CVE-2008-4816

Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors...

Crashing ZoneAlarm 8.0.020.000 by Checkpoint (Component : TrueVector)

Crashing ZoneAlarm 8.0.020.000 by Checkpoint Component : TrueVector ========================================== - Keep ZoneALarm 8 running with vsmon.exe running which runs by default - On System A : Run the rogue proxy attached zacrasherproxy.exe and set a port number eg: zacrasherproxy.exe 5938 ...

ZoneAlarm 8.0.20 - HTTP Proxy Remote Denial of Service

source: https://www.securityfocus.com/bid/31431/info ZoneAlarm Internet Security Suite is prone to a remote denial-of-service vulnerability that occurs in the TrueVector component when connecting to a malicious HTTP proxy. ZoneAlarm Internet Security Suite 8.0.020 is vulnerable; other versions ma...

ZoneAlarm 8.0.20 - HTTP Proxy Remote Denial of Service

ZoneAlarm 8.0.20 - HTTP Proxy Remote Denial of Service source: https://www.securityfocus.com/bid/31431/info ZoneAlarm Internet Security Suite is prone to a remote denial-of-service vulnerability that occurs in the TrueVector component when connecting to a malicious HTTP proxy. ZoneAlarm Internet...

CA kmxfw.sys Code Execution and DoS Vulnerabilities

This host is running CA Products, which is prone to Local Code Execution and Denial of Service Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcaprdtsmultvuln900202.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: CA kmxfw.sys Code Execution and DoS Vulnerabilities. Authors: Veerendra GG...

Design/Logic Flaw

Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System HIPS r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to "insufficient validation."...

[ISecAuditors Security Advisories] SmbClientParser Perl module allows remote command execution

============================================= INTERNET SECURITY AUDITORS ALERT 2006-006 - Original release date: February 28, 2006 - Last revised: July 18th, 2008 - Discovered by: Jesus Olmos Gonzalez - Severity: 5/5 ============================================= I. VULNERABILITY...

smbclientparser-exec.txt

============================================= INTERNET SECURITY AUDITORS ALERT 2006-006 - Original release date: February 28, 2006 - Last revised: July 18th, 2008 - Discovered by: Jesus Olmos Gonzalez - Severity: 5/5 ============================================= I. VULNERABILITY...

Kaspersky kl1.sys驱动本地栈溢出漏洞

CVECAN ID: CVE-2008-1518 Kaspersky Internet Security套件是一套完整的解决方案，用于保护计算机抵御几乎所有来自互联网的主要的威胁。 Internet Security及其他Kaspersky产品中所发布的kl1.sys内核驱动在处理IOCTL 0x800520e8时没有对向swprintf函数所传送的数据执行边界检查，在这种情况下目标缓冲区为2,000单元宽字符数据，因此如果源缓冲区超过了2000字符的话，就可以触发栈溢出，导致执行任意内核态指令。 Kaspersky Labs Kaspersky Antivirus 7.0...

MS Windows IIS 5.0 SSL Remote buffer overflow Exploit (MS04-011)

No description provided by source. // / THCIISSLame 0.3 - IIS 5 SSL remote root exploit / / Exploit by: Johnny Cyberpunk [email protected] / / THC PUBLIC SOURCE MATERIALS / / / / Bug was found by Intern...

CVE-2008-2511

Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 aka UmxEventCliLib ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create and overwrite arbitrary files via a .. dot dot in the argument to the SaveToFile method. NOTE: this...

Directory traversal

Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 aka UmxEventCliLib ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create and overwrite arbitrary files via a .. dot dot in the argument to the SaveToFile method. NOTE: this...

CVE-2008-2511

Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 aka UmxEventCliLib ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create and overwrite arbitrary files via a .. dot dot in the argument to the SaveToFile method. NOTE: this...

CVE-2008-2511

CVE-2008-2511 describes a directory traversal vulnerability in the CA Internet Security Suite 2008’s UmxEventCli.dll (UmxEventCli.CachedAuditDataList/UmxEventCliLib) ActiveX control. The flaw lets remote attackers supply a ... path to the SaveToFile method, enabling creation or overwriting of arb...

CA Internet Security Suite UmxEventCli.dll控件不安全函数调用漏洞

CA Internet Security Suite是为家庭用户提供的综合网络安全解决方案。 Internet Security Suite所提供的UmxEventCli.CachedAuditDataList.1 ActiveX控件（UmxEventCli.dll）没有安全地调用SaveToFile函数，如果用户受骗访问了恶意网页的话，就可能以当前登录用户的权限覆盖并破坏系统上的任意文件。 Computer Associates Internet Security Suite 2008 Computer Associates -------------------...

CA Internet Security Suite ActiveX unauthorized files access

SaveToFile method allows system files corruption...

[NSG_28-5-08] CA Internet Security Suite 2008 (UmxEventCli.dll/SaveToFile()) remote file corruption poc

!-- CA Internet Security Suite 2008 UmxEventCli.dll/SaveToFile remote file corruption poc by Nine:Situations:Group::surfista this control is safe for scripting and safe for initialize original one: http://retrogod.altervista.org/9sgCApoc.html -- htmlobject...

CA Internet Security Suite - UmxEventCli.dll ActiveX Control Arbitrary File Overwrite

CA Internet Security Suite - UmxEventCli.dll ActiveX Control Arbitrary File Overwrite source: https://www.securityfocus.com/bid/29406/info A Computer Associates Internet Security Suite ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary,...

CA Internet Security Suite 2008 SaveToFile() File Corruption PoC

Exploit for unknown platform in category dos / poc ================================================================ CA Internet Security Suite 2008 SaveToFile File Corruption PoC ================================================================ filePath="..............\boot.ini"...

CA Internet Security Suite - 'UmxEventCli.dll' ActiveX Control Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/29406/info A Computer Associates Internet Security Suite ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails to sanitize user-supplied inpu...