CVE-2008-1221

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console aka eScan Server 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR get command...

CVE-2008-1221

CVE-2008-1221 describes an absolute path traversal in the FTP server of MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (eScan Server) 9.0.742.1. The vulnerability allows a remote attacker to read arbitrary files via an absolute pathname in the RETR (get) command. Affec...

MicroWorld eScan Server directory traversal

Embedded TCP/2021 FTP server directory traversal...

MicroWorld eScan Server目录遍历漏洞

BUGTRAQ ID: 28127 eScan是一款全面的杀毒、内容过滤解决方案。 eScan在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞非授权访问系统文件。 eScan Server（eserv.exe）在2021端口监听FTP连接。如果远程攻击者向该服务提交的FTP请求中在所选定磁盘的根路径文件名包含有斜线或反斜线的话（如/boot.ini或\windows\win.ini），就可以下载远程系统磁盘上的任意文件。 MicroWorld Technologies eScan Corporate Edition 9.0.742.98 MicroWorld...

Directory traversal in MicroWorld eScan Server 9.0.742.98

Luigi Auriemma Application: MicroWorld eScan Server aka eScan Management Console http://www.mwti.net Versions: = 9.0.742.98 Platforms: Windows Bug: directory traversal Exploitation: remote Date: 06 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3...

Microworld eScan Server 9.0.742 - Directory Traversal

Microworld eScan Server 9.0.742 - Directory Traversal source: https://www.securityfocus.com/bid/28127/info MicroWorld eScan Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access...

Microworld eScan Server 9.0.742 - Directory Traversal

source: https://www.securityfocus.com/bid/28127/info MicroWorld eScan Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary files outside of the FTP server root...

Information disclosure

MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions Everyone:Full Control for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe...

CVE-2007-4649

MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions Everyone:Full Control for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe...

[Full-disclosure] Multiple eScan products insecure file permissions

========================================================================= Team Intell Security Advisory TISA2007-13-Public ------------------------------------------------------------------------- Multiple eScan products insecure file permissions...

Microworld eScan (Multiple Products) - Local Privilege Escalation

Microworld eScan Multiple Products - Local Privilege Escalation source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to...

Microworld eScan (Multiple Products) - Local Privilege Escalation

source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful...

MicroWorld eScan multiple content filtering products buffer overflow

Buffer overflow in TCP/2222 agent management interface...

Secunia Research: eScan Products Agent Service Command Decryption Buffer Overflow

====================================================================== Secunia Research 23/05/2007 - eScan Products Agent Service Command Decryption Buffer Overflow - ====================================================================== Table of Contents Affected...

Stack overflow

Stack-based buffer overflow in the MicroWorld Agent service MWAGENT.EXE in MicroWorld Technologies eScan before 9.0.718.1 allows remote attackers to execute arbitrary code via a long command...

CVE-2007-2687

Stack-based buffer overflow in the MicroWorld Agent service MWAGENT.EXE in MicroWorld Technologies eScan before 9.0.718.1 allows remote attackers to execute arbitrary code via a long command...

CVE-2007-2687

Stack-based buffer overflow in the MicroWorld Agent service MWAGENT.EXE in MicroWorld Technologies eScan before 9.0.718.1 allows remote attackers to execute arbitrary code via a long command...

CVE-2007-2687

CVE-2007-2687: A stack-based buffer overflow in MicroWorld Technologies eScan’s MWAGENT.EXE (Agent Service) can be triggered by an overly long command, enabling remote code execution. Secunia details a boundary/overflow condition in the decryption path, with exploitation possible via the service ...

eScan < 9.0.718.1 MicroWorld Agent service (MWAGENT.EXE) Command Decryption Overflow

According to its version number, the installation of eScan on the remote host includes a service, the MicroWorld Agent service, for remote administration that fails to properly handle overly-long commands. A remote attacker can leverage this issue to crash the service or even execute arbitrary...

Command injection

The MicroWorld Agent service MWAGENT.EXE in MicroWorld Technologies eScan 8.0.671.1, and possibly other versions, allows remote or local attackers to gain privileges and execute arbitrary commands by connecting directly to TCP port 2222...