CVE-2006-3999: Undefined Security Weakness

ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries...

Weak PC Tools antivirus permissions

Permissions for "PC Tools AntiVirus" folder are set to Everyone:Full Control during installation...

[Full-disclosure] Secunia Research: PC Tools AntiVirus Insecure Default Directory Permissions

====================================================================== Secunia Research 03/08/2006 - PC Tools AntiVirus Insecure Default Directory Permissions - ====================================================================== Table of Contents Affected...

ISS BlackICE PC Protection DLL faking of run-time linked libraries Vulnerability

BlackICE does not protect pamversion.dll in its installation directory. And also because its component protection fails to protect BlackICE processes this can be misused to inject fake DLL into BlackICE service. The whole advisory with more details and source code is available here...

CVE-2006-3840: Undefined Security Weakness

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU 24.39/1.78/epj/x.x.x.1780, including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service infinite loop via a crafted...

Microsoft Windows Server Driver Remote Information Disclosure Vulnerability

Description Microsoft Windows Server driver is susceptible to a remote information-disclosure vulnerability. This issue is due to a flaw in the handling of certain SMB traffic. Exploiting this issue allows remote attackers to gain access to potentially sensitive fragments of kernel memory. This m...

A small prank:clever uninstall public PC screensavers-vulnerability warning-the black bar safety net

The school computer laboratory is a plurality of classes of common, one class of students in class when specifying a screen saver and set a password, the next class of students in the class, if at the specified time, the minimum time is 1 minute without using a computer, i.e. run the screen saver...

DEBIAN-CVE-2006-2702

vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PCREMOTEADDR HTTP header, which vars.php uses to redefine $SERVER'REMOTEADDR'...

CVE-2005-4771

Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld PDA device despite a policy setting that sync is unauthorized...

CVE-2005-4771

The CVE-2005-4771 entry concerns the Trust Digital Trusted Mobility Suite’s Trusted Mobility Agent PC Policy. A cancel button at the domain-authentication prompt bypasses policy checks, allowing local users to sync a handheld (PDA) device despite a policy setting that sync is unauthorized. The av...

CVE-2005-4771: Undefined Security Weakness

Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld PDA device despite a policy setting that sync is unauthorized...

CVE-2006-1585: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via 1 the pc parameter in a index.php and 2 pnom, 3 pcourriel, and 4 pcommentaire parameters in b imageagrandir.php...

PT-2006-2584 · Monalbum · Monalbum

Name of the Vulnerable Software and Affected Versions: MonAlbum version 0.8.7 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in multiple parameters, including pc in index.php, and pnom, pcourriel, pcommentai...

Microsoft Windows Tablet PC Services Detection

Binary data 3494.prm...

Code injection

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...

CVE-2006-1379

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...

CVE-2006-1379

Trend Micro PC-cillin Internet Security 2006 versions 14.00.1485 through 14.10.0.1023 are affected by insecure DACLs on critical files, allowing local users to gain SYSTEM privileges by modifying executables (tmntsrv.exe and tmproxy.exe). Root cause: improper access control on key binaries. Impac...

CVE-2006-1379

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...

PT-2006-2388 · Trend Micro · Trend Micro Pc-Cillin Internet Security

Name of the Vulnerable Software and Affected Versions: Trend Micro PC-cillin Internet Security 2006 versions 14.00.1485 through 14.10.0.1023 Description: The issue allows local users to gain SYSTEM privileges by modifying executable programs. This is due to the software using insecure DACLs for...

CVE-2006-1379: Undefined Security Weakness

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...