4095 matches found
CVE-2005-3375
Multiple interpretation error in Ikarus demo version allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a...
CVE-2005-3372
Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could...
CVE-2005-3379
CVE-2005-3379 describes a multiple interpretation error in Trend Micro products: PC-Cillin 2005 (version 12.0.1244 with engine 7.510.1002) and OfficeScan 7.0 (engine 7.510.1002). The bug arises from how the scanner handles files with an "MZ" magic byte sequence (normally associated with EXE). Suc...
CVE-2005-3372
The CVE-2005-3372 entry concerns eTrust CA 7.0.1.4 (11.9.1 engine). The vulnerability arises from a magic byte bug: files with an unsuspecting extension (e.g., BAT, HTML, EML) containing an MZ EXE-like signature are treated as safe types but can still execute as dangerous content. This bypasses v...
CVE-2005-3371
The CVE-2005-3371 entry describes a vulnerability in AVG 7.0.323 labeled the “magic byte bug.” A multiple interpretation error occurs when scanning files like BAT, HTML, and EML that start with an MZ (EXE) signature, causing such files to be treated as safe type yet still executable by end-system...
CVE-2005-3377
Multiple interpretation error in 1 McAfee Internet Security Suite 7.1.5 version 9.1.08 with the 4.4.00 engine and 2 McAfee Corporate 8.0.0 patch 10 with the 4400 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is...
CVE-2005-3381
The CVE-2005-3381 entry concerns Ukrainian National Antivirus (UNA) 1.83.2.16 on kernel 265, where a multiple interpretation error in the file-type handling allows bypass of virus scanning. An attacker can supply a file (BAT, HTML, or EML) containing an MZ executable-like magic byte sequence that...
CVE-2005-3374
Multiple interpretation error in F-Prot 3.16c allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangero...
CVE-2005-3373
The CVE-2005-3373 entry describes a vulnerability in Dr.Web 4.32b where an interpretation error in the virus scanner allows a crafted file (e.g., BAT, HTML, or EML) containing an MZ magic byte sequence (normally for EXE) to be treated as a safe type, yet still be executable as a dangerous file by...
CVE-2005-3370
Multiple interpretation error in ArcaVir 2005 package 2005-06-21 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be...
CVE-2005-3376
Multiple interpretation error in Kaspersky 5.0.372 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a...
SUSE-SA:2005:046: apache,apache2
The remote host is missing the patch for the advisory SUSE-SA:2005:046 apache,apache2. A security flaw was found in the Apache and Apache2 web servers which allows remote attacker to 'smuggle' requests past filters by providing handcrafted header entries. Fixed Apache 2 server packages were...
Opty2
Opty2 multi-byte NOP generator This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/nop/opty2' Opty2 ----- This class implements single-byte NOP generation for X86. It takes from ADMmutate and from spoonfu...
security flaw
Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service daemon hang and CPU consumption via a TCP packet of length 1, which triggers an infinite loop...
CVE-2005-2895
setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain sensitive information via a %00 a null byte in the u parameter, which reveals the path in an error message...
Debian DSA-805-1 : apache2 - several vulnerabilities
Several problems have been discovered in Apache2, the next generation, scalable, extendable web server. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1268 Marc Stern discovered an off-by-one error in the modssl Certificate Revocation List CRL...
[SECURITY] [DSA 805-1] New Apache2 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 805-1 [email protected] http://www.debian.org/security/ Martin Schulze September 8th, 2005 http://www.debian.org/security/faq -...
CVE-2005-2813
Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files via ".." sequences and "%00" trailing null byte characters in the id parameter to the read mod in index.php...
