Microsoft Windows - NetDDE Remote Buffer Overflow (MS04-031)

/ HOD-ms04031-netdde-expl.c: 2004-12-30: PUBLIC v.0.2 Copyright c 2004 houseofdabus. MS04-031 NetDDE buffer overflow vulnerability PoC .:: houseofdabus ::. special unstable version --------------------------------------------------------------------- Description: A remote code execution...

Windows LoadImage integer overflow

Integer overflow on bitmap size calculation...

IPD (Integrity Protection Driver) - Denial of Service

IPD Integrity Protection Driver - Denial of Service / ipd-dos.c Copyright c 2002-2004 By Next Generation Security S.L. All rights reserved Compiles with: cl ipd-dos.c Madrid, August 2004 / include define MYNULL 0x01 typedef DWORD zwopensectionTYPEDWORD Handle, DWORD mask, DWORD oa; int mainint...

ISS BlackICE/PC Protection Unprivileged User Local DoS

ISS BlackICE is a personal Firewall/IDS for windows Desktops. Based on the version number, the remote BlackICE install is vulnerable to a local attack due to incorrect file permissions. Nessus based the results of this test on the contents of the local BlackICE configuration file. C Tenable Netwo...

CVE-2004-0540

Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name FQDN is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain...

SUN virtual java machine DoS

Invalid fonts handling can crash virtual machine under Windows...

Multiple bugs in Sun-One on Windows

JSP source code disclosure, crossite scripting, weak encryption...

MS04-011: Microsoft Hotfix (credentialed check) (835732)

The remote host is missing a critical Microsoft Windows Security Update 835732. This update fixes various flaws that could allow an attacker to execute arbitrary code on the remote host. A series of worms Sasser are known to exploit this vulnerability in the wild. C Tenable Network Security, Inc...

eudora603.pl

Eudora 6.0.3 for Windows was released recently. Though known for years, the spoofing of attachments is still not fixed; the problem with LaunchProtect is not fixed either. Spoofing demo essentially identical to 6.0.1 version below. Cheers, Paul Szabo - [email protected]...

BargainBuddy Software Detection

BargainBuddy is installed on the remote host. This is an adware program that monitors web searches and displays advertisements based on the search terms. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12010; scriptversion"1.17";...

MapQuest Toolbar Detection

The remote host is using the MapQuest Toolbar program. You should ensure that the user intended to install this software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12016; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate",...

Microsoft Windows XP2000 - showHelp .CHM File Execution (MS03-004)

Microsoft Windows XP2000 - showHelp .CHM File Execution MS03-004 source: https://www.securityfocus.com/bid/9320/info Microsoft Windows is prone to a security flaw in the implementation of the showHelp function. Microsoft previously released patches that provide security measures to prevent abuse ...

Microsoft Windows - ListBoxComboBox Control Local (MS03-045)

Microsoft Windows - ListBoxComboBox Control Local MS03-045 / \ local ListBox/ComboBox exploit for Win32 / \ Created by xCrZx crazyeinstein yahoo com /11.11.03/ / \ Usage: MS03-045.exe -r return address / \ there is two targets: CBDIR for ComboBox, LBDIR for ListBox. / \ As to return address it...

Microsoft Windows SMB Registry : SNMP Registry Key Permission Weakness Local Privilege Escalation

The registry key HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters can be modified by users who are not in the admin group. Write access to this key allows an unprivileged user to gain additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11868;...

The Analysis of RPC Long Filename Heap Overflow AND a Way to Write Universal Heap Overflow of Windows

The Analysis of RPC Long Filename Heap Overflow AND a Way to Write Universal Heap Overflow of Windows AuthorFLASHSKY SITEWWW.XFOCUS.NETWWW.VENUSTECH.COM.CN WWW.SHOPSKY.COM [email protected] Venus Active Defence Research Center Thanks [email protected],[email protected] Colleagues of...

Microsoft Windows shlwapi.dll Malformed HTML Tag Handling Null Pointer DoS

The remote host is running a version of the shlwapi.dll which crashes when processing a malformed HTML form. An attacker may use this flaw to prevent the users of this host from working properly. To exploit this flaw, an attacker would need to send a malformed HTML file to the remote user, either...

Microsoft Windows Administrator Default Password Detection (W32/Deloder Worm Susceptibility)

W32/Deloder is a worm that tries to connect to a remote share by using a list of built-in administrator passwords. Nessus was able to connect to this host with one of these credentials. The worm W32/Deloder may use it to break into the remote host and upload infected data in the remote shares. C...

CVE-2002-1875

Entercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative users to obtain the entercept agent password, which could allow the administrators to log on as the enterceptagent account and conceal their identity...

CVE-2002-1860

Pramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-1861

Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...