Section: .. / 0712-advisories /
| /// File Name: |
ZDI-07-078.txt |
Description:
|
A vulnerability allows attackers to execute arbitrary code on vulnerable installations of St. Bernard Open File Manager. Authentication is not required to exploit this vulnerability. The specific flaw resides in the Open File Manager service, ofmnt.exe, which listens by default on a random TCP port near 1000. The process blindly copies user-suppled data to a static heap buffer. By supplying an overly large amount of data, an attacker can overflow that buffer leading to arbitrary code execution in the context of the SYSTEM user. Open File Manager version 9.5 is affected.
| | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 3361 | | Related CVE(s): | CVE-2007-6281 | | Last Modified: | Dec 17 21:23:04 2007 |
| MD5 Checksum: | 31da33da8dcfead04f175ae756208305 |
|
| /// File Name: |
ZDI-07-079.txt |
Description:
|
A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard HP-UX operating system. Authentication is not required to exploit this vulnerability. The specific flaw exists within the function sw_rpc_agent_init (opcode 0x04) defined in swagentd. Specific malformed arguments can cause function pointers to be overwritten and thereby result in arbitrary code execution. HP-UX version 11.11 is affected.
| | Author: | Tenable Network Security | | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 3137 | | Related CVE(s): | CVE-2007-6195 | | Last Modified: | Dec 17 21:24:12 2007 |
| MD5 Checksum: | ad412a33d41e87fe9a61a70ae52818d0 |
|
| /// File Name: |
zoomprayer.txt |
Description:
|
Zoom Player versions 6.00 beta 2 and below suffer from a unicode related buffer overflow vulnerability.
| | Author: | Luigi Auriemma | | Homepage: | http://aluigi.org/ | | Related Exploit: | zoomprayer.tgz | | File Size: | 1624 | | Last Modified: | Dec 24 15:05:30 2007 |
| MD5 Checksum: | 2702f61a218bbd385e2e5237529fdfd8 |
|
| /// File Name: |
ZSA-2007-029.txt |
Description:
|
syslog-ng Open Source Edition versions below 2.0.6 and Premium Edition versions below 2.1.8 suffer from a denial of service vulnerability.
| | Author: | Oriol Carreras | | Homepage: | http://www.balabit.com/network-security/syslog-ng/ | | File Size: | 2947 | | Last Modified: | Dec 17 21:08:34 2007 |
| MD5 Checksum: | f36fe0adc8e9edc5d00ee1a0af237a9c |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
