KLA10122 SB vulnerability in Comodo Firewall Pro

An unspecified vulnerability was found in Comodo Firewall Pro. By exploiting this vulnerability malicious users can bypass the driver protection for registry keys. This vulnerability can be exploited locally at a point related to OLE NamedPipe. Original advisories - Related products...

CVE-2006-6959

WebRoot Spy Sweeper 4.5.9 and earlier allows local users to bypass the "Startup-Shield" security restrictions by modifying certain registry keys...

CVE-2006-6959

WebRoot Spy Sweeper 4.5.9 and earlier allows local users to bypass the "Startup-Shield" security restrictions by modifying certain registry keys...

CVE-2006-3725

Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service crash via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the 1 HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and 2 HKLM\SYSTEM\CurrentControlSet\Services\SymEvent registry keys...

CVE-2006-3725

Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) by performing certain RegSaveKey, RegRestoreKey, and RegDeleteKey operations on the registry keys HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and HKLM\SYSTEM\CurrentControlSet\Services\SymEvent. This...

DMA[2005-1214a] - 'Widcomm BTW - Bluetooth for Windows Remote Audio Eavesdropping'

DMA2005-1214a - 'Widcomm BTW - Bluetooth for Windows Remote Audio Eavesdropping' Author: Kevin Finisterre Vendor: http://www.widcomm.com, http://www.broadcom.com/products/Bluetooth/ Product: 'versions = BTW 4.0.1.1500 ?' References: http://www.digitalmunition.com/DMA2005-1214a.txt Description: Wh...

CVE-2003-1169

CVE-2003-1169 affects DATEV Nutzungskontrolle 2.1 and 2.2. The root cause is insecure write permissions on critical registry keys, which lets local users bypass access restrictions by importing NukoInfo values into certain DATEV keys, thereby disabling Nutzungskontrolle. Connected sources confirm...

CVE-2003-1169

DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV keys, which disables Nutzungskontrolle...

Altiris Deployment Solution < 6.9.176 Multiple Vulnerabilities

Binary data 4504.prm...

CVE-2004-2006

Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection...

CVE-2003-1169

DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV keys, which disables Nutzungskontrolle...

regedit buffer overflow

Buffer overflow on oversized key displaying...

CVE-2002-0049

The CVE-2002-0049 issue is validated by connected sources describing a misconfigured WinReg permissions in Microsoft Exchange 2000 System Attendant. The registry key HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg becomes world-writeable, enabling non-admins (via remote registry ac...

CVE-2001-0586

TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords...

CVE-1999-1470

CVE-1999-1470 concerns Eastman Work Management 3.21, which stores passwords in cleartext in the COMMON and LOCATOR registry keys, enabling local users to gain privileges. The vulnerability is characterized as a local, low-complexity issue with partial confidentiality, integrity, and availability ...

Очередный проблемы с разрешениями в реестре Windows NT

Возможность записи различных ключей реестра позволяют получить привилегии Local System...

Microsoft Windows SMB Registry : Autologon Enabled

This script determines whether the autologon feature is enabled. This feature allows an intruder to log into the remote host as DefaultUserName with the password DefaultPassword. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10412; scriptversion"1.36";...

CVE-1999-0499

NETBIOS share information may be published through SNMP registry keys in NT...

CVE-1999-0499

CVE-1999-0499 describes exposure of NETBIOS share information in Windows NT by publishing it through SNMP registry keys. Connected sources (Red Hat advisory; Nessus LANMAN disclosures) confirm information disclosure via SNMP OIDs for LanMan services/shares/users, enabling an attacker to learn tar...

windows.registry.keys.txt

Date: Fri, 19 Feb 1999 17:04:37 -0800 From: Ash To: [email protected] Subject: Regarding passwords in registry keys. Considering the various threads running around about programs storing passwords temporarily in Windows registry entries I thought I would point out that registry keys are never...