This update adds support for FreeBSD and OpenBSD.

This module exploits a command injection vulnerability in the function AddPrinterW in Samba 3, reached through an AddPrinter remote request.

A vulnerability has been identified in HP Linux Imaging and Printing System (HPLIP), which could be exploited by local attackers to obtain elevated privileges. This issue is caused by input validation errors in the hpssd daemon that does not validate user-supplied data before being passed to a popen3() call, which could be exploited by malicious users to inject and execute arbitrary commands with root privileges.

This package include local and remote versions of the exploit.

A vulnerability has been identified in HP Linux Imaging and Printing System (HPLIP), which could be exploited by local attackers to obtain elevated privileges. This issue is caused by input validation errors in the hpssd daemon that does not validate user-supplied data before being passed to a popen3() call, which could be exploited by malicious users to inject and execute arbitrary commands with root privileges.

This package include local and remote versions of the exploit.

This module exploits a format string vulnerability in the Sun Java Web Console and installs an agent.

Added support for Windows 2003 Standard Edition SP0 and SP1.

This module exploits a vulnerability in DHCP Server in OpenBSD. The vulnerability is caused due to the improper handling of DHCP requests within dhcpd in the cons_options() function in options.c. This cause a stack-based buffer corruption by sending a specially crafted DHCP request specifying a maximum message size smaller than 278.



This module, if successfull, will leave the service (dhcpd) unavailable.

This package updates the MSRPC MSMQ Buffer Overflow exploit module.

This package updates the Novell Messenger Server exploit.

This module exploits a stack-based buffer overflow in the Surgemail Server 3.x and deploys an agent when successful. The exploit triggers a buffer-overflow vulnerability due to insufficient bounds checking of user supplied input allowing remote attackers to execute arbitrary code on the remote machine.

This package updates the Ipswitch IMail login exploit.