Energizer DUO USB battery charger software allows unauthorized remote system access

Overview The software available for the Energizer DUO USB battery charger contains a backdoor that allows unauthorized remote system access. Description Energizer DUO is a USB battery charger. An optional Windows application that allows the user to view the battery charging status has been...

IT-Grundschutz M4.238: Einsatz eines lokalen Paketfilters (Windows)

IT-Grundschutz M4.238: Einsatz eines lokalen Paketfilters Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94220 Diese Prüfung bezieht sich auf die 11...

IT-Grundschutz M4.098: Kommunikation durch Paketfilter auf Minimum beschränken (Windows)

IT-Grundschutz M4.098: Kommunikation durch Paketfilter auf Minimum beschränken Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94213 Diese Prüfung bezieht sich...

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Internet-PCs

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Internet-PCs. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95070 Diese Prüfung bezieht sich auf die 11...

IT-Grundschutz M4.238: Einsatz eines lokalen Paketfilters - Windows

IT-Grundschutz M4.238: Einsatz eines lokalen Paketfilters Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94220 Diese Prüfung bezieht sich auf die 11...

I Have Only One Security Prediction for 2010

Instead of the usual top ten lists that are all-too-common with predictions for the new year, I have just one: 2010 will be the year of desktop applications handling untrusted data in sandboxed processes, and it will be about time. Since the release of Windows XP SP2, there have been significantl...

CVE-2006-1475

Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams ADS filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windo...

Code injection

Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename is ".exe" with no characters before the ".", which might allow local user-assisted users to trick a user into unblocking a Trojan horse program, as demonstrated by a malicious...

CVE-2006-1475

Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams ADS filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windo...

CVE-2006-1475

CVE-2006-1475 affects Windows XP SP2: Windows Firewall fails to produce application alerts when an executable is launched via NTFS Alternate Data Streams (ADS) filename:stream syntax. Root cause is the ADS filename:stream handling bypassing the normal firewall alert mechanism, enabling a local at...

CVE-2006-1476

Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename is ".exe" with no characters before the ".", which might allow local user-assisted users to trick a user into unblocking a Trojan horse program, as demonstrated by a malicious...

MS Windows XP/2003 (IGMP v3) Denial of Service Exploit (MS06-007)

No description provided by source. / IGMP v3 DoS Exploit ref: http://www.juniper.net/security/auto/vulnerabilities/vuln2866.html ref: http://www.microsoft.com/technet/security/Bulletin/MS06-007.mspx by Alexey Sintsov [email protected] Req: Administrator rights on system Windows Firewall off for...

CVE-2005-2765

The user interface in the Windows Firewall does not properly display certain malformed entries in the Windows Registry, which makes it easier for attackers with administrator privileges to hide activities if the administrator only uses the Windows Firewall interface to monitor exceptions. NOTE: t...

CVE-2005-2765

The CVE-2005-2765 entry concerns the Windows Firewall UI not properly displaying certain malformed Windows Registry entries. The underlying issue is an information-hiding condition that could enable attackers with already elevated (administrator) privileges to obscure activity when monitoring exc...

Zone Labs ZoneAlarm 3.03.1 - Syn Flood Denial of Service

Zone Labs ZoneAlarm 3.03.1 - Syn Flood Denial of Service // source: https://www.securityfocus.com/bid/5975/info ZoneAlarm is a firewall software package designed for Microsoft Windows operating systems. It is distributed and maintained by Zone Labs. ZoneAlarm does not properly handle some types o...