Internet Security Systems 3.6 - ZWDeleteFile() Arbitrary File Deletion

Internet Security Systems 3.6 - ZWDeleteFile Arbitrary File Deletion source: https://www.securityfocus.com/bid/20546/info Internet Security Systems ISS BlackICE PC Protection is prone to a file-deletion vulnerability. An attacker can exploit this issue to delete arbitrary files within the context...

Internet Security Systems 3.6 - 'ZWDeleteFile()' Arbitrary File Deletion

source: https://www.securityfocus.com/bid/20546/info Internet Security Systems ISS BlackICE PC Protection is prone to a file-deletion vulnerability. An attacker can exploit this issue to delete arbitrary files within the context of the affected application. This could lead to other attacks...

CVE-2006-4855

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1,...

Re: SECURITY.NNOV: Panda Platinum Internet Security privilege escalation / bayesian filter control security vulnerabilities

Panda is realy great and realy fast. The Bug was also reported at 16.07.06 to the beta team. -------------------- 16.07.06 -------------------- Hi there, i think there are some badly set filesystem permissions in your software. FileSecure 7.01.10 C:ProgrammePanda SoftwareAVNT everybody full acces...

security flaw

Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark formerly Ethereal 0.99.2 allow remote attackers to cause a denial of service crash via unspecified vectors...

CVE-2006-4658

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns...

CVE-2006-4659

The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable URLs. NOTE: this...

CVE-2006-4659

The CVE-2006-4659 entry concerns Panda Platinum Internet Security 2006 (10.02.01) and 2007 (11.00.00), where predictable URLs used for per-message spam classification can be triggered by a malicious web page containing IMG tags to have Panda classify arbitrary messages as spam. This is a potentia...

CVE-2006-4658

The CVE-2006-4658 issue affects Panda Platinum Internet Security 2006 (10.02.01) and 2007 (11.00.00). The root cause is the use of sequential message numbers in generated URLs that are not filtered when a user replies to a message, which could allow remote attackers to infer mail usage patterns. ...

CVE-2006-4657

CVE-2006-4657 affects Panda Platinum Internet Security 2006/2007 builds; it stores service executables under the product installation directory with weak permissions. This allows a local attacker to escalate to LocalSystem by modifying (1) WebProxy.exe or (2) PAVSRV51.EXE, enabling privilege esca...

CVE-2006-4658

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns...

SECURITY.NNOV: Panda Platinum Internet Security privilege escalation / bayesian filter control security vulnerabilities

Noise: We have more and more application to secure our networks. Does it means network becomes more and more secure? No, there is a limit. Because any application has vulnerabilities. For in much security is much grief: and he that increaseth code increaseth bugs 1. Title: Panda Platinum Internet...

Internet Security Systems 3.6 BlackICE - Local Denial of Service

source: https://www.securityfocus.com/bid/19800/info Internet Security Systems ISS BlackICE PC Protection is prone to a local denial-of-service vulnerability because the application fails to properly sanitize user-supplied input. This vulnerability allows local attackers to crash affected systems...

CivicSpace Version 0.8.5 HTML injection

HeLiOsZ - Dark End Team - Internet Security Team CivicSpace Version 0.8.5 HTML injection IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: www.civicspacelabs.org Exploit: - To exploit this issue you must only put your...

Archangel Weblog 0.90.02 and prior Multiple HTML injections

HeLiOsZ - Dark End Team - Internet Security Team Archangel Weblog 0.90.02 and prior Multiple HTML injections IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.archangelmgt.com/ Exploit: - To exploit this issue yo...

blur6ex 0.3 Comment title HTML inyection vuln.

HeLiOsZ - Dark End Team - Internet Security Team blur6ex 0.3 Comment title HTML inyection vuln. IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.blursoft.com Exploit: - To exploit this vuln you simply need an...

CVE-2006-3540

Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not properly validate RegSaveKey, RegRestoreKey, and RegDeleteKey function calls, which allows local users to cause a denial of service system crash via a certain combination of these...

CVE-2006-3540

Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not properly validate RegSaveKey, RegRestoreKey, and RegDeleteKey function calls, which allows local users to cause a denial of service system crash via a certain combination of these...

CVE-2006-3540

CVE-2006-3540 affects Check Point Zone Labs ZoneAlarm Internet Security Suite (examples: 6.5.722.000, 6.1.737.000). The issue arises from improper validation of RegSaveKey, RegRestoreKey, and RegDeleteKey calls when targeting the registry path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\...

CVE-2006-3489

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier allows remote attackers to bypass anti-virus scanning via a crafted filename...