ZyXEL Gateways Vulnerability Research: http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf

This paper is the result of various security assessments performed on several ZyXEL Prestige devices in both, a controlled environment computer lab and production environments during several penetration tests. There are two types of attacks featured in this paper which we believe might be...

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description An integer overflow has been reported in the "cliscanpe" function in file libclamav/pe.c CVE-2008-0318. Another unspecified vulnerability has been reported in fil...

Code injection

Unspecified vulnerability in the subscriptions manager in Invision Power Board IPB or IP.Board 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to 1 classgw2checkout.php, 2...

CVE-2007-4914

Unspecified vulnerability in the subscriptions manager in Invision Power Board IPB or IP.Board 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to 1 classgw2checkout.php, 2...

Apple Mac OS X iChat UPnP buffer overflow

Overview A vulnerabilty in the way Apple Mac OS X iChat handles specially crafted UPnP packets may allow execution of arbitrary code or denial of service. Description Apple iChat contains a vulnerability that could be exploited by an attacker on the local network when it attempts to handle...

Through the different structure of the firewall to the back door of the place-vulnerability warning-the black bar safety net

This article describes the different configuration of the firewall is placed back door. Anyway, this article can tell you in other environments, the hackers is how to hide them into a system. Hackers always want to retain into their already compromised capacity of the system, even if the target...

CVE-2006-6409

F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service possibly fatal scan error, and possibly bypass virus detection, by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...

CVE-2006-6409

CVE-2006-6409 affects F-Secure Anti-Virus for Linux Gateways 4.65. The vulnerability allows remote attackers to cause a denial of service (potentially fatal scan error) and possibly bypass virus detection by inserting invalid characters into base64-encoded content within a multipart/mixed MIME fi...

CVE-2006-6409

F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service possibly fatal scan error, and possibly bypass virus detection, by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...

CVE-2006-6409: Undefined Security Weakness

F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service possibly fatal scan error, and possibly bypass virus detection, by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...

CVE-2006-6263

Summary: CVE-2006-6263 involves Teredo clients when source routing is enabled. The issue arises when an encapsulated IPv6 packet contains a Routing header; the client may forward the packet to the next hop, potentially allowing remote actors to bypass policies on gateways that drop all source-rou...

SmartDefense Profiles Available for Users of VPN-1 NGX R62: Assigning a Profile per Gateway

The most significant enhancement in the NGX R62 release is the enablement of SmartDefense Profiles. SmartDefense Profiles expand the flexibility and granularity of security defenses, while allowing central control and management of the security infrastructure. By defining multiple SmartDefense...

DOCSIS Read-Write Community String Enabled in Non-DOCSIS Platforms

A vulnerability exists in certain Cisco IOS ® software release trains running on the Cisco IAD2400 series, 1900 Series Mobile Wireless Edge Routers and Cisco VG224 Analog Phone Gateways. Vulnerable versions may contain a default hard-coded Simple Network Management Protocol SNMP community string...

Cisco Security Advisory: DOCSIS Read-Write Community String Enabled in Non-DOCSIS Platforms

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: DOCSIS Read-Write Community String Enabled in Non-DOCSIS Platforms Document ID: 71255 Advisory ID: cisco-sa-20060920-docsis http://www.cisco.com/warp/public/707/cisco-sa-20060920-docsis.shtml Revision 1.0 For Public Release 20...

2wire gateways DoS

Incomplete HTTP request for Web-interface causes device to crash...

Microsoft DNS Client buffer overflow

Overview The Microsoft DNS Client service contains a remote code execution vulnerability that could allow a remote attacker to take complete control of the affected system. Description From Microsoft TechNet: The Domain Name System DNS client service resolves and caches DNS names. The DNS client...

Security Best Practice: MGCP Protocol Enforcement

MGCP is an implementation of the Media Gateway Control Protocol architecture1 for controlling Media Gateways on Internet Protocol IP networks and the public switched telephone network PSTN.MGCP is a signaling and call control protocol used within Voice over IP VoIP systems that typically...

Invision Vulnerabilities, including remote code execution

Several Invision Flaws 2.1.5 and possibly earlier --------------------------------------------------- IceShaman & Wells HackThisSite.org 1 Code execution sources/actionpublic/search.php line 1261 $this-output = pregreplace "value="'$this-ipsclass-input'lastdate'"'i", "1 selected='selected'",...

Symantec Dynamic VPN Services: ISAKMP Denial of Service

SUMMARY The NISCC National Infrastructure Security Co-ordination Centre a UK-sponsored inter-departmental agency has identified nearly five-thousand potential ISAKMP vulnerabilities. Test for these vulnerabilities were created by the NISCC and distributed to an unspecified number of vendors...

CVE-2004-2442: Undefined Security Weakness

Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antiviru...