3267 matches found
EType EServ 2.98/2.99/3.0 Resource Exhaustion Denial of Service Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/7552/info A denial of service vulnerability has been reported for EServ. The vulnerability exists due to the way the server handles connections. Specifically, memory allocated for open connections are not properly freed...
Lotus Domino IMAP4 Server 6.5.4 - Remote Buffer Overflow Exploit
No description provided by source. Lotus Domino IMAP4 Server Release 6.5.4 / Windows 2000 Advanced Server x86 Remote Exploit Vulnerable: IBM Lotus Domino = 7.0.2 && 6.5.5 FP2 tested 6.5.4 Authors: Dominic Chell [email protected] & prdelka Exploitation steps: 1 The instruction call dword e...
IBM eGatherer <= 3.20.0284.0 (ActiveX) Remote Code Execution Exploit
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
Opera 6.0.x FTP View Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5401/info A cross-site scripting vulnerability in Opera has been reported. When viewing the contents of an FTP site as web content, the data within title tags is not sanitized. An attacker may embed javascript between ope...
Microsoft Windows 2000 Lanman Denial of Service Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/4532/info An issue has been discovered in Windows 2000, which could cause a denial of system services. Submitting malformed data to port 445 could cause the Lanman service to consume high CPU and Kernel mode memory usage....
Mozilla Firefox <= 1.5.0.4 - Javascript Navigator Object Code Execution PoC
No description provided by source. !-- Firefox = 1.5.0.4 Javascript navigator Object Code Execution PoC http://browserfun.blogspot.com/ The following bug mfsa2006-45 was tested on the Firefox 1.5.0.4 running on Windows 2000 SP4, Windows XP SP4, and a recently updated Gentoo Linux system. This bug...
AtomixMP3 <= 2.3 - (.M3U) Buffer Overflow Exploit
No description provided by source. / ======================================================================== 0-day AtomixMP3 = v2.3 Malformed M3U Buffer Overflow PoC ======================================================================== AtomixMP3 Player/Mixer fails to properly handle large fil...
Cerulean Studios Trillian Client 0.74 MSN Module Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11142/info Trillian is reported prone to a remote buffer overflow vulnerability. This issue occurs due to insufficient boundary checks performed by the application and may allow an attacker to execute arbitrary code on a...
Windows NT - User Mode to Ring 0 Escalation Vulnerability
No description provided by source. Microsoft Windows NT GP Trap Handler Allows Users to Switch Kernel Stack ------------------------------------------------------------------------- CVE-2010-0232 In order to support BIOS service routines in legacy 16bit applications, the Windows NT Kernel support...
Oracle Database Server <= 10.1.0.2 - Buffer Overflow Exploit
No description provided by source. / Advanced SQL Injection in Oracle databases Exploit for the buffer overflow vulnerability in procedure MDSYS.MD2.SDOCODESIZE of Oracle Database Server version 10.1.0.2 under Windows 2000 Server SP4. Fixes available at http://metalink.oracle.com. The exploit...
UltraISO 9.3.6.2750 - (.mds) (.mdf) Buffer Overflow PoC
No description provided by source. / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage or losses of any kind cause...
AnalogX Proxy 4.0 Socks4A Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5138/info AnalogX Proxy is prone to a buffer overflow condition when attempting to handle malformed SOCKS4A requests via TCP port 1080. This may be exploited to create a denial of service condition or to potentially execu...
Microsoft Active Directory LDAP Server Username Enumeration Weakness
No description provided by source. source: http://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this weakness to discern valid...
Microsoft Windows 2000 Remote CPU-overload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1415/info Sending a stream of binary zeros to any one of a number of Windows 2000 ports can cause 100% CPU utilization. The ports that were found vulnerable include TCP ports 7, 9, 21, 23, 7778 and UDP ports 53, 67, 68,...
Computer Associates Alert Notification Buffer Overflow
No description provided by source. $Id: etrustitmalert.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Snort <= 2.4.2 BackOrifice Remote Buffer Overflow Exploit (meta)
No description provided by source. for educational purpose only by Kira trir00t at gmail.com package Msf::Exploit::snortbooverflowwin32; use base 'Msf::Exploit'; use strict; use Pex::Text; my $holdrand; my $advanced = ; my $info = 'Name' = 'Snort Back Orifice Preprocessor Overflow', 'Version' =...
Microsoft Windows 2000 Multiple COM Object Instantiation Code Execution Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19636/info Microsoft Windows 2000 is prone to multiple memory-corruption vulnerabilities that are related to the instantiation of COM objects. These issues may be remotely triggered through Internet Explorer. The...
Microsoft Windows 2000 Telnet Username DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2838/info Due to a flaw in the implementation of the telnet service, it is possible for a remote client to perform a denial of service attack against a host. If approximately 4300 characters already exist in the input...
IA WebMail 3.x - (iaregdll.dll version 1.0.0.5) Remote Exploit
No description provided by source. !/usr/bin/perl -w IA WebMail 3.x iaregdll.dll version 1.0.0.5 Remote Exploit Application Specific Shellcode: URL Downloader - www elitehaven net/ncat.exe downloaded - c:\nc.exe created By Peter Winter-Smith peter4020 hotmail com Shellcode included - will need...
Microsoft Windows 2000 Telnet Server DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1414/info Microsoft Windows 2000 Server comes with a telnet server to provide remote console access. A remote attacker can send a stream of binary zeros to the server, causing it to fail. If automatic restart is enabled,...