MacOS X with HFS+ filesystem multiple web servers information disclosure

By accessing named file streams it's possible to access protected file data...

mpg123 -- buffer overflow vulnerability

Yuri D'Elia has found a buffer overflow vulnerability in mpg123's parsing of frame headers in input streams. This vulnerability can potentially lead to execution of arbitrary code with the permissions of the user running mpg123, if the user runs mpg123 on a specially crafted MP2 or MP3 file...

USN-42-1: Xine library vulnerabilities

Several buffer overflows have been discovered in xine-lib, the video/audio codec library for Xine frontends xine-ui, totem-xine, kaffeine, and others. If an attacker tricked a user into loading a malicious RTSP stream or a stream with specially crafted AIFF audio or PNM image data, they could...

Broadcast crash in Vypress Tonecast 1.3

Luigi Auriemma Application: Vypress Tonecast http://www.vypress.com/products/tonecast/ Versions: = 1.3 both the program and the plugin for Winamp Platforms: Windows Bug: crash Exploitation: remote, versus receivers broadcast Date: 19 October 2004 Author: Luigi Auriemma e-mail: [email protected]...

DEBIAN-CVE-2004-0433

Multiple buffer overflows in the Real-Time Streaming Protocol RTSP client for 1 MPlayer before 1.0pre4 and 2 xine lib xine-lib before 1-rc4, when playing Real RTSP realrtsp streams, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long URLs, b lo...

Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service

Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service source: https://www.securityfocus.com/bid/10025/info A vulnerability has been reported in the Roger Wilco Server, it is reported that a user does not need to connect to the server over the TCP port to have UDP based audio...

CVE-2002-2068

Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2070

SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

PT-2002-2786 · Microsoft +1 · Ntfs +2

Name of the Vulnerable Software and Affected Versions: BestCrypt BCWipe versions 1.0.7 and 2.0 through 2.35.1 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS...

PT-2002-2788 · Microsoft +1 · Ntfs +2

Name of the Vulnerable Software and Affected Versions: Eraser version 5.3 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems. Recommendations: For...

PT-2002-2789 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: PGP versions 6.x through 7.x Description: The issue allows attackers to recover sensitive information that was supposed to be deleted by not clearing Windows alternate data streams attached to files on NTFS file systems. Recommendations: For...

PT-2002-2790 · Microsoft +1 · Windows +2

Name of the Vulnerable Software and Affected Versions: SecureClean version 3 build 2.0 Description: The issue concerns the failure to clear Windows alternate data streams attached to files on NTFS file systems, allowing attackers to recover sensitive information that was supposed to be deleted...

PT-2002-2787 · Microsoft +1 · Ntfs +2

Name of the Vulnerable Software and Affected Versions: East-Tec Eraser version 2002 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems...

CVE-2000-0927

WQuinn QuotaAdvisor 4.1 has a vulnerability where file sizes in alternate data streams are not recorded, allowing quota bypass. Affected: QuotaAdvisor 4.1. Root cause: improper handling of alternate data streams leading to inaccurate quota accounting (partial impact on confidentiality, integrity,...

CVE-2000-0927

WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions...

CVE-2000-0927

WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions...

Дырки в Quota Advisor

Пользователь может обойти установленные файловые квоты используя NTFS-потоки. Например: type bigfile.txt nullfile.txt:hidden Кроме того, возможно получить список локальных файлов...

DST2K0037: QuotaAdvisor 4.1 by WQuinn is susceptible to alternati ve datastreams to bypass quotas.

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 25/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0037.txt

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 25/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

Новое поколение вирусов под Windows 2000

Новый вирус Stream использует альтернативные потоки данных NTFS, позволяющие придавать файлам новые атрибуты, для хранения тела зараженного файла, что усложняет процесс лечения вируса...