NCTAudioInformation2 ActiveX控件栈溢出漏洞

CVECAN ID: CVE-2008-0959 NCTAudioInformation是Online Media Technologies（之前名为NCT公司）推出的用于更改声音文件中信息的ActiveX 控件，支持WAV、MP3、WMA等格式的文件。 NCTAudioInformation2控件（NCTAudioInformation2.dll）没有正确地处理GetAudioInformation和SetAudioInformation属性的参数，如果用户受骗访问了恶意网页并向这些参数传送了超长参数的话，就可以触发栈溢出，导致执行任意指令。 Online Media...

Cisco Security Advisory: Default Passwords in the Application Velocity System

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Default Passwords in the Application Velocity System Advisory ID: cisco-sa-20080123-avs http://www.cisco.com/warp/public/707/cisco-sa-20080123-avs.shtml Revision 1.0 For Public Release 2008 January 23 1600 UTC GMT...

Default credentials

Cisco Application Velocity System AVS before 5.1.0 is installed with default passwords for some system accounts, which allows remote attackers to gain privileges...

CVE-2008-0029

Cisco Application Velocity System AVS before 5.1.0 is installed with default passwords for some system accounts, which allows remote attackers to gain privileges...

CVE-2008-0029

The CVE-2008-0029 issue affects Cisco Application Velocity System (AVS) before 5.1.0, where default passwords are set for certain system accounts, enabling remote privilege gain. Affected products/versions include AVS 3110, 3120, 3180, and 3180A Management Stations running software prior to 5.1.0...

CVE-2008-0029

Cisco Application Velocity System AVS before 5.1.0 is installed with default passwords for some system accounts, which allows remote attackers to gain privileges...

AVS Media AVSMJPEGFILE.DLL ActiveX控件远程缓冲区溢出拒绝服务漏洞

AVS Media是一款媒体播放程序。 AVS Media包含的AVSMJPEGFILE.DLL控件存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题是AVSMJPEGFILE.DLL控件在处理CreateStill方法时缺少充分边界条件检查，构建恶意WEB页，诱使用户访问，可导致触发缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 AVS Media AVSMJPEGFILE.DLL 1.1.1 .102 目前没有解决方案提供： http://www.avsmedia.com/...

Fedora Core 5 : tcpdump-3.9.4-4.fc5 (2007-348)

Thu Mar 15 2007 Miroslav Lichvar - 14:3.9.4-4.fc5 - fix buffer overflow in 802.11 printer 232349, CVE-2007-1218 - require /usr/sbin/sendmail 232363 - Wed Nov 8 2006 Miroslav Lichvar - 14:3.9.4-3.fc5 - fix processing of Prism and AVS headers 207435 - fix arp2ethers script - update ethercodes.dat...

Download & Exec polymorphed shellcode Engine

No description provided by source. Download & Exec polymorphed shellcode engine POC This downloading and execution code is not detectable by popular AVs. Greetz 2: DarkEagle and Unl0ck researcherz; Str0ke and milw0rm; HD Moor and metasploit project; Maxus, Fuchunic, YrSam, Garry; Offtopic and PTT...

CVE-2006-2322

The transparent proxy feature of the Cisco Application Velocity System AVS 3110 5.0 and 4.0 and earlier, and 3120 5.0.0 and earlier, has a default configuration that allows remote attackers to proxy arbitrary TCP connections, aka Bug ID CSCsd32143...

Default configuration

The transparent proxy feature of the Cisco Application Velocity System AVS 3110 5.0 and 4.0 and earlier, and 3120 5.0.0 and earlier, has a default configuration that allows remote attackers to proxy arbitrary TCP connections, aka Bug ID CSCsd32143...

CVE-2006-2322

The transparent proxy feature of the Cisco Application Velocity System AVS 3110 5.0 and 4.0 and earlier, and 3120 5.0.0 and earlier, has a default configuration that allows remote attackers to proxy arbitrary TCP connections, aka Bug ID CSCsd32143...

CVE-2006-2322

The CVE-2006-2322 entry describes a vulnerability in Cisco Application Velocity System (AVS) where the default configuration of AVS 3110 (versions 5.0 and 4.0 and earlier) and AVS 3120 (5.0.0 and earlier) allows remote attackers to proxy arbitrary TCP connections via the transparent proxy feature...

Cisco Security Advisory: AVS TCP Relay Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: AVS TCP Relay Vulnerability Advisory ID: cisco-sa-20060510-avs http://www.cisco.com/warp/public/707/cisco-sa-20060510-avs.shtml Revision 1.0 For Public Release 2006 May 10 1600 UTC GMT...

AVS TCP Relay Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...