1504 matches found
KLA10425 ACE vulnerability in yEnc32
A buffer overflow was found in yEnc32. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed NTX file. Original advisories - Related products yEnc32 CVE list CVE-2007-2646 high Solution Update to latest...
CVE-2007-0968
Unspecified vulnerability in Cisco Firewall Services Module FWSM before 2.34.7 and 3.x before 3.13.1 causes the access control entries ACE in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections...
CVE-2007-0968
Unspecified vulnerability in Cisco Firewall Services Module FWSM before 2.34.7 and 3.x before 3.13.1 causes the access control entries ACE in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections...
CVE-2006-6960
The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to bypass the malware detection via files with 1 RAR, 2 GZ, 3 TAR, 4 CAB, or 5 ACE compression...
CVE-2006-6960
The CVE concerns WebRoot Spy Sweeper (Compression Sweep) prior to version 4.5.9 failing to handle non-ZIP archives. Specifically, the feature does not process archives in RAR, GZ, TAR, CAB, or ACE formats, which can allow remote attackers to bypass malware detection. Affected component: Compressi...
KLA10252 ACE vulnerability in multiple software
A buffer overflow was found in multiple products, exploiting NCTAudioFile2.AudioFile. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed call. Original advisories - Related products...
mpsw-rfi.txt
magic photo storage website -- Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; commonfunction.php bug...
KLA10143 ACE vulnerability in EF Commander
A buffer overflow was found in EF Commander. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ISO or user assistance. Original advisories - Related products EF-Commander CVE list CVE-2007-0180 high...
F-PROT Antivirus ACE/CHM远程拒绝服务及溢出漏洞
F-PROT Antivirus是一款反病毒应用程序。 F-PROT Antivirus解析ACE/CHM档存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，绕过检测。 当解析特殊构建的ACE档时会造成无限循环而产生拒绝服务攻击。 当解析特殊构建的CHM档时可造成堆溢出。 F-Prot Antivirus 4.6.6 F-Prot Antivirus 3.16f 升级到最新程序F-Prot 4.6.7: http://www.f-prot.com/news/gennews/061201releaseunix467.html fprot1.py - trivial proof o...
trivial proof of concept code for F-Prot 4.6.6 .ACE DoS
No description provided by source. fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and...
fprot-dos.txt
Name: F-Prot Antivirus for Unix: heap overflow and Denial of Service Vendor: http://www.f-prot.com Release date: 4 Dec, 2006 URL: http://gleg.net/fprot.txt Author: Evgeny Legerov I. DESCRIPTION Two vulnerabilities in F-Prot Antivirus 4.6.6 for Unix platforms could allow a remote attacker to cause...
F-Prot antivirus buffer overflow
Buffer overflow on parsing CHM and ACE files...
F-PROT Antivirus畸形ACE文件处理拒绝服务漏洞
F-Prot Antivirus是一款UNIX平台上的杀毒软件。 F-Prot Antivirus在处理特制的ACE压缩文件时会陷入死循环，远程攻击者可能利用此漏洞使F-Prot失去工作能力。 F-Prot Antivirus 4.6.6 F-Prot Antivirus 3.16f 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.f-prot.com/news/gennews/061201releaseunix467.html fprot1.py - trivial proof of concept code for F-Prot 4.6.6...
F-Prot Antivirus 4.6.6 (ACE) Denial of Service Exploit
No description provided by source. fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and...
F-Prot Antivirus 4.6.6 (ACE) Denial of Service Exploit
Exploit for linux platform in category dos / poc ====================================================== F-Prot Antivirus 4.6.6 ACE Denial of Service Exploit ====================================================== fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006...
F-Prot AntiVirus 4.6.6 - ACE Denial of Service
F-Prot AntiVirus 4.6.6 - ACE Denial of Service fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright...
F-Prot AntiVirus 4.6.6 - 'ACE' Denial of Service
fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in al...
CVE-2006-6158
Multiple cross-site scripting XSS vulnerabilities in a PMOS Help Desk 2.4, formerly b InverseFlow Help Desk 2.31 and also sold as c Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the 1 id or email parameter to ticketview.php, or 2 the email parameter to...
CVE-2006-6158
Multiple cross-site scripting XSS vulnerabilities in a PMOS Help Desk 2.4, formerly b InverseFlow Help Desk 2.31 and also sold as c Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the 1 id or email parameter to ticketview.php, or 2 the email parameter to...
CVE-2006-6158
CVE-2006-6158 affects PMOS Help Desk 2.4 (aka InverseFlow Help Desk 2.31, sold as Ace Helpdesk 2.31). The vulnerability is multiple cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via: (1) the id or email parameter to ticketview.php, or (2) the email...