1018 matches found
CA Multiple Product AV Engine CAB Header Parsing Stack Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code onvulnerable installations of various Computer Associates products. The specific flaw exists within the processing of an improperly defined "coffFiles" field in .CAB archives. Large values result in an unbounded data copy...
Unfixed XSS vulnerability at www.hasansen.av.tr
Security researcher By Encore, has submitted on 03/09/2007 a cross-site-scripting XSS vulnerability affecting www.hasansen.av.tr, which at the time of submission ranked 693734 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...
Microsoft Word object pointer memory corruption vulnerability
Overview A memory corruption vulnerability in Microsoft Word could allow a remote attacker to execute arbitrary code with the privileges of the user running Word. Description Microsoft Word contains a memory corruption vulnerability. According to Microsoft Security Bulletin MS06-027:When a user...
w32.spybot.fcd worm infection
The remote system is infected with a variant of the worm w32.spybot.fcd. SPDX-FileCopyrightText: 2004 jorge rodriguez Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness
Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...
CVE-2005-1897
CVE-2005-1897 concerns FlexCast Audio Video Streaming Server prior to 2.0. A Nessus plugin (2946.PRM) and related advisories describe a remote overflow issue affecting the FlexCast server, implying a vulnerability in versions earlier than 2.0. The NVD entry assigns a HIGH severity (CVSS v2: AV:N/...
CVE-2004-0873
Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program...
CVE-2004-0873
Apple iChat AV 2.1, AV 2.0, and 1.0.1 are affected by a remote code-execution vulnerability where a crafted "link" referencing a program can cause arbitrary commands to run on the target. This is a network-type issue with low attack complexity, no authentication, and partial confidentiality/integ...
Ebola AV Daemon < 0.1.5 Authentication Sequence Remote Overflow
According to its version number, there is a remote buffer overflow vulnerability in the authentication mechanism of the Ebola AntiVirus daemon. A remote attacker could exploit this to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. Ref : From: "c0wboy@0x333...
CVE-1999-1322
The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext...
CVE-1999-1322
The CVE concerns the installation of 1ArcServe Backup and Inoculan AV client modules for Exchange, which can create a log file exchverify.log that stores usernames and passwords in plaintext. Affected components: the Exchange-related client modules for 1ArcServe Backup and Inoculan AV. Underlying...
InoculateIT AV Option for MS Exchange Server
The scenario is two EX Srvrs, two different organizations and different sites, both have CA's "InoculateIT AV Option for MS Exchange Server". MS IMC the EX SMTP gateway will be used to send messages between the EX Srvrs. Where the Agent fails: 1. If a message is sent from one EX to another using...
altavista.txt
hola, more bugs in the AV-Search thing .. using uri-encoded strings it is possible to view "any" file on the system .. examples: unixxxsss ... http://server:port/cgi-bin/query?mss=%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f/etc/passwd or on an micro$oft IIS...
CVE-1999-1322
The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext...
AV Detectoid update after AMD Fix
To detect 1C Security update applicable machines...
AV Detectoid update With Trend and Tencent
To detect security update applicable machines...