CREDANT Mobile Guardian Shield fails to remove credentials from memory

Overview CREDANT Mobile Guardian Shield fails to properly remove credentials from memory, which may allow an attacker to obtain access to the Windows domain and encrypted drive contents. Description CREDANT Mobile Guardian CMG Shield is a component of Mobile Guardian Enterprise Edition. CMG Shiel...

SecuStick USB flash drive protection bypass

File access does not dependant on authentication, making it's possible to bypass authentication for file access...

Authentication flaw

USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function...

CVE-2007-2023

USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function...

CVE-2007-2023

USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function...

CVE-2007-2023

CVE-2007-2023 documents an authentication bypass in the Secustick USB flash drive. USB20.dll decouples authorization and file access and allows local users to bypass authentication by altering the return value of VerifyPassWord, enabling unauthorized file access. Exploit/workaround details are no...

CVE-2007-2023

USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function...

CVE-2007-2023: Undefined Security Weakness

USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function...

Memory corruption

fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary...

CVE-2007-0734

fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:078)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : When SELinux hooks are enabled, the kernel could allow a local user to cause a DoS crash via a malformed file stream that triggers a NULL pointer derefernece CVE-2006-6056. Multiple buffer overflows in the 1 read and 2...

TrueCrypt Dismount Set-EUID本地拒绝服务漏洞

TrueCrypt是一款免费开源虚拟加密盘加密软件。 TrueCrypt存在设计错误，本地攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 本地攻击者可以卸挂其他用户挂接的驱动盘，导致拒绝服务攻击。目前没有详细漏洞细节提供。 TrueCrypt TrueCrypt 4.2 TrueCrypt TrueCrypt 4.1 TrueCrypt TrueCrypt 4.0 TrueCrypt TrueCrypt 3.0 升级到最新程序： http://www.truecrypt.org/docs/?s=version-history...

CVE-2007-1580

FTPDMIN 0.96 allows remote attackers to cause a denial of service daemon crash via a LIST command for a Windows drive letter, as demonstrated using "//A:". NOTE: this has been reported as a buffer overflow by some sources, but there is not a long argument...

Buffer overflow

FTPDMIN 0.96 allows remote attackers to cause a denial of service daemon crash via a LIST command for a Windows drive letter, as demonstrated using "//A:". NOTE: this has been reported as a buffer overflow by some sources, but there is not a long argument...

CVE-2007-1580

FTPDMIN 0.96 is affected. A remote attacker can trigger a denial of service (daemon crash) by issuing a LIST command targeting a Windows drive letter (e.g., //A:). The issue is documented as a potential buffer overflow in some sources, but the available records state only a DoS via LIST for a dri...

CVE-2007-1580

FTPDMIN 0.96 allows remote attackers to cause a denial of service daemon crash via a LIST command for a Windows drive letter, as demonstrated using "//A:". NOTE: this has been reported as a buffer overflow by some sources, but there is not a long argument...

CVE-2007-1580: Improper Restriction of Operations within the Bounds of a Memory Buffer

FTPDMIN 0.96 allows remote attackers to cause a denial of service daemon crash via a LIST command for a Windows drive letter, as demonstrated using "//A:". NOTE: this has been reported as a buffer overflow by some sources, but there is not a long argument...

Logical Drive Insecure Filesystem Enumeration (WMI)

Binary data wmintfsdrives.nbin...

CVE-2006-7142

The centralized management feature for Utimaco Safeguard stores hard-coded cryptographic keys in executable programs for encrypted configuration files, which allows attackers to recover the keys from the configuration files and decrypt the disk drive...

CVE-2006-7142

The CVE-2006-7142 entry concerns Utimaco Safeguard’s centralized management feature, which stores hard-coded cryptographic keys inside executable binaries for encrypted configuration files. The underlying issue is hard-coded keys that can be extracted from the configuration files, enabling attack...