Blue Coat K9 Web Protection Multiple Buffer Overflow Vulnerabilities

Blue Coat K9 Web Protection is prone to a stack based buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Blue Coat K9 Web Protection Referer头栈溢出漏洞

BUGTRAQ ID: 30463 CVECAN ID: CVE-2007-2952 K9 Web Protection是家用电脑上所使用的内容过滤解决方案，允许用户控制可访问的Internet内容。 在访问基于Web的管理接口时K9 Web Protection的过滤服务（k9filter.exe）没有正确地处理Referer头。如果用户访问了恶意站点并向该接口返回了超长的Referer头，就可以触发栈溢出，导致执行任意指令。 Blue Coat Systems K9 Web Protection 3.2.44 Blue Coat Systems -----------------...

Blue Coat K9 Web Protection HTTP响应栈溢出漏洞

BUGTRAQ ID: 30464 CVECAN ID: CVE-2007-2952 K9 Web Protection是家用电脑上所使用的内容过滤解决方案，允许用户控制可访问的Internet内容。 K9 Web Protection的过滤服务（k9filter.exe）没有正确地处理从中央服务器（sp.cwfservice.net）所返回的HTTP版本信息，如果远程攻击者劫持了发送给中央服务器的请求并重新定向到恶意服务的话，则包含有超长HTTP版本信息的响应就可以触发栈溢出，导致在用户系统上执行任意指令。 Blue Coat Systems K9 Web Protection...

Stack overflow

Multiple stack-based buffer overflows in the filter service aka k9filter.exe in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow 1 remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and 2 man-in-the-middle attacke...

DSquare Exploit Pack: D2SEC_K9WEB

Name| d2seck9web ---|--- CVE| CVE-2007-2952 Exploit Pack| D2ExploitPack Description| Blue Coat K9 Web Protection 'Referer' Header Stack Overflow Vulnerability Notes|...

CVE-2007-2952

Multiple stack-based buffer overflows in the filter service aka k9filter.exe in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow 1 remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and 2 man-in-the-middle attacke...

CVE-2007-2952

Multiple stack-based buffer overflows in the filter service aka k9filter.exe in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow 1 remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and 2 man-in-the-middle attacke...

CVE-2007-2952

Blue Coat K9 Web Protection 3.2.44 (Filter 3.2.32) has concrete stack-based buffer overflow vulnerabilities in k9filter.exe. An attacker can trigger remote code execution: (1) via a crafted long Referer header to the Web Protection Administration interface, and (2) via an HTTP response with an ov...

Blue Coat K9 Web Protection buffer overflow

Buffer overflow on Referer header parsing. Buffer overflow on control server response parsing...

Secunia Research: Blue Coat K9 Web Protection Response Handling Buffer Overflows

====================================================================== Secunia Research 31/07/2008 - Blue Coat K9 Web Protection Response Handling Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Blue Coat K9 Web Protection "Referer" Header Buffer Overflow

====================================================================== Secunia Research 31/07/2008 - Blue Coat K9 Web Protection "Referer" Header Buffer Overflow - ====================================================================== Table of Contents Affected...

Deterministic Network Extender 'dne2000.sys' Local Privilege Escalation

A kernel driver from Deterministic Network Extender DNE is installed on the remote host. DNE is typically packaged with third-party applications and is reportedly included with : - SafeNet HighAssurance Remote and SoftRemote - Cisco VPN Client - Blue Coat Systems WinProxy The installed version of...

Multiple Vendor DNS Protocol Insufficient Transaction ID Randomization DNS Spoofing Vulnerability

Description Multiple vendors' implementations of the DNS protocol are prone to a DNS-spoofing vulnerability because the software fails to securely implement random values when performing DNS queries. Successfully exploiting this issue allows remote attackers to spoof DNS replies, allowing them to...

[BMSA 2008-07] Format string vulnerability in 5th stree

BLUE MOON SECURITY ADVISORY 2008-07 =================================== :Title: Format string vulnerability in 5th street Hot Step, High Street 5 :Severity: Critical :Reporter: Blue Moon Consulting, superkhung :Products: 5th street and derived clients :Fixed in: -- Description ----------- 5th...

Deterministic Network Extender 'dne2000.sys'本地特权提升漏洞

BUGTRAQ ID: 29772 CNCAN ID：CNCAN-2008061907 Deterministic Network Extender不正确过滤用户提供的数据，可导致本地特权提升。 攻击者可以利用漏洞以SYSTEM级别权限执行任意代码。 Deterministic Network Extender 'dne2000.sys' 2.21.7.233 - 3.21.7.17464版本受此漏洞影响，'dne2000.sys'驱动与如下产品绑定使用： - SafeNet HighAssurance Remote and SoftRemote - Cisco VPN Client -...

Three keystrokes you can make the Windows blue-screen-vulnerability warning-the black bar safety net

Source: West information An interesting try: press and hold the right Ctrl at the same time, then press Scroll Lock twice, Windows will blue screen appears, showing: STOP:0x000000E2 0x00000000,0x00000000,0x00000000,0x00000000。 This is not a Bug, it's just a Windows A functionality, Yes, is to get...

Unfixed XSS vulnerability at www.randyblue.com

Security researcher TreX, has submitted on 19/12/2007 a cross-site-scripting XSS vulnerability affecting www.randyblue.com, which at the time of submission ranked 7879 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currently...

Unfixed XSS vulnerability at www.randyblue.com

Security researcher TreX, has submitted on 19/12/2007 a cross-site-scripting XSS vulnerability affecting www.randyblue.com, which at the time of submission ranked 7879 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currently...

Cross site scripting

Cross-site scripting XSS vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists...

CVE-2007-5796

Cross-site scripting XSS vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists...