.:[ packet storm ]:.
                             
security without boundaries
security without boundaries

 ///  File Name:10.14.08-1.txt
Description:
iDefense Security Advisory 10.14.08 - Remote exploitation of an arbitrary command execution vulnerability in Microsoft Corp.'s Host Integration Server 2006 could allow an attacker to execute arbitrary code with the privileges of the affected service. The RPC interface exposes several methods that an unauthenticated attacker can use to execute arbitrary programs on the server. RPC opcodes 1 and 6 both allow an attacker to call the CreateProcess() function with full control over the application started, as well as the command line passed to it. This allows an attacker to run arbitrary programs on the server. iDefense has confirmed the existence of this vulnerability in Host Integration Server 2006. Previous versions may also be affected.
Author:Stephen Fewer
Homepage:http://www.idefense.com/
File Size:3959
Related CVE(s):CVE-2008-3466
Last Modified:Oct 14 16:44:33 2008
MD5 Checksum:05e989925ceb282962a869ddba7121b7

 .:. Back
 

 ///  Last 10 Files
  1. :· USN-686-1.txt
  2. :· USN-685-1.txt
  3. :· clamav0941-overflow.txt
  4. :· SSRT080141.txt
  5. :· cainabel-overflow.txt
  6. :· SVRT-06-08.txt
  7. :· radasm-hijack.txt
  8. :· joomlajmovies-sql.txt
  9. :· yappang-xss.txt
  10. :· buzzywall-xss.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Advisories
  1. :· USN-686-1.txt
  2. :· USN-685-1.txt
  3. :· SSRT080141.txt
  4. :· SVRT-06-08.txt
  5. :· proclan-fixation.txt
  6. :· dsa-1679-1.txt
  7. :· dsa-1678-1.txt
  8. :· VMSA-2008-0019.txt
  9. :· USN-684-1.txt
  10. :· dsa-1677-1.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Exploits
  1. :· clamav0941-overflow.txt
  2. :· cainabel-overflow.txt
  3. :· radasm-hijack.txt
  4. :· joomlajmovies-sql.txt
  5. :· yappang-xss.txt
  6. :· buzzywall-xss.txt
  7. :· freekot-sql.txt
  8. :· revsense-sqlxss.txt
  9. :· sailplanner-sqlxsslfi.txt
  10. :· securedownload-xsscm.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Tools
  1. :· vncrush.txt
  2. :· rshatter.txt
  3. :· Exomind-v0.2.tar.gz
  4. :· clamav-0.94.2.tar.gz
  5. :· cadfile.zip
  6. :· anehta-v0.6.0fixed2.zip
  7. :· tagfuzz.txt
  8. :· BrowserRider.20081124.tar.bz2
  9. :· mp3nema-v0_2.tar.gz
  10. :· squid-nufw-helper-1.1.3.tar.gz
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Misc
  1. :· binsh-shellcode.txt
  2. :· catshadow-shellcode.txt
  3. :· fsharp-reverse.pdf
  4. :· sqlinj-insouts.txt
  5. :· format-string-linux.txt
  6. :· frame-pointer-overwrite-linux.txt
  7. :· iptablesf.txt
  8. :· nufw-2.2.19.tar.gz
  9. :· frhack2009-cfp.txt
  10. :· oracle-forensics-scns.pdf
[ Last 20 | Last 50 | Last 100 ]


 .:. TopPrivacy Statement | Copyright Notice