[Full-Disclosure] iDEFENSE Security Advisory 02.09.05: CA BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow

Computer Associates BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow Vulnerability iDEFENSE Security Advisory 02.09.05 www.idefense.com/application/poi/display?id=194&type=vulnerabilities February 09, 2005 I. BACKGROUND BrightStor ARCserve Backup for Windows delivers backup...

Microsoft Windows Media Player Remote PNG Image Format Buffer Overflow Vulnerability

Description A remote buffer overflow vulnerability affects the Portable Network Graphics PNG image format processing functionality of Microsoft Windows Media Player. This issue is due to a failure of the application to properly validate the size of image data prior to copying it into static proce...

Microsoft Windows COM Structured Storage Local Privilege Escalation Vulnerability

Description Microsoft Windows is reported prone to a local privilege escalation vulnerability when processing COM structured storage files. This issue may allow a local attacker to gain elevated privileges on a vulnerable computer. An attacker with local interactive access may craft an applicatio...

foxmailDoS.txt

DATE: 02/04/2005 AUTHOR: Fortinet, inc xouyang PRODUCTS: Foxmail Server- A MAil server for both Windows and linux. AFFECTED VERSION: Foxmail server for windows version 2.0Newest.I just test windows server ,maybe linux version have vulnerability too. Description: Foxmail-the Email client applicati...

CVE-2004-2329

Kerio Personal Firewall KPF 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box...

CVE-2004-2554

Novell Client Firewall NCF 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges...

CVE-2004-2430

Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges...

CVE-2004-2125

Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value...

My Firewall Plus privilege escalation

It's possible ot invoke external application with SYSTEM privileges via help subsystem...

CA eTrust EZ weak permissions

Executables, including ones executed with System privileges are writable by users...

Microsoft Windows Internet Naming Service (WINS) contains a buffer overflow

Overview A buffer overflow in the WINS service may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description The Microsoft WINS service maps IP addresses to NETBIOS computer names.The WINS protocol contains a vulnerability that may allow a remote attack...

MS04-042: Windows NT Multiple DHCP Vulnerabilities (885249)

The remote host has the Windows DHCP server installed. There is a flaw in the remote version of this server that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15965;...

Altiris AClient privilege escalation

It's possible to execute external application with local system privileges...

Altiris Deployment Solution 5.6 - Client Service Privilege Escalation

source: https://www.securityfocus.com/bid/11709/info Altiris Deployment Solution Client allows a user to activate the client interface by easily launching the software from an icon in the Windows system tray. It is reported that a local user may exploit the client interface to escalate privileges...

MS04-031: Vulnerability NetDDE Could Allow Code Execution (841533) (uncredentialed check)

The remote version of Windows is affected by a vulnerability in Network Dynamic Data Exchange NetDDE. An attacker may exploit this flaw to execute arbitrary code on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15572;...

Microsoft Windows WMF/EMF Image Format Rendering Remote Buffer Overflow Vulnerability

Description Microsoft Windows WMF/EMF image-rendering library is affected by a remote buffer-overflow vulnerability because it fails to properly verify the lengths of strings contained within an affected image file before copying them into finite buffers. Any code execution that occurs will take...

Microsoft Windows NetDDE Remote Buffer Overflow Vulnerability

Description Microsoft Windows NetDDE is affected by a remote buffer-overflow vulnerability because the application fails to properly verify the lengths of strings contained within unspecified network messages before copying them into finite buffers. Note that NetDDE is not activated by default on...

Kaspersky Antivirus privilege escalation

By sending message to application it's possible to bypass password protection and execute application with local system privileges...

CVE-2003-0994

The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain...

CVE-2004-0213

Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context...