Microworld eScan Server 9.0.742 - Directory Traversal

Microworld eScan Server 9.0.742 - Directory Traversal source: https://www.securityfocus.com/bid/28127/info MicroWorld eScan Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access...

Microworld eScan Server 9.0.742 - Directory Traversal

source: https://www.securityfocus.com/bid/28127/info MicroWorld eScan Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary files outside of the FTP server root...

Information disclosure

MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions Everyone:Full Control for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe...

CVE-2007-4649

MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions Everyone:Full Control for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe...

CVE-2007-4649

CVE-2007-4649 impacts MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1. The underlying issue is weak permissions (Everyone: Full Control) on installation directory trees, enabling local users to replace application files (e.g., traysser.exe) and pote...

[Full-disclosure] Multiple eScan products insecure file permissions

========================================================================= Team Intell Security Advisory TISA2007-13-Public ------------------------------------------------------------------------- Multiple eScan products insecure file permissions...

Microworld eScan (Multiple Products) - Local Privilege Escalation

Microworld eScan Multiple Products - Local Privilege Escalation source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to...

Microworld eScan (Multiple Products) - Local Privilege Escalation

source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful...

MicroWorld eScan multiple content filtering products buffer overflow

Buffer overflow in TCP/2222 agent management interface...

Secunia Research: eScan Products Agent Service Command Decryption Buffer Overflow

====================================================================== Secunia Research 23/05/2007 - eScan Products Agent Service Command Decryption Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2007-2687

Stack-based buffer overflow in the MicroWorld Agent service MWAGENT.EXE in MicroWorld Technologies eScan before 9.0.718.1 allows remote attackers to execute arbitrary code via a long command...

CVE-2007-2687

CVE-2007-2687: A stack-based buffer overflow in MicroWorld Technologies eScan’s MWAGENT.EXE (Agent Service) can be triggered by an overly long command, enabling remote code execution. Secunia details a boundary/overflow condition in the decryption path, with exploitation possible via the service ...

eScan Agent Detection

Binary data escandetect.nbin...

eScan Agent Detection

Binary data 4036.prm...

eScan < 9.0.718.1 MicroWorld Agent service (MWAGENT.EXE) Command Decryption Overflow

According to its version number, the installation of eScan on the remote host includes a service, the MicroWorld Agent service, for remote administration that fails to properly handle overly-long commands. A remote attacker can leverage this issue to crash the service or even execute arbitrary...

CVE-2007-0655

The MicroWorld Agent service MWAGENT.EXE in MicroWorld Technologies eScan 8.0.671.1, and possibly other versions, allows remote or local attackers to gain privileges and execute arbitrary commands by connecting directly to TCP port 2222...

CVE-2007-0655

The CVE concerns the MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan 8.0.671.1 (and possibly other versions). Affected component: MWAGENT.EXE running as a service. Vulnerability: remote or local attackers can gain privileges and execute arbitrary commands by connecting dir...