4937 matches found
Microsoft Windows NT 4.0/2000 - Local Descriptor Table Privilege Escalation (MS04-011)
// source: https://www.securityfocus.com/bid/10122/info Microsoft Windows Local Descriptor Table programming interface is prone to a privilege-escalation vulnerability. A local attacker may be able to create a malicious entry in the Local Descriptor Table. This entry may point into protected...
CVE-2004-0119
The Negotiate Security Software Provider SSP interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service crash from null dereference or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selectio...
Microsoft Windows Object Identity Network Communication Vulnerability
Description It has been reported that Microsoft Windows is prone to a vulnerability in the method of creation of object identities that may allow unauthorized network communication. This issue is due to a design error that causes the process to be carried out insecurely. This issue may be leverag...
Microsoft Windows WMF/EMF Image Formats Remote Buffer Overflow Vulnerability
Description It has been reported that Windows may be prone to a remote buffer overflow vulnerability when rendering WMF/EMF image files. An attacker could create a malicious WMF or EMF file and entice a user to view the file via an application that supports the WMF and EMF formats. Immediate...
Microsoft Windows Private Communications Transport Protocol Buffer Overrun Vulnerability
Description Various Microsoft Windows operating systems are prone to a remotely exploitable stack-based buffer overrun via the PCT Private Communications Transport protocol. Successful exploitation of this issue could allow a remote attacker to execute malicious code on a vulnerable system,...
Eudora 6.0.3 Attachment Spoofing Exploit (windows)
Exploit for unknown platform in category remote exploits ================================================== Eudora 6.0.3 Attachment Spoofing Exploit windows ================================================== !/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject...
Buffer Overrun in Microsoft Windows 2000 Workstation Service (MS03-049)
...
Accipiter DirectServer 6.0 - Remote File Disclosure
Accipiter DirectServer 6.0 - Remote File Disclosure source: https://www.securityfocus.com/bid/9389/info This vulnerability may allow and attacker to gain access to files that reside outside of the web root directory using a specially crafted URI that contains URL-encoded variations of directory...
KpyM Telnet Server DoS
The remote host is running KpyM Telnet Server, a Telnet server for Windows. According to its banner, the installed version of KpyM is older than 1.06. Such versions mark a connection as free before all components, such as sockets and threads, are shut down. By flooding the service with connection...
CVE-2003-0837
Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary code via the INVOKE command...
Microsoft Windows Workstation service vulnerable to buffer overflow when sent specially crafted network message
Overview A remotely exploitable vulnerability affects Microsoft Windows Systems. Exploitation of this vulnerability could permit the execution of arbitrary code on the system with elevated privileges. The exploit vector for this vulnerability is highly conducive to a worm or other automated...
MS03-043: Buffer Overrun in Messenger Service (828035) (uncredentialed check)
A security vulnerability exists in the Messenger Service that could allow arbitrary code execution on an affected system. An attacker who successfully exploited this vulnerability could be able to run code with Local System privileges on an affected system or could cause the Messenger Service to...
Buffer overflow in Microsoft Messenger Service
Overview There is a buffer overflow in the Microsoft Windows Messenger service that could allow an attacker to execute arbitrary code on most recent versions of Microsoft Windows. Description There is a buffer overflow vulnerability in the Microsoft Windows Messenger service. This could allow an...
Microsoft Windows Messenger Service Buffer Overrun Vulnerability
Description Microsoft Windows Messenger Service is prone to a remotely exploitable buffer overrun vulnerability. This is due to insufficient bounds checking of messages before they are passed to an internal buffer. Exploitation could result in a denial of service or in execution of malicious code...
MS03-043: Buffer Overrun in Messenger Service (828035)
The remote version of Windows contains a Heap Overflow in the Messenger service that could allow an attacker to execute arbitrary code on the remote host with the SYSTEM privileges. A series of worms Gaobot, Agobot, ... are known to exploit this vulnerability in the wild. C Tenable Network...
Microsoft Windows XP2000 - PostThreadMessage() Arbitrary Process Killing
Microsoft Windows XP2000 - PostThreadMessage Arbitrary Process Killing // source: https://www.securityfocus.com/bid/8747/info A vulnerability has been discovered in the Microsoft Windows operating system. The flaw lies in the way that processes handle messages sent from another process via the...
Microsoft Windows XP/2000 - PostThreadMessage() Arbitrary Process Killing
// source: https://www.securityfocus.com/bid/8747/info A vulnerability has been discovered in the Microsoft Windows operating system. The flaw lies in the way that processes handle messages sent from another process via the PostThreadMessage API call. Reports indicate that, if a running process h...
NULLhttpd <= 0.5.1 remote resources consumption
Luigi Auriemma Application: NULLhttpd http://nullhttpd.sourceforge.net/httpd/ Versions: = 0.5.1 Platforms: All supported Win & Unix Bug: Remote resources consumption Risk: Medium Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code...
SpeakFreely for Win <= 7.6a spoofed DoS
Luigi Auriemma Application: SpeakFreely http://www.fourmilab.ch/speakfree/ http://speak-freely.sourceforge.net Versions: = 7.6a Platforms: Windows Unix versions are NOT vulnerable Bug: Remote crash caused by multiple spoofed connections Risk: Low Author: Luigi Auriemma e-mail: [email protected]...
rpcHeap.txt
The Analysis of RPC Long Filename Heap Overflow AND a Way to Write Universal Heap Overflow of Windows Create: 2003-09-21 Author: flashsky flashsky1atsina.com The Analysis of RPC Long Filename Heap Overflow AND a Way to Write Universal Heap Overflow of Windows Author:FLASHSKY...