Nortel Contivity VPN Client privilege escalation updated since 11.08.2005
Published:		12.08.2005
Source:		BUGTRAQ
SecurityVulns ID:		5091
Type:		local
Level:		6/10
Description:		File open dialog exllows to execute file with LocalSystem privileges.

Affected:

NORTEL : Contivity VPN Client 5.01

Original document		Jeff Peadro, FW: Updated Version & Exploit - Privilege escalation in Nortel Contivity VPN Client V05_01.030 (12.08.2005)
		Jeff Peadro, Privilege escalation in Nortel Contivity VPN Client V05_01.030 (11.08.2005)

Discuss:

Read or add your comments to this news (0 comments)

Linux NFS Network File System buffer overflow
Published:		12.08.2005
Source:		BUGTRAQ
SecurityVulns ID:		5094
Type:		remote
Level:		6/10
Description:		Buffer overflow on parsing nfsacl protocol XDR data.

Affected:

LINUX : kernel 2.6

Original document

SECUNIA, [SA16406] Linux Kernel XDR Encode/Decode Buffer Overflow Vulnerability (12.08.2005)

Discuss:

Read or add your comments to this news (0 comments)

Wise WinTerm thin client windows terminal DoS
Published:		12.08.2005
Source:		BUGTRAQ
SecurityVulns ID:		5097
Type:		remote
Level:		5/10
Description:		Device crash on zero IP options.

Affected:

WYSE : Winterm 1125SE

Original document

Josh Zlatin-Amishav, remote DOS on Wyse thin client 1125SE (12.08.2005)

Discuss:

Read or add your comments to this news (0 comments)

Novell eDirectory iMonitor for Windows buffer overflow
Published:		12.08.2005
Source:		BUGTRAQ
SecurityVulns ID:		5095
Type:		remote
Level:		6/10
Description:		Buffer overflow in dhost.exe process.

Affected:

NOVELL : eDirectory 8.7

Original document

NGSSoftware Insight Security Research, High Risk Vulnerability in Novell eDirectory Server (12.08.2005)

Discuss:

Read or add your comments to this news (0 comments)

Network Associates ePolicy Orchestrator Agent privilege escalation
Published:		12.08.2005
Source:		BUGTRAQ
SecurityVulns ID:		5096
Type:		local
Level:		5/10
Description:		By creating junction point (NTFS hard link) it's possible to access files with privileges of local system.

Affected:

NAI : ePolicy Orchestrator Agent 3.5

Original document

Reed Arvin, Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) (12.08.2005)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Windows Plug and Play service buffer overflow updated since 09.08.2005
Published:		12.08.2005
Source:		MICROSOFT
SecurityVulns ID:		5082
Type:		remote
Level:		6/10
Description:		Stack overflow on named pipes request processig.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		X-FORCE, indows Plug and Play Remote Compromise (09.08.2005)
		MICROSOFT, Microsoft Security Bulletin MS05-039 Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege (899588) (09.08.2005)

Files:		Windows 2000 universal exploit for MS05-039
		Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode
		MS05_039 Exploitation (different languages)
		Microsoft Security Bulletin MS05-039 Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege (899588)
Discuss:		Read or add your comments to this news (0 comments)