CVE-2008-3727

CVE-2008-3727 describes a directory traversal vulnerability in the Web Based Administration component of MicroWorld Technologies MailScan 5.6.a espatch 1. An unauthenticated or remote attacker could read arbitrary files by presenting a URI path containing .. (dot dot). The available connected sou...

CVE-2008-3729

CVE-2008-3729 affects MicroWorld Technologies MailScan Web-Based Administration (MailScan 5.6.a espatch 1). The issue allows remote attackers to bypass authentication and obtain administrative access by sending a direct request with (1) an IsAdmin=true cookie value or (2) no cookie. This is a coo...

[Full-disclosure] Multiple eScan products insecure file permissions

========================================================================= Team Intell Security Advisory TISA2007-13-Public ------------------------------------------------------------------------- Multiple eScan products insecure file permissions...

Secunia Research: eScan Products Agent Service Command Decryption Buffer Overflow

====================================================================== Secunia Research 23/05/2007 - eScan Products Agent Service Command Decryption Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2007-2687

Stack-based buffer overflow in the MicroWorld Agent service MWAGENT.EXE in MicroWorld Technologies eScan before 9.0.718.1 allows remote attackers to execute arbitrary code via a long command...

CVE-2007-2687

Stack-based buffer overflow in the MicroWorld Agent service MWAGENT.EXE in MicroWorld Technologies eScan before 9.0.718.1 allows remote attackers to execute arbitrary code via a long command...

CVE-2007-2687

CVE-2007-2687: A stack-based buffer overflow in MicroWorld Technologies eScan’s MWAGENT.EXE (Agent Service) can be triggered by an overly long command, enabling remote code execution. Secunia details a boundary/overflow condition in the decryption path, with exploitation possible via the service ...

CVE-2007-0655

The MicroWorld Agent service MWAGENT.EXE in MicroWorld Technologies eScan 8.0.671.1, and possibly other versions, allows remote or local attackers to gain privileges and execute arbitrary commands by connecting directly to TCP port 2222...

CVE-2007-0655

The CVE concerns the MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan 8.0.671.1 (and possibly other versions). Affected component: MWAGENT.EXE running as a service. Vulnerability: remote or local attackers can gain privileges and execute arbitrary commands by connecting dir...