Microsoft Windows - Workstation Service WKSSVC Remote (MS03-049)

/ Author: snooq Date: 14 November 2003 +++++++++++++ THIS IS A PRIVATE VERSION +++++++++++++++ This is just slightly better than the one I posted to packetstorm.... The public version will crash 'services.exe' immediately while this one crash it only when u exit from shell.... I'm still trying to...

SRT2003-11-02-0115 - NIPrint LPD-LPR Remote overflow

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

Win32 'Shatter' attacks

Is priveleged application doesn't check system messages data it may be possible to execute code in application context by setting callback functions or excluding limits causing buffer overflws...

Win32 Device Drivers Communication Vulnerabilities

Win32 Device Drivers Communication Vulnerabilities Proof Of Concept - Exploiting Norton AntiVirus Device Driver Written by Lord YuP / sEC-Labs ^ tkT Tested on NAV 2002! zipped exploit http://sec-labs.hack.pl DISCLAIMER: This paper is written in educational purposes only. Author, sEC-Labs, tkT tea...

Auction Works XXS Vulnerability

1ndonesian Security Team 1st http://bosen.net/releases/ ============================================================================= Security Advisory Advisory Name: Auction Works XXS Vulnerability Release Date: 07/15/2003 Application: Current/Running Platform: Win32 Severity: Medium BUG Type: X...

CyberShop-ASP 6.0Fx Vulnerable with shopdbtest.asp

$Indonesia - Security Development Team 2000 - 2003 Advisory Name: CyberShop-ASP 6.0Fx Vulnerable with shopdbtest.asp Release Date: 3:41 PM 7/13/03 Application: CyberShop ASP 6.0Fx Platform: Win32 Severity: High BUG Type: Security leak Author: DrPonidi [email protected] Discover by:...

bosen-adv.7.txt

$Id: bosen-adv.7,v1 25/06/2003 bosen Exp $ 1ndonesian Security Team 1st Bosen Advisory 7 ProductCart SQL Injection 25/06/2003 ProductCart SQL Injection Vulnerability 1ndonesian Security Team 1st http://bosen.net/releases/...

Advisory Name: VPASP SQL Injection Vulnerability & Exploit CODE

Advisory Name: VPASP SQL Injection Vulnerability & Exploit CODE Release Date: 05/07/2003 Application: 5 Platform: Win32/MSSQL Severity: High BUG Type: SQL Injection Discover by: AresU [email protected] & TioEuy [email protected] Author: Bosen [email protected] Vendor Status: See below. Vendor URL:...

CyberStrong Shopping Cart - Advisory & Exploit Code

Advisory Name: Cyberstrong eShop SQL Injection Vulnerability Release Date: 05/07/2003 Application: CyberStrong eShop v4.2 Platform: Win32/MSSQL Severity: High BUG Type: SQL Injection Discover by: AresU [email protected] Author: Bosen [email protected] Vendor Status: See below. Vendor URL:...

ws_FTP pro remote buffer overflow

Advisory Название : IPswitch WSFTP Pro client 7.6- удаленное переполнение буфера и выполнение произвольного кода. Сайт : www.ipswitch.com Платформа : win32 Автор : lobsta/h [email protected] http://l0bstah.1s.to Информация о программном продукте WSFTP pro - Быстрый, простой, обеспечивающий...

CVE-2002-0061

Apache HTTP Server on Windows (Win32) is vulnerable prior to versions 1.3.24 and 2.0.x prior to 2.0.34-beta. The flaw allows remote attackers to execute arbitrary commands by sending shell metacharacters (a pipe |) as arguments to batch (.bat) or .cmd scripts, which reach the shell interpreter (c...

Win32: Postmessage API security flaw

Hello, I would like to bring to your notice a certain vulnerability that has existed in Win 9x platforms for many years and now in Win2k/XP. Most of us our familiar with password revealers and password stealing trojans. Though flaws in Windows Messaging API have been show before this one relates ...

DOS против AVP

Ошибка в эмуляции процессора AVP32. При проверке исполняемого файла win32-pe с первой выполняющейся командой jmp $ EB FE FF AVP 3.5 зацикливается и загружает процессор на 100 www.newmail.ru -- Новая Почта: все по-новому...

AN HTTPd v.1.41e: DoS, CSS, real patch attack

Damage Hacking Group security advisory www.dhgroup.org Product: AN HTTPd server Authors: www.st.rim.or.jp Vulnerability: DoS, CSS, 'real patch' attack Overview-------------------------------------------------------------- This is Japanez http-server for win32-platforms. U can download it from...

CVE-2002-1940

LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information. NOTE: it has been reported that this problem is due to the OS and not the application...

CVE-2002-0969

Buffer overflow in MySQL daemon mysqld before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group...

wp-02-0003: MySQL Locally Exploitable Buffer Overflow

Westpoint Security Advisory Title: MySQL Locally Exploitable Buffer Overflow Risk Rating: Medium Software: mySQL Database v3.23.49-nt Platforms: Win32 other platforms not tested Vendor URL: www.mysql.com Author: Matt Moore [email protected] Date: 1st October 2002 Advisory ID: wp-02-0003 CVE...

CVE-2002-0971

Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box...

advisory

----------- UkR security team advisory ------------ WebServer 4 Everyone directory traversal bug ----------------------------------------------------- Name: WebServer 4 Everyone directory traversal bug Date: 28.08.2002 Author: UkR-XblP/ UkR security team/ http://ust.dp.ua Application: WebServer 4...

CVE-2002-0971

Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box...