WM Downloader 3.1.2.2(.asx) Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: WM Downloader 3.1.2.2.asx Buffer Overflow Exploit Author: Caddy-Dz Facebook Page: http://www.facebook.com/ALG.Cyber.Army E-mail: islambabiaathotmail.com Vendor: http://mini-stream.net/downloads/WMDownloader.exe Category:: Loca...

kernel: crypto: ghash: null pointer deref if no key is set

crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service NULL pointer dereference and OOPS or possibly have unspecified other impact by triggering a failed or missing ghashsetkey function call, followed by a 1 ghashupdate function call or 2 ghashfinal...

CVE-2010-0039

The Application-Level Gateway ALG on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by...

CVE-2010-0039

The CVE-2010-0039 issue affects Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station firmware prior to 7.5.2. The root cause is that the Application‑Level Gateway (ALG) modifies PORT commands in incoming FTP traffic, enabling a remote attacker to use the device’s IP ...

PT-2010-1864

Name of the Vulnerable Software and Affected Versions Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station versions prior to 7.5.2 Description The issue allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write acce...

CVE-2007-3803

The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists...

Authentication flaw

The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow remote attackers to bypass scanning via small files...

Authentication flaw

The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists...

CVE-2007-3803

CVE-2007-3803 affects Clavister CorePlus SMTP ALG, where improper SMTP command parsing in certain circumstances allows remote attackers to bypass address blacklists. Affected versions are CorePlus before 8.80.04 and 8.81.00. The root cause is parsing issues within the SMTP ALG that can be exploit...

CVE-2007-3804

The CVE-2007-3804 vulnerability affects Clavister CorePlus before versions 8.81.00 and 8.80.03, where the HTTP-ALG Antivirus engine may bypass scanning for small files. This remote issue (attack vector: network; no authentication required) can impact data integrity with a partial impact, accordin...

CVE-2007-3803: Undefined Security Weakness

The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists...

CVE-2007-3804: Undefined Security Weakness

The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow remote attackers to bypass scanning via small files...