipnathlp -- MOV DL, EAX Exception C0000005 ACCESSVIOLATIO...

Microsoft Windows - NAT Helper Components ipnathlp.dll Remote Denial of Service

Microsoft Windows - NAT Helper Components ipnathlp.dll Remote Denial of Service !/usr/bin/python Microsoft Windows NAT Helper Components ipnathlp.dll 0day Remote DoS Exploit Bug discovered by h07 Tested on XP SP2 Polish Details: Exploit192.168.0.2 -- Microsoft NAT192.168.0.1 -- ..Internet.. Proce...