PT-2021-22972

Name of the Vulnerable Software and Affected Versions F-Secure antivirus engine affected versions not specified Description A vulnerability was discovered in the F-Secure antivirus engine, where scanning MS Outlook .pst files can lead to denial-of-service. The issue can be exploited remotely by a...

Windows Gather Exchange Server Mailboxes

This module will gather information from an on-premise Exchange Server running on the target machine. Two actions are supported: LIST default action: List basic information about all Exchange servers and mailboxes hosted on the target. EXPORT: Export and download a chosen mailbox in the form of a...

Motorola Device Manager 2.4.5 - (ForwardDaemon.exe) Unquoted Service Path Vulnerability

Exploit Title: Motorola Device Manager 2.4.5 - 'ForwardDaemon.exe ' Unquoted Service Path Discovery by: Angel Canseco Vendor Homepage: https://www.filehorse.com/es/descargar-motorola-device-manager/ Tested Version: 2.4.5 Vulnerability Type: Unquoted Service Path Tested on OS: Windows 10 Pro x64 e...

Converting MBOX to Outlook Easily

Mail transfer is a common search query. Most commonly, users may migrate due to personal preferences, corporate policies, or support issues. Systems based on the MBOX format are tricky: you may easily export the files, but direct import to Outlook is impossible. That is unless you use the right...

How to Restore from Microsoft Exchange 2007 with Veeam Backup and Replication

Challenge This KB article documents the procedure for restoring Exchange 2007 application items using a Surebackup job with export to PST. Please note that as of April 2017, Microsoft no longer supports Exchange 2007. As such, steps 7 and 8 of this process are no longer supported by Veeam Technic...

Behind the CARBANAK Backdoor

In this blog, we will take a closer look at the powerful, versatile backdoor known as CARBANAK aka Anunak. Specifically, we will focus on the operational details of its use over the past few years, including its configuration, the minor variations observed from sample to sample, and its evolution...

CVE-2017-6865

CVE-2017-6865 is a DoS vulnerability in Siemens PROFINET DCP handling affecting multiple Siemens products (WinCC, STEP 7/TIA Portal, PCS 7, WinAC/WinCC flexible, SCT, SINEMA, SINUMERIK, etc.). The root cause is improper input validation, where specially crafted PROFINET DCP broadcast packets on a...

Design/Logic Flaw

The 1 Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the 2 FlashCopy Manager for Exchange component 2.2 and 3.1 before 3.1.1 in IBM Tivoli Storage FlashCopy Manager do not properly constrain mailbox contents during certain...

CVE-2013-3976

The 1 Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the 2 FlashCopy Manager for Exchange component 2.2 and 3.1 before 3.1.1 in IBM Tivoli Storage FlashCopy Manager do not properly constrain mailbox contents during certain...

CVE-2013-3976

IBM’s advisory for CVE-2013-3976 states that Data Protection for Microsoft Exchange (Tivoli Storage Manager for Mail) versions 6.1 and 6.3 and FlashCopy Manager for Microsoft Exchange versions 2.1, 2.2, and 3.1 may misbind contents when restoring multiple mailboxes into PSTs, causing a mailbox ow...

PT-2014-2720

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Mail Data Protection for Exchange component versions prior to 6.1.3.4 IBM Tivoli Storage Manager for Mail Data Protection for Exchange component versions prior to 6.3.1 IBM Tivoli Storage FlashCopy Manager...

Comodo Internet Security Denial of Service Vulnerability-05

The host is installed with Comodo Internet Security and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbcomododosvuln05win.nasl 6074 2017-05-05 09:03:14Z teissa $ Comodo Internet Security Denial of Service Vulnerability-05 Authors: Arun Kallavi Copyright: Copyright ...

Comodo Internet Security Denial of Service Vulnerability-05

Comodo Internet Security is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-5120

The Antivirus component in Comodo Internet Security before 5.4.189822.1355 allows remote attackers to cause a denial of service application crash via a crafted .PST file...

Code injection

The Antivirus component in Comodo Internet Security before 5.4.189822.1355 allows remote attackers to cause a denial of service application crash via a crafted .PST file...

CVE-2011-5120

The Antivirus component in Comodo Internet Security before 5.4.189822.1355 allows remote attackers to cause a denial of service application crash via a crafted .PST file...

CVE-2011-5120

The CVE-2011-5120 entry applies to Comodo Internet Security’s Antivirus component (pre-5.4.189822.1355). The issue is a denial-of-service (application crash) triggered by processing a crafted .PST file. Affected software versions are before 5.4.189822.1355. The OpenVAS entries corroborate a DoS c...

CVE-2011-5120: Undefined Security Weakness

The Antivirus component in Comodo Internet Security before 5.4.189822.1355 allows remote attackers to cause a denial of service application crash via a crafted .PST file...

PT-2012-2098

Name of the Vulnerable Software and Affected Versions Comodo Internet Security versions prior to 5.4.189822.1355 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by utilizing a crafted .PST file. Recommendations For versions prior to...

CVE-2009-2650

Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted 1 .m3u or possibly 2 .pst file...