CVE-2009-0319

CVE-2009-0319 affects Sun Solaris autofs kernel module (Solaris 8–10) and OpenSolaris before snv_108. Root cause cited as xdr processing problems in autofs. Impact scope: local user can cause autofs mount outage (DoS) and possibly gain privileges. Affected components: autofs in the kernel; vulner...

CVE-2008-4619

The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service daemon crash via a crafted request to procedure 8 in program 100000 rpcbind, related to the XDRDECODE operation and the taddr2uaddr function. NOTE: this might be a duplicate of CVE-2007-0165...

Solaris 9 PortBind XDR-DECODE taddr2uaddr() Remote DoS Exploit

No description provided by source. / //////////////////////////////////////////////////////////// // Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS //////////////////////////////////////////////////////////// // // Federico L. Bossi Bonin // fbossiatglobalSTdotcomdotar...

Solaris 9 PortBind XDR-DECODE taddr2uaddr() Remote DoS Exploit

Exploit for solaris platform in category dos / poc ============================================================== Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS Exploit ============================================================== /...

Solaris 9 PortBind - XDR-DECODE 'taddr2uaddr()' Remote Denial of Service

/ //////////////////////////////////////////////////////////// // Solaris 9 PortBind XDR-DECODE taddr2uaddr Remote DoS //////////////////////////////////////////////////////////// // // Federico L. Bossi Bonin // fbossiatglobalSTdotcomdotar /////////////////////////////////////////////////////...

CA ARCserve Backup xdr_rwsstring buffer overflow

Added: 05/27/2008 CVE: CVE-2008-2242 BID: 29283 OSVDB: 45368 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. It runs several services which use the SUN Remote Procedure Call SUN-RPC protocol. SUN-RPC messages are defined using the External Data...

CA ARCserve Backup xdr_rwsstring buffer overflow

Added: 05/27/2008 CVE: CVE-2008-2242 BID: 29283 OSVDB: 45368 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. It runs several services which use the SUN Remote Procedure Call SUN-RPC protocol. SUN-RPC messages are defined using the External Data...

Stack overflow

Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdrrwsstring function...

CVE-2008-2242

Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdrrwsstring function...

CVE-2008-2242

Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdrrwsstring function...

CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities

Title: CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities CA Advisory Date: 2008-05-19 Reported By: An anonymous researcher working with the iDefense VCP Damian Put working with ZDI/TippingPoint Impact: A remote attacker can cause a denial of service or execute arbitrary code. Summary...

CA BrightStor ARCserve Backup multiple security vulnerabilities

caloggerd directory traversal. Buffer overflow in multiple xdr functions...

CA BrightStor ARCserve Backup XDR Parsing Buffer Overflow Vulnerability

This vulnerability allws attackers to execute arbitrary code on vulnerable installations of CA BrightStor ARCserve Backup for Linux. User interaction is not required to exploit this vulnerability. The specific flaw exists due to improper bounds checking in the xdrrwsstring library function. By...

Microsoft Internet Explorer 8 Beta 1 - XDR Prototype Hijacking Denial of Service

source: https://www.securityfocus.com/bid/28580/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted webpage. Successfully exploiting this issue will allow attackers to crash the...

Firebird关系数据库'protocol.cpp' XDR协议远程内存破坏漏洞

BUGTRAQ ID: 28403 CVE ID:CVE-2008-0387 CNCVE ID:CNCVE-20080387 Firebird Relational Database是一款关系型数据库。 Firebird Relational Database管理器处理XDR协议上部分标签时存在整数溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当src/remote/protocol.cpp解析器接收到如下非法数据的操作时： opreceive opstart opstartandreceive opsend opstartandsend...

GLSA-200803-02 : Firebird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-02 Firebird: Multiple vulnerabilities Firebird does not properly handle certain types of XDR requests, resulting in an integer overflow CVE-2008-0387. Furthermore, it is vulnerable to a buffer overflow when processing...

Firebird: Multiple vulnerabilities

Background Firebird is a multi-platform, open source relational database. Description Firebird does not properly handle certain types of XDR requests, resulting in an integer overflow CVE-2008-0387. Furthermore, it is vulnerable to a buffer overflow when processing usernames CVE-2008-0467. Impact...

Heap overflow

Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager ISM, as used in Informix Dynamic Server IDS 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests...

CVE-2008-0768

Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager ISM, as used in Informix Dynamic Server IDS 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests...

CVE-2008-0768

Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager ISM, as used in Informix Dynamic Server IDS 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests...