Roger Wilco 1.x - Client Data Buffer Overflow

/ by Luigi Auriemma Use -DWIN to compile it on Windows UNIX & WIN VERSION / include include include ifdef WIN include include "winerr.h" define close closesocket else include include include include include endif define VER "0.2" define PORT 3782 define UDPORT 32230 define BUFFSZ 4096 define...

Witango & Tango 2000 Application Server Remote System Buffer Overrun

NGSSoftware Insight Security Research Advisory Name: WiTango Application Server & Tango 2000 Systems Affected: Windows Severity: Critical Risk Category: Remote System Buffer Overrun Vendor URL: http://www.witango.com Author: Mark Litchfield [email protected] Date: 18th July 2003 Advisory numbe...

core.netmeeting.txt

Core Security Technologies Advisory http://www.coresecurity.com NetMeeting Directory Traversal Vulnerability Date Published: 2003-07-02 Last Update: 2003-07-02 Advisory ID: CORE-2003-0305-04 Bugtraq ID: 7931 CVE Name: None currently assigned. Title: NetMeeting Directory Traversal Vulnerability...

Apple QuickTime Player for Windows contains buffer overflow in processing of overly long QuickTime URLs

Overview Apple's QuickTime Player is a player for files and streaming media in the QuickTime format. Versions of the player are available for both the Microsoft Windows and Apple MacOS platforms. A flaw in the version for Windows could allow a remote attacker to execute arbitrary code on a...

Apache Web Server 2.0.x - MS-DOS Device Name Denial of Service

source: https://www.securityfocus.com/bid/6662/info A vulnerability has been reported in Apache Web server for Microsoft Windows. The vulnerability exists in the way some HTTP requests are handled by the Apache Web server. Specifically, HTTP GET requests that involve reserved MS-DOS device names...

Microsoft Windows XP/2000 - Fontview Denial of Service

source: https://www.securityfocus.com/bid/6536/info Microsoft Windows is vulnerable to a denial of service condition when attempting to view certain OpenType fonts .otf. When a malformed font file is viewed with the default Windows font viewer, it will cause the system to Blue Screen and reboot...

CVE-2002-1857

jo! jo Webserver 1.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-1859

Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

Full Disclosure: Windows File Protection Arbitrary Certificate Chain Vulnerability

============================================================================ == SECURITY ALERT Windows File Protection Arbitrary Certificate Chain Vulnerability December 26, 2002 Full Disclosure, [email protected] and others December 24, 2002 Private Disclosure Jason Coombs [email protected]...

Hyperion FTP Server buffer overflow

hi Hyperion FTP Server http://www.mollensoft.com/ is a powerful, reliable FTP server for Windows 95/98/NT/2000, and supports all basic FTP commands, and much more, such as passive mode. A vulnerability exists in Hyperion Ftp Server version 2.8.11which allows a remote user to execute an arbitrary...

CVE-2002-1256

The SMB signing capability in the Server Message Block SMB protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying gro...

Microsoft Security Bulletin MS02-071

Microsoft Security Bulletin MS02-071 Print Flaw in Windows WMTIMER Message Handling Could Enable Privilege Elevation 328310 Originally posted: December 11, 2002 Summary Who should read this bulletin: Customers using Microsoft® Windows® NT 4.0, Windows 2000, and Windows XP. Impact of vulnerability...

[SecurityOffice] Enceladus Server Suite v3.9 Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Enceladus Server Suite v3.9 Buffer Overflow Vulnerability -- - -- Type Buffer Overflow - -- Release Date December 09, 2002 - -- Product / Vendor Enceladus Server Suite is an Internet/Intranet lightweight Web and FTP Server for Windows, provides...

AIM 4.8.2790 remote file execution vulnerability

Description: AOL Instant Messenger version 4.8.2790 will execute programs when a user clicks on a not-so-specially crafted hypertext link. Versions affected: AOL Instant Messenger 4.8.2790. 4.7.2480 is not vulnerable and neither is 5.0.2938. This bug was confirmed on both Windows 2000 and Windows...

AOL Instant Messenger 4.8.2790 - Local File Execution

AOL Instant Messenger 4.8.2790 - Local File Execution source: https://www.securityfocus.com/bid/6027/info AOL Instant Messenger AIM is prone to an issue which may allow attackers to execute arbitrary files on the client system. It is possible to send a malicious link which references local files ...

Microsoft Windows XP/2000/NT 4.0 - NetDDE Privilege Escalation (2)

// source: https://www.securityfocus.com/bid/5927/info The Winlogon NetDDE Agent can be leveraged to allow local privilege escalation. This is related to the Microsoft Windows Window Message Subsystem Design Error Vulnerability BID 5408. A local user can use a WMCOPYDATA message to send arbitrary...

MS02-045: Microsoft Windows SMB Protocol SMB_COM_TRANSACTION Packet Remote Overflow DoS (326830) (uncredentialed check)

The remote host is vulnerable to a denial of service attack in its SMB stack. An attacker may exploit this flaw to crash the remote host remotely, without any authentication. C Tenable Network Security, Inc. This script was written by Renaud Deraison Thanks to Ivan Arce who provided me with all t...

Opera FTP View Cross-Site Scripting Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Opera FTP View Cross-Site Scripting Vulnerability Date: 4 August 2002 Author: Eiji James Yoshida [email protected] Risk: Medium Vulnerable: Windows2000 SP2 Opera 6.03 Windows2000 SP2 Opera 6.04 Overview: Opera allows running Malicious...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (2)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Abyss Web Server version 1.0.3 shows file and directory content

Abyss Web Server version 1.0.3 shows file and directory content .oO Overview Oo. Abyss Web Server version 1.0.3 shows file and directory content Discovered on 2002, June, 30th Vendor: Aprelium Abyss Web Server 1.0.3 is a free personal web server available for Windows and Linux operating systems...