Tests for Nimda Worm infected HTML files

Your server appears to have been compromised by the Nimda mass mailing worm. It uses various known IIS vulnerabilities to compromise the server. SPDX-FileCopyrightText: 2001 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2004-2515

Technical details for CVE-2004-2515 are not publicly available in the provided documents. The description notes a format-string vulnerability in VMware Workstation 4.5.2 but no specifics on affected components, root cause, or fixes are included here. Monitor for updates.

CVE-2004-2515

Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow local users to execute arbitrary code via format string specifiers in command line arguments. NOTE: it is not clear if there are any default or typical circumstances under which...

CVE-2005-2944

The CVE-2005-2944 entry applies to GNOME Workstation Command Center (gwcc) 0.9.6 and earlier. The vulnerability arises in perform_file_save, where a symlink attack on the temporary file gwcc_out.txt enables local users to create and overwrite arbitrary files. The NVD entry lists a local attack ve...

CVE-2005-1394

Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to 1 wservice or 2 lockmgr...

CVE-2005-1393

Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to 1 asmaster, 2 asuser, 3 asutility, 4 se, or 5 asrecovery...

CVE-2005-1394

CVE-2005-1394 describes a format-string vulnerability in ESRI ArcInfo Workstation 9.0 where local users can escalate privileges via format string specifiers in the ARCHOME environment variable, affecting components such as wservice and lockmgr . The connected PT-2005-2391 entry confirms product/v...

PT-2005-2391 · Esri · Esri Arcinfo Workstation

Name of the Vulnerable Software and Affected Versions: ESRI ArcInfo Workstation version 9.0 Description: The issue allows local users to gain privileges via format string specifiers in the ARCHOME environment variable, affecting components such as wservice or lockmgr. Recommendations: For ESRI...

APG Classmaster Workstation Windows SMB share access vulnerability

Greetings, This vulnerability affects I believe all APG Classmaster Workstation versions. It remains a problem as an attacker can access shares with full permissions over a LAN. An attackers needs to issue a simple command in an MSDOS prompt using the net windows application, mapping an account t...

[Full-Disclosure] [ GLSA 200502-18 ] VMware Workstation: Untrusted library search path

Gentoo Linux Security Advisory GLSA 200502-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200502-18 : VMware Workstation: Untrusted library search path

The remote host is affected by the vulnerability described in GLSA-200502-18 VMware Workstation: Untrusted library search path Tavis Ormandy of the Gentoo Linux Security Audit Team has discovered that VMware Workstation searches for gdk-pixbuf loadable modules in an untrusted, world-writable...

VMware Workstation: Untrusted library search path

Background VMware Workstation is a powerful virtual machine for developers and system administrators. Description Tavis Ormandy of the Gentoo Linux Security Audit Team has discovered that VMware Workstation searches for gdk-pixbuf loadable modules in an untrusted, world-writable directory. Impact...

CVE-2004-2515

Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow local users to execute arbitrary code via format string specifiers in command line arguments. NOTE: it is not clear if there are any default or typical circumstances under which...

PT-2004-1058 · Mit +1 · Krb5-Server +5

Name of the Vulnerable Software and Affected Versions: krb5-devel versions 1.2.2 krb5-server versions 1.2.2 krb5-libs versions 1.2.2 krb5-workstation versions 1.2.2 MIT Kerberos 5 krb5 versions prior to 1.3.4 Description: The issue concerns multiple vulnerabilities in the krb5 package of Red Hat...

Windows NETBIOS Workstation Name Detection

Binary data 5213.prm...

RHEL 2.1 : ethereal (RHSA-2002:291)

Updated Ethereal packages are available which fix various security issues. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 Ethereal is a package designed for monitoring network traffic on your system. Several security issues have been found in the Ethereal packages distribut...

RHEL 2.1 : ypserv (RHSA-2002:224)

Updated ypserv packages which fix a memory leak are now available for Red Hat Linux Advanced Server. Updated 08 Jan 2003 Added fixed packages for the Itanium IA64 architecture. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 ypserv is an NIS authentication server. ypserv...

CVE-2003-0812

Stack-based buffer overflow in a logging function for Windows Workstation Service WKSSVC.DLL allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file "NetSetup.LOG", as demonstrated using the NetAddAlternateComputerName API...

MS Windows XP Workstation Service Remote Exploit (MS03-049)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows XP Workstation Service Remote Exploit MS03-049 =========================================================== / To build new netapi32.lib pedump /exp netapi32.dll...

Microsoft Windows XP - Workstation Service Remote (MS03-049)

Microsoft Windows XP - Workstation Service Remote MS03-049 / To build new netapi32.lib pedump /exp netapi32.dll netapi32.exp buildlib netapi32.exe netapi32.exp netapi32.lib netapi32.dll d:\rpcwksbo.exe WKS service remote exploit MS03-049 by fiNis fiNisatbkdotru, ver:0.1.1...