[SA17305] Skype Multiple Buffer Overflow Vulnerabilities

TITLE: Skype Multiple Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA17305 VERIFY ADVISORY: http://secunia.com/advisories/17305/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Skype for Pocket PC 1.x http://secunia.com/product/4252/ Skype for Mac OS X 1....

Trusted Digital, Trusted Mobility Suite Authorization Bypass Vulnerability

Trusted Digital, Trusted MObility Suite Authorization Bypass Vulnerability Affected applications Trusted Mobility Agent PC Policy Versions: All Backgroud: Trusted Mobility Suite detects, controls and centrally manages mobile devices. It also pushes security policy and disables lost or stolen...

vxTftpSrv TFTP server for Pocket PC buffer overflow

Buffer overflow on oversized file name...

vxWeb Web server for Pocket PC buffer overflow

Buffer overflow on oversized request URI...

Airscanner Mobile Security Advisory #05081102: vxFtpSrv 0.9.7 Remote Code Execution Buffer Overflow Vulnerability

Airscanner Mobile Security Advisory 05081102: vxFtpSrv 0.9.7 Remote Code Execution Buffer Overflow Vulnerability Product: vxFtpSrv 0.9.7 Platform: Tested on Windows Mobile Pocket PC 2003 Requirements: Mobile device running Windows Mobile Pocket PC with vxFtpSrv 0.9.7 installed and running. Credit...

Airscanner Mobile Security Advisory #05081101: vxWeb v.1.1.4 Denial of Service Vulnerability

Airscanner Mobile Security Advisory 05081101: vxWeb v.1.1.4 Denial of Service Vulnerability Product: vxWeb v1.1.4 Platform: Tested on Windows Mobile Pocket PC 2003 Requirements: Mobile device running Windows Mobile Pocket PC with vxWeb v1.1.4 installed and running. Credits: Seth Fogie Airscanner...

PC-EXPERIENCE/TOPPE CMS Security Advisory

PC-EXPERIENCE/TOPPE CMS Security Advisory By : Morinex E-Mail : [email protected] Date : 30-07-2K5 so lazzy this summer Shoutz : Woopie , sirh0t , 00pz , V1su4l and the gayґs of 0x1fe. I hate them so much isnt Falesco ? 0x1fe.com : Vulnerabilities User-ID Bypassing remote Cross Site Scripting...

[SA15932] Access Remote PC User Credentials Disclosure

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Access Remote PC 4.5.1 - Local Password Disclosure

/ Access Remote PC 4.5.1 Local Password Disclosure Exploit by Kozan Application: Access Remote PC 4.5.1 and probably prior versions Vendor: www.access-remote-pc.com Vulnerable Description: Access Remote PC 4.5.1 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA We...

Access Remote PC 4.5.1 Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits ======================================================== Access Remote PC 4.5.1 Local Password Disclosure Exploit ======================================================== / Access Remote PC 4.5.1 Local Password Disclosure Exploit by Kozan...

Access Remote PC 4.5.1 - Local Password Disclosure

Access Remote PC 4.5.1 - Local Password Disclosure / Access Remote PC 4.5.1 Local Password Disclosure Exploit by Kozan Application: Access Remote PC 4.5.1 and probably prior versions Vendor: www.access-remote-pc.com Vulnerable Description: Access Remote PC 4.5.1 discloses passwords to local users...

CVE-2004-2126

The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as 1 blackice.ini, 2 firewall.ini, 3 protect.ini, or 4 sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by exploiting vulnerabilities in the...

CVE-2004-2125

The CVE-2004-2125 entry describes a local privilege escalation in BlackICE PC Protection before 3.6.ccb, caused by a buffer overflow in blackd.exe when a long packetLog.fileprefix value is written into the application’s INI file. Affected product: BlackICE PC Protection 3.6 and earlier (3.6.ccb)....

CVE-2004-2126

CVE-2004-2126 affects BlackICE PC Protection 3.6 and earlier. The upgrade sets insecure permissions on INI files (blackice.ini, firewall.ini, protect.ini, sigs.ini), allowing local users to modify BlackICE configuration and, via vulnerabilities in the INI parsers, potentially execute arbitrary co...

CVE-2004-2125

Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value...

CVE-2004-2126: Undefined Security Weakness

The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as 1 blackice.ini, 2 firewall.ini, 3 protect.ini, or 4 sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by exploiting vulnerabilities in the...

CVE-2004-2125: Undefined Security Weakness

Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value...

AZL-7383 CVE-2005-0868 affecting package tn5250 0.17.4-26

AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...

AZL-37051 CVE-2005-0868 affecting package tn5250 0.17.6-4

AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...

LG U8120 Mobile Phone - '.MIDI' File Remote Denial of Service

source: https://www.securityfocus.com/bid/13154/info A remote denial of service vulnerability is reported to affect the LG U8120 Mobile Phone. The report indicates that the issue manifests when an affected phone processes a malicious MIDI file. The following instructions are available: To perform...