CVE-2007-5277

Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a differen...

CVE-2007-5256

Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow 1 remote attackers to execute arbitrary code via a long HELP command on TCP port 3010 to the sysuser::exechelp function in sysuser.cc and 2 remote authenticated users to execute arbitrary...

Check Point VPN-1/FireWall-1 4.1 SP2 Blocked Port Bypass Exploit

No description provided by source. / Summary A vulnerability exists in Check Point VPN-1/FireWall-1 4.1 SP2 that enables an attacker to establish connections to blocked TCP services through the firewall in certain configurations. We expect many deployed FireWall-1 installations to be immune to th...

CVE-2007-4218

Multiple buffer overflows in the ServerProtect service SpntSvc.exe in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remote attackers to execute arbitrary code via certain RPC requests to certain TCP ports that are processed by the 1 RPCFNENGNewManualScan, 2...

Buffer overflow

Multiple buffer overflows in the ServerProtect service SpntSvc.exe in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remote attackers to execute arbitrary code via certain RPC requests to certain TCP ports that are processed by the 1 RPCFNENGNewManualScan, 2...

CVE-2007-4218

Multiple buffer overflows in the ServerProtect service SpntSvc.exe in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remote attackers to execute arbitrary code via certain RPC requests to certain TCP ports that are processed by the 1 RPCFNENGNewManualScan, 2...

CVE-2007-4218

Trend Micro ServerProtect for Windows is affected by a buffer overflow in the SpntSvc RPC interface (port 5168) triggered via RPCFN_CMON_SetSvcImpersonateUser in Stcommon.dll, allowing remote code execution. Public sources detail this vulnerability as CVE-2007-4218 and identify the vulnerable com...

Integer overflow

Integer overflow in Panda Software AdminSecure allows remote attackers to execute arbitrary code via crafted packets with modified length values to TCP ports 19226 or 19227, resulting in a heap-based buffer overflow...

CVE-2007-3026

CVE-2007-3026 refers to a remote, unauthenticated heap-based buffer overflow in Panda AdminSecure (AdminSecure agent) that occurs when processing traffic on TCP ports 19226 or 19227. The flaw results from trusting a user-supplied length value for memory allocation, which can cause an integer over...

CVE-2007-3026

Integer overflow in Panda Software AdminSecure allows remote attackers to execute arbitrary code via crafted packets with modified length values to TCP ports 19226 or 19227, resulting in a heap-based buffer overflow...

SAP Message Server heap buffer overflow

Overview The SAP Message Server contains a flaw that may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description The SAP Message Server is used to exchange and regulate messages between servers in a SAP network. A heap-based buffer...

iDefense Security Advisory 06.05.07: Symantec Ghost Multiple Denial of Service Vulnerabilities

Symantec Ghost Multiple Denial of Service Vulnerabilities iDefense Security Advisory 06.05.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 05, 2007 I. BACKGROUND Symantec Ghost Solution Suite is an enterprise disk imaging software that allows administrators to remotely back-up and...

Race condition

Race condition in the Symantec Enterprise Security Manager ESM 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service CPU consumption and application hang via certain network scans to ESM ports...

CVE-2007-2850

The Session Reliability Service XTE in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string...

CVE-2007-2850

The CVE-2007-2850 vulnerability affects Citrix Session Reliability Service (XTE) in MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0/1.5. The issue allows remote attackers to bypass network security policies and connect to arbitrary TCP ports by sending a modi...

Symantec Enterprise Security Manager Denial-of-Service

SUMMARY Symantec Enterprise Security Manager ESM is susceptible to a race condition that can lead to a denial-of-service. Risk Impact Medium Remote Access | Yes ---|--- Local Access | No Authentication Required | No Exploit publicly available | No AFFECTED PRODUCTS Vulnerable Products Only the...

CVE-2007-2784

Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...

Code injection

Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...

CVE-2007-2784

Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...

Novell Groupwise WebAccess Base64 Decoding Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Groupwise WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists in the GWINTER.exe process bound by default on TCP ports 7205 and 7211. During the...