125 matches found
Outpost Firewall PRO本地特权提升漏洞
Outpost Firewall PRO是一款防火墙应用程序。 Outpost Firewall PRO执行SSDT HOOKING操作存在问题,本地攻击者可以利用漏洞提升特权。 Outpost Firewall PRO保护自身文件并禁止其他应用程序操作。在安装目录中的文件和目录通过各种SSDT HOOK来保护,但是这种保护实现没有防止恶意程序调用API ZwSetInformationFile class...
Securekit Steganography / Camouflage protection bypass
File with hidden information has strong signature, password protection is implemented in interface only...
PC Tools AntiVirus本地权限提升漏洞
PC Tools AntiVirus是一款功能强大的个人电脑杀毒软件。 PC Tools AntiVirus对自身文件的保护上存漏洞,本地攻击者可能利用此漏洞提升自己的权限。 PC Tools AntiVirus目录及其所有子对象没有设置安全的默认权限,给予了Everyone组Full Control权限,因此本地攻击者可能获得权限提升,以系统权限执行任意代码。 PC Tools AntiVirus 2.1.0.51 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://www.pctools.com/anti-virus/...
Simple manual to create the ultimate Trojan horse—talk for some back door of the simple modifications-vulnerability warning-the black bar safety net
First talk about the Radmin That Radmin was a good thing, I also recently discovered this stuff benefits, such as not to be killed, management is very convenient, speed is also very fast, simple configuration...... Anyway, I see a lot of the Administrator's selection of this. Although is a good...
CVE-2002-2132
CVE-2002-2132 concerns Windows File Protection (WFP) in Windows 2000 and XP. The vulnerability arises because WFP does not remove old security catalog (.CAT) files, enabling local attackers to replace legitimate, updated files with older, vulnerable versions that still have valid hash codes. The ...
CVE-2002-2132
Windows File Protection WFP in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes...
CVE-2002-2132: Undefined Security Weakness
Windows File Protection WFP in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes...
CVE-2005-2144
Prevx Pro 2005 1.0 is affected by CVE-2005-2144, which enables local users to bypass file protections and modify files by using MapViewOfFile to memory-map the target file. The description from CVE records states the issue is a local elevation/ tampering risk within Prevx Pro 2005. There is no pu...
CVE-2005-2144
Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file...
CVE-2005-2144
Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file...
CVE-2005-2144: Undefined Security Weakness
Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file...
[Full-disclosure] Prevx Pro 2005 - Multiple Vulnerabilities
Prevx Pro 2005 - Multiple Vulnerabilities ================================================= PROGRAM: PrevX Pro 2005 OMEPAGE: http://www.prevx.com DESCRIPTION ================================================= " Prevx Pro 2005 is the new ‘must have' security solution. Prevx Pro utilises the latest...
CVE-2002-1394
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148...
CVE-2003-0937
SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID PID by obtaining a procfs file descriptor for the file and calling execve on a setuid or setgid program, which leaves the descriptor open to the user...
[UNIX] Intersystems Cache' Database Two Local Root Vulnerabilities
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
ZH2003-12SA.txt
ZH2003-12SA security advisory: PHP-Gästebuch Ver. 1.60 Beta Published: 23/07/2003 Released: 23/07/2003 Name: PHP-Gästebuch http://www.php-gaestebuch.de Affected Systems: All versions ? Severity: Medium/High Platforms: Windows and Unix Original Advisory:...
CVE-2002-2132
Windows File Protection WFP in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes...
Full Disclosure: Windows File Protection Old Security Catalog Vulnerability
============================================================================ == SECURITY ALERT Windows File Protection Old Security Catalog Vulnerability December 26, 2002 Full Disclosure, [email protected] and others August 26, 2002 Private Disclosure, Microsoft Press and others Jason Coombs...