CVE-2009-1135

Microsoft Internet Security and Acceleration ISA Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to...

Microsoft ISA Server Privilege Escalation Vulnerability (970953)

This host is missing a critical security update according to Microsoft Bulletin MS09-031. OpenVAS Vulnerability Test $Id: secpodms09-031.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft ISA Server Privilege Escalation Vulnerability 970953 Authors: Nikita MR Copyright Copyright c 2009 SecPod,...

ISC DHCP dhclient stack buffer overflow

Overview The ISC DHCP dhclient application contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code with root privileges. Description As described in RFC 2131, "The Dynamic Host Configuration Protocol DHCP provides a framework for passing...

Microsoft Office Web Components ActiveX Control 'msDataSourceObject()' Code Execution Vulnerability

Description Microsoft Office Web Components is prone to a remote code-execution vulnerability that affects the OWC10.Spreadsheet ActiveX control. The control is identified by the following CLSIDs: 0002E541-0000-0000-C000-000000000046 0002E559-0000-0000-C000-000000000046 An attacker could exploit...

[ISecAuditors Security Advisories] Joomla! < 1.5.12 Multiple XSS vulnerabilities in HTTP Headers

============================================= INTERNET SECURITY AUDITORS ALERT 2009-007 - Original release date: June 30th, 2009 - Last revised: July 2nd, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS Base Score ============================================= I. VULNERABILITY...

Joomla Multiple Cross Site Scripting Issues

============================================= INTERNET SECURITY AUDITORS ALERT 2009-007 - Original release date: June 30th, 2009 - Last revised: July 2nd, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS Base Score ============================================= I. VULNERABILITY...

Kaspersky Internet Security 2 0 0 9 SCIEPlgn.dll Remote Code Execution-vulnerability warning-the black bar safety net

Author: JINN0xjinnatgmail.com www.cisrg.org SCIEPlgn.dll is a script monitor, it's also a Internet Explore plugin. So, we can load and startup it from object tag, when it's loading, a memory corruption vulnerability is occurred, the EIP is rewriting, so, this is a remote code execution...

多个Symantec产品RAR/TAR/ZIP文件扫描绕过漏洞

Bugraq ID: 35354 多个Symantec产品对畸形或特殊格式的压缩档文件如tar/zip/rar/缺少真确处理，可导致绕过扫描产品的检测。 攻击者构建恶意的文件，发送给目标用户，可绕过检测使应用程序展开并执行。 目前没有详细漏洞细节提供。 Symantec Symantec AntiVirus Scan Engine for Microsoft ISA 4.3.12 Symantec Symantec AntiVirus Corporate Edition 10.2 MR2 Symantec Scan Engine 5.1.6.31 Symantec Scan Engine...

F-Secure Products Malware Detection Bypass Vulnerability (Windows)

This host is installed with F-Secure Product and is prone to Malware Detection Bypass Vulnerability. OpenVAS Vulnerability Test $Id: secpodfsecureprdtssecbypassvulnwin.nasl 5369 2017-02-20 14:48:07Z cfi $ F-Secure Products Malware Detection Bypass Vulnerability Windows Authors: Sharath S Copyrigh...

[ISecAuditors Security Advisories] Joomla! 1.5.10 JA_Purity Multiple Persistent XSS

============================================= INTERNET SECURITY AUDITORS ALERT 2009-006 - Original release date: April 5th, 2009 - Last revised: June 5th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.4/10 CVSS Base Score ============================================= I. VULNERABILITY...

ArcaVir AntiVirus Products Privilege Escalation Vulnerability

This host is running ArcaVir AntiVirus Products and is prone to Privilege Escalation Vulnerability. OpenVAS Vulnerability Test $Id: gbarcaviravprdtsprivescvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ ArcaVir AntiVirus Products Privilege Escalation Vulnerability Authors: Sujit Ghosal Copyright:...

Apple iPhone security standards released

From Information Week George Hulme Today the Center for Internet Security released a set of benchmarks designed to help consumers and businesses alike communicate using their favorite toy. Whoops, I meant smartphone. The guidance is worth a look. My biggest personal iPhone security related gaffe:...

ArcaVir 2009 < 9.4.320X.9 - 'ps_drv.sys' Local Privilege Escalation

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ArcaBit Sp. z o.o. - http://www.arcabit.com/ | // // | | // // | Affected Software: | // // | ArcaVir 2009...

McAfee Products Security Bypass Vulnerability (Windows)

This host is installed with McAfee products and are prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodmcafeeprdtssecbypassvulnwin.nasl 5369 2017-02-20 14:48:07Z cfi $ McAfee Products Security Bypass Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2009...

Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting / Remote Command Execution

source: https://www.securityfocus.com/bid/35038/info The Webshield feature of Kingsoft Internet Security 9 is prone to a remote cross-site scripting and command-execution vulnerability. Remote attackers may exploit this vulnerability to compromise an affected computer. This issue affects WebShiel...

Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting Remote Command Execution

Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting Remote Command Execution source: https://www.securityfocus.com/bid/35038/info The Webshield feature of Kingsoft Internet Security 9 is prone to a remote cross-site scripting and command-execution vulnerability. Remote attackers may exploit this...

Security breach affects 15,487 Honolulu students

More than 15,000 students at Kapiolani Community College in Honolulu face an identity theft risk because of an Internet security breach, school officials said. School officials found a computer on April 15 with the personal information of 15, 487 students who applied for financial aid between...

CVE-2009-1348

The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via 1 an invali...

CVE-2009-1348

CVE-2009-1348 affects McAfee antivirus products (VirusScan, Total Protection, Internet Security, SecurityShield for ISA Server/SharePoint, Security for Email Servers/Email Gateway, Active Virus Defense, etc.). The issue is a virus-detection bypass caused by malformed archive metadata in ZIP/RAR f...

CVE-2009-1428

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...