ID

10647

Nom

ntpd overflow

Auteurs

This script is Copyright (C) 2001 Renaud Deraison

Catégorie

Gain root remotely

Action

destructive_attack

Résumé

crashes the remote ntpd

Description

Synopsis : It is possible to execute code on the remote host through the NTP server. Description : The remote NTP server was vulnerable to a buffer overflow attack which allows anyone to use it to execute arbitrary code as root. Solution : Disable this service if you do not use it, or upgrade. Risk factor : Critical / CVSS Base Score : 10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

Unreal secure remote buffer overflow
VERITAS Backup Exec Agent Remote Buffer Overflow Vulnerability (DoS)
Tinyproxy heap overflow
Computer Associates Message Queuing Denial Of Service Vulnerabilities
eIQnetworks Enterprise Security Analyzer Syslog Server Multiple Remote Overflow Vulnerabilities
IAXClient Truncated Frames Buffer Overflow Vulnerabilities
GFI MailSecurity Web Module Buffer Overflow Vulnerability
RaidenHTTPD Multiple Remote Vulnerabilities
SOCKS4 username overflow
Gnu Cfserv remote buffer overflow
Computer Associates Message Queuing Buffer Overflow Vulnerability
pam_smb / pam_ntdom overflow
IgnitionServer Denial of Service
Ipswitch IMail Server SMTP Service Code Execution Vulnerability
Solaris lpd remote command execution
Oracle WebLogic Server mod_wl POST Request Remote Overflow
IIS : WebDAV Overflow (MS03-007)
dwhttpd format string
Rendezvous HTTP Interface Buffer Overflow Vulnerability
SysV /bin/login buffer overflow (telnet)
IgnitionServer Multiple Vulnerabilities
BrightStor ARCserve Backup Multiple Vulnerabilities
MailEnable POP Service PASS Command Buffer Overflow Vulnerability (ME-10026)
Samba Fragment Reassembly Overflow
EMC AlphaStor Library Manager Remote Code Execution Vulnerability
Kerio MailServer < 6.5.0 Multiple Vulnerabilities
Golden FTP Server APPE Command Remote Overflow
Hummingbird lpd Buffer Overflow Vulnerability
VERITAS Backup Exec Agent Browser Remote Buffer Overflow Vulnerability (DoS)
Lotus Notes Attachment Handling Vulnerabilities
BrightStor ARCserve Backup Tape Engine and Portmapper Multiple Vulnerabilities (QO86255)
rsync path sanitation vulnerability
Webserver4everyone too long URL
ngIRCd Remote Buffer Overflow Vulnerability
Brightmail AntiSpam bmagent Multiple Remote Vulnerabilities (DoS, Traversal)
MailEnable POP3 Server APOP Buffer Overflow Vulnerability
rsync array overflow
eIQnetworks Enterprise Security Analyzer Monitoring.exe Multiple Command Overflow
CA ARCserve Backup RPC Interface (asdbapi.dll) Traversal Arbitrary Command Execution
Rover pop3 overflow
Netware Perl CGI overflow
Veritas Storage Foundation NULL NTLMSSP Authentication Bypass Vulnerability (SYM08-015)
DHCP server overflow / format string bug
INN Control Message overflow
MailEnable IMAP EXAMINE Command Buffer Overflow
IIS .HTR overflow
OpenSSH < 3.7.1
4D WebStar FTP Overflow
rsync heap overflow
Ipswitch IMail Server < 2006.2 Multiple Buffer Overflow Vulnerabilities
Versant Connection Services Daemon Command Execution Vulnerability
MDaemon IMAP Server Format String Vulnerability
WinProxy < 6.1a Multiple Vulnerabilities (registry check)
Buffer overflow in BSD in.lpd
fakeidentd overflow
OpenSSH < 2.1.1 UseLogin feature
Oracle WebLogic Server mod_wl Invalid Parameter Remote Overflow (1150354)
Samba trans2open buffer overflow
Informix Dynamic Server Multiple Vulnerabilities
WinProxy < 6.1a HTTP Proxy Multiple Vulnerabilities
Kerio MailServer < 6.4.1 Vulnerability
iPlanet unauthorized sensitive data retrieval
MailEnable IMAP Service Unspecified Buffer Overflow Vulnerability (ME-10018)
BlackBerry Enterprise Server Attachment Buffer Overflow Vulnerabilities
DeleGate DNS Response Denial of Service Vulnerability
Tftpd32 Filename Buffer Overflow Vulnerability
ArGoSoft FTP Server RNTO Command Remote Buffer Overflow
Compaq WBEM Buffer Overflow Vulnerability
remwatch
lpd, dvips and remote command execution
GlobalSCAPE Secure FTP Server User Input Overflow
PPTP overflow
SimpleServer remote execution
eIQnetworks Enterprise Security Analyzer License Manager < 2.5.9 Multiple Remote Overflows
HP OpenView NNM multiple services Heap Overflow
OpenSSH AFS/Kerberos ticket/token passing
BrightStor ARCserve Backup for Windows Multiple Remote Buffer Overflow Vulnerabilities
OpenSSH UseLogin Environment Variables
thttpd 2.04 buffer overflow
Generic format string
SmartServer pop3 overflow
mibiisa overflow
ICEcap default password
HTTP version number overflow
activePDF Server < 3.8.6 Packet Handling Remote Overflow
WinGate POST Request Buffer Overflow Vulnerability
Novell eDirectory < 8.8.2 FTF2 / 8.7.3 SP10b Overflow Vulnerabilities
MailEnable IMAP Service Multiple Buffer Overflow Vulnerabilities (ME-10025)
Portable SSH OpenSSH < 3.7.1p2
EMC AlphaStor Device Manager Remote Code Execution Vulnerability
Buffer overflow in Microsoft Telnet
CA BrightStor ARCserve Backup Agent for Windows Long String Overflow
Darwin Streaming Server < 5.5.5 Multiple Remote Overflow Vulnerabilities
SSH1 CRC-32 compensation attack
Trend Micro ServerProtect AgRpcCln.dll Buffer Overflow Vulnerability
Avirt gateway insecure telnet proxy
Webmin miniserv.pl username Parameter Format String Vulnerability
Sun Java ASP Server Default Admin Password
BrowseGate HTTP headers overflows
Xtramail pop3 overflow
XM Easy FTP Server USER Command Buffer Overflow Vulnerability
MailEnable IMAP Server Buffer Overflow and Directory Traversal Vulnerabilities
Delegate overflow
Buffer overflow in FreeBSD 2.x lpd
SysV /bin/login buffer overflow (rlogin)
Novell ZENworks Multiple Remote Pre-Authentication Buffer Overflow Vulnerabilities
Symantec Storage Foundation VxSchedService.EXE Scheduler Service Authentication Bypass Vulnerability
IIS buffer overflow
BlackBerry Enterprise Server PNG Attachment Buffer Overflow Vulnerability
Format string on HTTP header name
4D WebStar Information Disclosure
Buffer overflow in Solaris in.lpd
apcupsd overflows
BakBone NetVault Remote Heap Overflow Vulnerabilities
Retrospect Client Buffer Overflow Vulnerability
klogind overflow
Samba TNG multiple flaws
dtspcd overflow
Flash Media Server < 2.0.5 Multiple Remote Vulnerabilities
Buffer overflow in AIX lpd
MailEnable IMAP STATUS Command Buffer Overflow
MDBMS overflow
HP Linux Imaging and Printing System hpssd Daemon Arbitrary Command Execution Vulnerability
HP OpenView Storage Data Protector Backup Agent Remote Arbitrary Command Execution Vulnerability
SWAT overflow
snmpXdmid overflow
MailEnable SMTP Server NTLM Authentication Vulnerabilities
imap authenticate buffer overflow
xfstt possible code execution
IRCd OperServ Raw Join DoS
ePolicy Orchestrator Multiple Remote Vulnerabilities (OF, FS)
Trend Micro ServerProtect EarthAgent Buffer Overflow Vulnerability
IBM Lotus Domino IMAP Server (nimap.exe) CRAM-MD5 Authentication Remote Overflow
SAP DB / MaxDB Cons Program Command Execution Vulnerability
Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow
Dropbear remote DSS SSH vuln
FTGate4 IMAP EXAMINE Command Remote Overflow
HTTP header overflow
BusinessMail Remote Buffer Overflow Vulnerabilities
BrightStor ARCserve Backup DBASVR for Windows Multiple Remote Buffer Overflow Vulnerabilities
iPlanet chunked encoding
sadmind command execution
DeleGate Multiple Overflows
vpopmail input validation bug
SAP MaxDB Multiple Vulnerabilities
SCO i2odialogd buffer overrun
RealServer G2 buffer overrun
IBM Lotus Domino IMAP Service Mailbox Name Overflow
CA License Service Multiple Vulnerabilities
IBM Tivoli Storage Manager Client Vulnerabilities (swg21268775)
Multiple OpenVMS WASD HTTP Server Vulnerabilities
Too long URL
IBM Tivoli Provisioning Manager OS Deployment Multiple Stack Overflow Vulnerabilities
INN version check
IBM Tivoli Storage Manager Express Heap Overflow Vulnerability
OpenVMPS Logging Format String Vulnerability
BrightStor ARCserve Backup Multiple Vulnerabilities (QO92996)
IIS ASP ISAPI filter Overflow
IIS FrontPage DoS II
Golden FTP Server Pro Multiple Command Remote Overflow DoS
RealNetworks Helix DNA Server RTSP Service Crafted Require Header Remote Overflow
X Font Service Buffer Overflow
freeSSHd Key Exchange Buffer Overflow
Format string on HTTP header value
SIDVault < 2.0f Buffer Overflow Vulnerability
Too long authorization
Novell NetMail IMAP Agent Long Verb Arguments Buffer Overflow Vulnerability
BIND iquery overflow
l2tpd < 0.68 overflow
Symantec Veritas Backup Exec for Windows Server RPC Heap Buffer Overflow Vulnerability
Imap buffer overflow
Various pop3 overflows
AXIGEN Mail Server < 2.0.0 Multiple Remote Vulnerabilities (DoS, Overflow)
Samba Buffer Overflow
Eudora WorldMail Mail Management Server Heap Overflow Vulnerability
BIND vulnerable to overflows
poppassd USER overflow
INN version check (2)
GO-Global for Windows _USERSA_ Remote Overflow
ntpd overflow
Samba Directory ACL Integer Overflow
Sun Java System ASP Server Command Injection Vulnerability
Solaris 10 Telnet Authentication Bypass
Webalizer Cross Site Scripting Vulnerability
ePolicy orchestrator format string
MERCUR Messaging Control Server Multiple Buffer overflow Vulnerabilities
Format string on HTTP method name
l2tpd < 0.69 overflow
mountd overflow
HTTP negative Content-Length buffer overflow
rlogin -froot
Ipswitch IMail Server < 2006.21 Multiple Vulnerabilities
KpyM Windows Telnet Server Overflow
VERITAS Backup Exec Agent Registry Access Vulnerability
AT-TFTP Server Filename Handling Remote Overflow
LCDproc buffer overflow
Mercur Mailserver/Messaging version <= 5.0 IMAP Overflow Vulnerability
Xitami Web Server buffer overflow
ngIRCd Format String Vulnerability
OpenSSH Channel Code Off by 1
BIND 4.x resolver overflow
Digital Mappings Systems POP3 Server overflow
yppasswdd overflow
Lotus Domino < 7.0.2 FP2 Multiple Vulnerabilities
ICECast Format String
RealNetworks Helix Servers DESCRIBE Request LoadTestPassword Field Remote Overflow
Lotus Domino < 8.0.1 / 7.0.3 FP1 Multiple Vulnerabilities
qpopper buffer overflow
BIND vulnerable
HTTP User-Agent overflow
OpenLink web config buffer overflow
Novell GroupWise Messenger Accept Language Remote Buffer Overflow Vulnerability
SuSE Open Enterprise Server Novell Remote Manager HTTP Request Header Heap Overflow Vulnerability
CA BrightStor ARCserve Backup Tape Engine Multiple Remote Overflows
GoodTech SMTP Server < 5.17 Multiple Buffer Overflow Vulnerabilities
MailEnable POP3 Server Authentication Vulnerabilities
SSH setsid() Vulnerability
lsh overflow
Mercury LoadRunner Agent server_ip_name Buffer Overflow Vulnerability
IBM Tivoli Storage Manager Multiple Buffer Overflow Vulnerabilities
cfengine format string vulnerability
3CTftpSvc Long Transport Mode Remote Overflow
rpc.walld format string
MailEnable IMAP Logging Buffer Overflow Vulnerability
Linux nfs-utils xlog() off-by-one overflow
ClamAV clamav-milter black-hole-mode Sendmail Recipient Field Arbitrary Command Execution
Crob FTP Server Buffer Overflow Vulnerabilities
Lotus Domino < 6.5.6 FP2 Multiple Vulnerabilities
Hummingbird ftpd Buffer Overflow Vulnerability
Knox Arkeia buffer overflow
Header overflow against HTTP proxy
Easy File Sharing Web Server Multiple Remote Vulnerabilities (FS, XSS, Upload)
IA eMailServer IMAP Server Search Command Buffer Overflow Vulnerability
Novell eDirectory Server iMonitor Buffer Overflow Vulnerability
BIND Buffer overflows in the DNS stub resolver library
TESO in.telnetd buffer overflow
CA BrightStor ARCserve Backup Discovery Service Overflow
CA BrightStor ARCserve Backup Universal Agent Remote Overflow
OpenSSL overflow (generic test)
MERCUR Messaging IMAP Server NTLM Authentication Buffer Overflow Vulnerability
SSH Multiple Vulns
Unreal Engine flaws
Multiple IRC daemons format string attack
Trend Micro ServerProtect Multiple Stack Buffer Overflow Vulnerabilities
SOCKS4A hostname overflow
Firebird DataBase Server Buffer Overflow
MDaemon < 9.0.6 POP3 Server Buffer Overflow Vulnerabilities
MailEnable IMAP Service Multiple Buffer Overflow Vulnerabilities (ME-10021)
Trend Micro ServerProtect Multiple Buffer Overflow Vulnerabilities
Qualcomm WorldMail IMAPD Buffer Overflow Vulnerability
XMail APOP and USER Overflows
SecurityGateway < 1.0.2 Buffer Overflow Vulnerability
BrightStor ARCserve Backup for Laptops & Desktops Server Multiple Vulnerabilities
PXE server overflow
Abyss httpd overflow
VERITAS Backup Exec Agent Multiple Remote Vulnerabilities
DameWare Mini Remote Control Pre-Authentication Username Buffer Overflow Vulnerability
IIS ISAPI Overflow
Linksys multiple remote vulnerabilities
EFTP buffer overflow
BrightStor Hierarchical Storage Manager < r11.6 Multiple Remote Vulnerabilities (OF, SQLi)
BIND 9 overflow
IBM Tivoli Provisioning Manager OS Deployment Multiple Unspecified Input Validation Vulnerabilities
BIND vulnerable to cached RR overflow
Jordan Windows Telnet Server Overflow
cachefsd overflow
Helix RealServer Buffer Overrun
Kerberos Telnet Authentication Bypass
Samba Unicode Buffer Overflow
NSM format strings vulnerability
OpenSSH <= 3.3
MiniShare webserver buffer overflow
GO-Global for Windows _USERSA_ Remote Overflow (registry check)
Knox Arkeia Type 77 Request Remote Buffer Overrun
Communigate Pro overflow
eIQnetworks Enterprise Security Analyzer EnterpriseSecurityAnalyzer.exe LICMGR_ADDLICENSE Command Remote Overflow
BrightStor ARCserve Backup Multiple Vulnerabilities (QO87569)
rpc.nisd overflow
Novell Groupwise WebAccess GWINTER.EXE Remote Buffer Overflow Vulnerability
Sun Java Web Console LibWebconsole_Services.SO Format String Vulnerability
Visnetic AntiVirus Plug-in for MailServer Local Privilege Escalation Vulnerability
BrightStor ARCserve Backup Multiple Remote Vulnerabilities (QO91094)
irix rpc.passwd overflow
HTTP Cookie overflow
Gene6 FTP Server Buffer Overflow Vulnerabilities
APSIS Pound Load Balancer Format String Overflow
Ipswitch IMAP FETCH Command Buffer Overflow Vulnerability
CCProxy < 6.62 HTTP Proxy CONNECT Request Handling Remote Overflow
iTechnology iGateway Content-Length Buffer Overflow Vulnerability
Samba Mangling Overflow
Hexamail POP3 Buffer Overflow Vulnerability
Medal of Honor remote buffer overflow
Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability
Mercur SMTP server AUTH overflow
Ipswitch Collaboration Suite / IMail SMTPD Format String Vulnerability
Samba Remote Arbitrary File Creation
IBM Tivoli Provisioning Manager for OS Deployment < 5.1.0.3 Interim Fix 3 Denial of Service Vulnerability
Computer Associates Multiple Products Message Queuing Remote Stack Buffer Overflow Vulnerability
DameWare Mini Remote Control Pre-Authentication Buffer Overflow Vulnerability