CVE-2003-0819

CVE-2003-0819 is a buffer-overflow vulnerability in the H.323 filter of Microsoft ISA Server 2000 that could allow remote code execution in the Microsoft Firewall Service via crafted H.323 traffic. OpenVAS entries corroborate a remote-code-execution risk; affected product is ISA Server 2000 (Gold...

Microsoft Security Bulletin MS04-001

Microsoft Security Bulletin MS04-001 Vulnerability in Microsoft Internet Security and Acceleration Server 2000 H.323 Filter Could Allow Remote Code Execution 816458 Issued: January 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Internet Security and...

Norton Internet Security crossite scripting

In URL blocking message URL is not escaped...

Norton Internet Security 2003 XSS

DigitalPranksters Security Advisory http://www.DigitalPranksters.com Norton Internet Security Blocked Sites XSS Risk: Low Product: Norton Internet Security 2003 v6.0.4.34 Maybe others we only tested this version Product URL: http://www.symantec.com/sabu/nis/nispe/index.html Found By: KrazySnake -...

CVE-2003-1149

Cross-site scripting XSS vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page...

Symantec Norton Internet Security 2003 6.0.4.34 - Error Message Cross-Site Scripting

source: https://www.securityfocus.com/bid/8904/info It has been reported that Symantec Norton Internet Security is prone to a cross-site scripting vulnerability. The issue is reported to exist when the software blocks a restricted website and an error message containing the requested URL is...

RAV ActiveX Buffer overflow in ravupdt.dll file

RAV Online Scanning ActiveX Buffer Overflow in RAVUPDT.DLL ================================================= PROGRAM: RAV ONLINE SCANNING ACTIVEX HOMEPAGE: www.ravantivirus.com VULNERABLE VERSIONS: Online Version Only DESCRIPTION ================================================= RAV Online Scanni...

WebLogic Crafted GET Request Hostname Disclosure

The remote WebLogic server discloses its NetBIOS host name when it is issued a request generating a redirection. An attacker may use this information to better prepare other attacks against this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

iDEFENSE Security Advisory 04.09.03: Denial of Service in Microsoft Proxy Server and Internet Security and Acceleration (ISA) S

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 04.09.03: http://www.idefense.com/advisory/04.09.03.txt Denial of Service in Microsoft Proxy Server 2.0 and Internet Security and Acceleration Server 2000 April 9, 2003 I. BACKGROUND Microsoft Corp.'s Internet Security and...

CVE-2002-0663

Technical details about CVE-2002-0663 are not publicly provided in the supplied documents. No affected products, root cause, or remediation specifics are available here. Monitor for updates.

Re: NIS 2003 crash

On January 11, 2003 Pavel P. reported the following regarding Norton Internet Security 2003: ---------------snip-------------------------- Subject: NIS 2003 crash NIS2003 - I have WinXP Pro with SP1 and Norton Internet Security installed on my machine. When I ping my machine with the following...

Symantec Norton Internet Security 2003 - ICMP Packet Flood Denial of Service

Symantec Norton Internet Security 2003 - ICMP Packet Flood Denial of Service source: https://www.securityfocus.com/bid/6598/info Symantec Norton Internet Security 2003 is reported to be prone to a denial of service condition. It is possible to trigger this condition by sending an excessive...

Symantec Norton Internet Security 2003 - ICMP Packet Flood Denial of Service

source: https://www.securityfocus.com/bid/6598/info Symantec Norton Internet Security 2003 is reported to be prone to a denial of service condition. It is possible to trigger this condition by sending an excessive approximately 65500 or more number of ICMP packets to a host running Norton Interne...

CVE-2002-1695

Norton Internet Security 2001 opens log files with FILESHAREREAD and FILESHAREWRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running...

Microsoft Security Bulletin MS02-068: Cumulative Patch for Internet Explorer (324929)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Cumulative Patch for Internet Explorer 324929 Released: 04 December 2002 Revised: 06 December 2002 version 2.0 Software: Microsoftr Internet Explorer Impact: Allow an attacker to...

Directory Manager edit_image.php Arbitrary Command Execution

Directory Manager is installed and does not properly filter user input. A remote attacker may use this flaw to execute arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid11104; scriptversion"1.26";...

ISS Alert: Remote Denial of Service Vulnerability in ISC BIND

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Aler...

CVE-2001-0760

Citrix Nfuse 1.51 is affected: a malformed request to launch.asp that omits the session field can disclose the absolute path of the web root to remote attackers, enabling partial disclosure of server information. No remediation or exploitation details are provided in the connected documents.

PT-2001-2618 · Microsoft · Internet Security/Acceleration (Isa) Server 2000

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Security and Acceleration ISA Server 2000 Description: The issue allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. The vendor disputes this issue, stating that it requires high...

ZoneAlarm Pro Local Internet not only Locally!

ZoneAlarm Pro is firewall for Windows home-users. The following was tested with ZoneAlarm Pro latest version: 2.6.357 Im not sure if it also works with the free version but I can't imagine why it wouldn't. Similair to Internet Explorer ZoneAlarm Pro ZAP has security settings for Local and Interne...