exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Argeniss - Information Security

oracle-10gR1.txt

Posted Apr 28, 2006

Authored by Argeniss - Information Security | Site argeniss.com

Oracle Database 10gR1 suffers from a buffer overflow in VERIFY_LOG procedure (DB03) Oracle Database Server provides the DBMS_SNAPSHOT_UTL package that includes capability to manage materialized views. This package contains the public procedure VERIFY_LOG that is vulnerable to buffer overflow. By default DBMS_SNAPSHOT_UTL has EXECUTE permission to PUBLIC so any Oracle database user can exploit this vulnerability.

tags | advisory, overflow

SHA-256 | ea6e241657c9e065a438b5455bcab515b2160933d8125c649d1b3edd73b8d8f6

Download | Favorite | View

ms-fp-2.txt

Posted Apr 19, 2006

Authored by Argeniss - Information Security | Site argeniss.com

FrontPage Server Extensions 2002 (included in Windows Sever 2003 IIS 6.0 and available as a separate download for Windows 2000 and XP) has a web page /_vti_bin/_vti_adm/fpadmdll.dll that is used for administrative purposes. This web page is vulnerable to cross site scripting attacks allowing an attacker to run client-side script on behalf of an FPSE user. If the victim is an administrator, the attacker could take complete control of a Front Page Server Extensions 2002 server. POC exploit examples included.

tags | advisory, web, xss

systems | windows

SHA-256 | 481c7a945450e48e78979147b05693402a43777326aca41596449f2f82aa8a32

Download | Favorite | View