Code injection

The SSH server in 1 Cisco Service Control Engine SCE before 3.1.6, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service device restart or daemon outage via a high rate of login attempts, aka Bug ID CSCsi68582...

CVE-2008-0535

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE before 3.1.6, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service device instability via "SSH credentials that attempt to change the authentication method," aka Bug ID...

Authentication flaw

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE before 3.1.6, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service device instability via "SSH credentials that attempt to change the authentication method," aka Bug ID...

Design/Logic Flaw

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service management interface outage via SSH traffic that occurs during management...

CVE-2008-0534

The SSH server in 1 Cisco Service Control Engine SCE before 3.1.6, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service device restart or daemon outage via a high rate of login attempts, aka Bug ID CSCsi68582...

CVE-2008-0536

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service management interface outage via SSH traffic that occurs during management...

CVE-2008-0535

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE before 3.1.6, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service device instability via "SSH credentials that attempt to change the authentication method," aka Bug ID...

CVE-2008-0535

CVE-2008-0535 affects Cisco Service Control Engine (SCE) SSH server (and Icon Labs Iconfidant SSH) with multiple DoS through SSH login behavior and attempts to change authentication methods. Root cause: SSH credential handling during authentication can trigger instability, potentially causing dev...

CVE-2008-0536

CVE-2008-0536 affects Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and Icon Labs Iconfidant SSH before 2.3.8. The vulnerability allows remote SSH-based denial of service (management interface outage) by triggering illegal I/O operations during management tasks (Bu...

CVE-2008-0536

Unspecified vulnerability in the SSH server in 1 Cisco Service Control Engine SCE 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service management interface outage via SSH traffic that occurs during management...

CVE-2008-0534

The SSH server in 1 Cisco Service Control Engine SCE before 3.1.6, and 2 Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service device restart or daemon outage via a high rate of login attempts, aka Bug ID CSCsi68582...

CVE-2008-0534

Summary of CVE-2008-0534 : The SSH server in Cisco Service Control Engine (SCE) prior to 3.1.6 and Icon Labs Iconfidant SSH prior to 2.3.8 is affected. The vulnerability allows remote attackers to cause a denial of service (device restart or daemon outage) by issuing a high rate of login attempts...

Zune Software - ActiveX Arbitrary File Overwrite

Zune Software - ActiveX Arbitrary File Overwrite Vulnerability class : Arbitrary file overwrite Discovery date : 21 April 2008 Remote : Yes Credits : J. Bachmann & B. Mariani from ilion Research Labs Vulnerable : Zune software: EncProfile2 Class An arbitrary file overwrite as been discovered in a...

Zune Software - ActiveX Arbitrary File Overwrite

Vulnerability class : Arbitrary file overwrite Discovery date : 21 April 2008 Remote : Yes Credits : J. Bachmann & B. Mariani from ilion Research Labs Vulnerable : Zune software: EncProfile2 Class An arbitrary file overwrite as been discovered in an ActiveX control installed with the Zune softwar...

iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO Multiple Heap Overflow Vulnerabilities

iDefense Security Advisory 04.17.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 17, 2008 I. BACKGROUND OpenOffice is an open-source desktop office suite for many of today's popular operating systems. One of the file formats that OpenOffice supports is Quattro Pro QPRO. This format ...

iDefense Security Advisory 04.08.08: Microsoft Windows Graphics Rendering Engine Integer Overflow Vulnerability

iDefense Security Advisory 04.08.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 08, 2008 I. BACKGROUND Microsoft Windows graphics device interface GDI is the core library used to display graphics and text on the Windows operating system. It is the standard interface through which...

[Full-disclosure] iDefense Security Advisory 03.11.08: Microsoft Outlook mailto Command Line Switch Injection

iDefense Security Advisory 03.11.08 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 11, 2008 I. BACKGROUND Microsoft Outlook provides an integrated solution for managing and organizing e-mail messages, schedules, tasks, notes, contacts, and other information. More information is...

DESlock+ 3.2.6 - DLMFENC.sys Local Kernel Ring0 link list zero (PoC)

DESlock+ 3.2.6 - DLMFENC.sys Local Kernel Ring0 link list zero PoC / deslock-list-zero.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ZEROMEM 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int...

DESlock+ <= 3.2.6 (list) Local Kernel Memory Leak PoC

Exploit for unknown platform in category local exploits ===================================================== DESlock+ DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void...

DESlock+ < 3.2.6 - 'LIST' Local Kernel Memory Leak

/ deslock-list-leak.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ; static void xormaskreq struct ioctlreq req DWORD i, pid; PCHAR ptr...