PHPNuke-7.9.txt

------=Part21582213092688.1161562994664 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline / -------------------------------------------------------- Neo Security Team NST - Advisory 27 - 2006-10-22...

CVE-2006-3787

kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service crash and bypass protection mechanisms by calling CreateRemoteThread...

CVE-2006-0479

pmwiki.php in PmWiki 2.1 beta 20, with registerglobals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS variable with the same name, which causes PmWiki to unset the GLOBALS variable but not the GPC...

CVE-2005-2261

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection...

CVE-2005-2145

The kernel driver in Prevx Pro 2005 1.0 does not verify the source of certain messages, which allows local users to bypass protection by sending certain messages to the driver, as demonstrated by sending an "allow" message to bypass a warning message...

CVE-2005-2145

CVE-2005-2145 affects Prevx Pro 2005 (kernel driver, v1.0). The driver does not verify the source of certain messages, enabling a local attacker to bypass protection by sending an "allow" message to bypass a warning. Public details in the connected Red Hat/NVD entries confirm the local-access imp...

CVE-2005-1125

Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the libsafedie function call is completed...

CVE-2004-0935

Eset Anti-Virus before 1.020 16th September 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system...

CVE-2004-0933

Computer Associates CA InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection v...

PrevX protection bypass

Protection can be bypassed by direct physical memory access...

DansGuardian protection bypass

URL escaping allows to bypass URL filtering...

Multiple personal firewall protection bypass

By using scripting and crossite scripting malware script can bypass protection against access to external sites and bypass sites restriction...

Cisco personal assistant protection bypass

It's possible to bypass password protection...

Watchguard ServerLock protection bypass

With DLL injection technique and symlinks to /DEVICE it's possible to bypass kernel drive loading protection...

CVE-1999-1443

CVE-1999-1443 relates to Micah Software Full Armor Network Configurator and Zero Administration. Local attackers with physical access can bypass desktop protection via (1) initiating CTRL+ALT+DEL and terminating the process with Task Manager, (2) booting from an alternate disk, or (3) interruptin...