6495 matches found
CVE-2002-1774
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is...
CVE-2002-1777
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus NAV 2002 allows remote attackers to bypass e-mail scanning via a filename in the Content-Type field with an excluded extension such as .nch or .dbx, but a malicious extension in the Content-Disposition field, which is use...
CVE-2002-1774: Undefined Security Weakness
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is...
CVE-2002-1777: Undefined Security Weakness
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus NAV 2002 allows remote attackers to bypass e-mail scanning via a filename in the Content-Type field with an excluded extension such as .nch or .dbx, but a malicious extension in the Content-Disposition field, which is use...
[Full-disclosure] RealVNC/WinVNC Multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Two simple vulnerabilities wich may lead to an os guess + null session + several others infos while scanning port 5900, low risk on paper but high online risk: My 2cent suggestion to the realvnc team would be to totally remove this "No Authentication"...
CVE-2005-1711
Gibraltar Firewall versions 2.2 and earlier are affected. When using the ClamAV update to 0.81 for Squid, it employs a defunct ClamAV method to scan memory for viruses, which does not return an error code and therefore fails to detect viruses. The vulnerability is confirmed across CVE records (in...
CVE-2004-2088
Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification DSN where the original email is not included in the bounce message...
CVE-2004-2088
Sophos Anti-Virus 3.78 is affected. The vulnerability allows remote attackers to bypass the virus scan by crafting a qmail-generated Delivery Status Notification (DSN) that omits the original email in the bounce message. The core issue is the DSN handling during bounce processing, enabling bypass...
CVE-2004-2088: Undefined Security Weakness
Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification DSN where the original email is not included in the bounce message...
myServer Multiple Vulnerabilities
Binary data 2892.prm...
CVE-2005-0218
ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...
CVE-2005-0218
ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...
CVE-2005-0218
ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...
Symantec Norton AntiVirus vulnerable to DoS via the "Auto-Protect" module
Overview Symantec Norton AntiVirus may hang or crash when the Auto-Protect module scans certain files. Description Symantec Norton AntiVirus is an anti-virus product for desktop and enterprise use. The Norton AntiVirus "Auto-Protect" module provides automatic file scanning and detection of viruse...
Kayako eSupport Multiple XSS
Binary data 2621.prm...
GLSA-200501-46 : ClamAV: Multiple issues
The remote host is affected by the vulnerability described in GLSA-200501-46 ClamAV: Multiple issues ClamAV fails to properly scan ZIP files with special headers CAN-2005-0133 and base64 encoded images in URLs. Impact : By sending a base64 encoded image file in a URL an attacker could evade virus...
SYM05-003 Symantec UPX Parsing Engine Heap Overflow
Symantec Security Advisory SYM05-003 08 February, 2005 Symantec UPX Parsing Engine Heap Overflow Revision History 2/9/2005 - Updated Vulnerability details and mitigations. Updated CVE Candidate Number 2/11/2005 - Configuration modifications tested and added to disable vulnerable module in SAVCE a...
Generic Email Client Detection
Binary data 2611.prm...
[SA14216] F-Secure Multiple Products ARJ Archive Handling Vulnerability
TITLE: F-Secure Multiple Products ARJ Archive Handling Vulnerability SECUNIA ADVISORY ID: SA14216 VERIFY ADVISORY: http://secunia.com/advisories/14216/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: F-Secure Anti-Virus 2004 http://secunia.com/product/3500/ F-Secure...
CVE-2005-0315
The CVE-2005-0315 entry concerns the FTP service in Magic Winmail Server 4.0 Build 1112, where the FTP PORT command does not verify that the command IP matches the FTP session user’s IP. This permits remote authenticated users to use the server as an intermediary for port scanning. The connected ...