CVE-2003-1491: Improper Control of Generation of Code

Kerio Personal Firewall KPF 2.1.4 has a default rule to accept incoming packets from DNS UDP port 53, which allows remote attackers to bypass the firewall filters via packets with a source port of 53...

Microsoft Windows Vista Teredo IPv6 interface firewall bypass vulnerability

Overview A vulnerability in the Microsoft Windows Vista firewall may allow an attacker to send unfiltered IPv6 traffic to a vulnerable system. Description Internet Protocol version 6 IPv6 is an IP standard that is designed to replace the Internet Protocol version 4 IPv4. The Microsoft Teredo...

CVE-2007-3038: Undefined Security Weakness

The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote attackers to bypass firewall blocking rules and obtain sensitive information via crafted IPv6 traffic, aka "Windows Vista Firewall Blocking Rule Information...

Microsoft Windows Vista Teredo Interface Firewall Bypass Vulnerability

Description Windows Firewall for Windows Vista is prone to a vulnerability that may permit a bypass of existing firewall rules. An attacker may trigger this vulnerability by sending malicious network data through the Teredo network transport system to obtain sensitive information; other attacks a...

CVE-2007-3537

CVE-2007-3537 affects IBM OS/400 (i5/OS) on iSeries, specifically V4R2M0 through V5R3M0. The vulnerability arises because the system sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules.

CVE-2007-3537: Undefined Security Weakness

IBM OS/400 aka i5/OS V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules...

tomcat multiple content-length header poisioning

Jakarta Tomcat 5.0.19 Coyote/1.1 and Tomcat 4.1.24 Coyote/1.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat t...

CVE-2007-2682: Undefined Security Weakness

The installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as used in Adobe Creative Suite 3 CS3, does not re-enable the personal firewall after completing the product installation, which allows remote attackers to bypass intended firewall rules...

Design/Logic Flaw

Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified...

CVE-2007-2730

Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified...

CVE-2007-2730: Undefined Security Weakness

Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified...

CVE-2007-2729: Undefined Security Weakness

Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these...

Multiple Personal Firewall Products - Local Protection Mechanism Bypass

source: https://www.securityfocus.com/bid/23987/info Multiple personal firewall products are prone to a vulnerability that lets attackers bypass protection mechanisms. This issue occurs because the applications fail to properly implement protection mechanisms based on valid process identifiers...

tomcat multiple content-length header poisioning

Jakarta Tomcat 5.0.19 Coyote/1.1 and Tomcat 4.1.24 Coyote/1.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat t...

How to make tcp packets and udp packets penetrating the network firewall-vulnerability warning-the black bar safety net

Through this article httptunnel technology At the same time escaped the firewall shield, as well as the system's tracking test, we can see the network Safety relying only on some or a few of the means are unreliable, while the security system of blind dependence tends to create huge security risk...

Webshell is how to bypass the Firewall with elevated permissions? - Vulnerability warning-the black bar safety net

This article speaks of the focus is on webshell permissions of the upgrade and bypass the firewall, master do not laugh. Cut the crap, let's get into the chase. First, determine what goal: http://www.sun. com, a common virtual host. Use Upfile vulnerability I believe we get the webshell is not...

The Alexa toolbar is converted into a Trojan horse-vulnerability warning-the black bar safety net

Alexa is a publication of the global website ranking information website, whose URL is http://www. alexa. com. Alexa by on the client to install the Alexa toolbar to collect sampling sites worldwide access to data, to these data as the basis for a global site rank, similar to TV ratings statistic...

SQLYog MySQL HTTP Tunnel Detection

Binary data 3804.prm...

WSN Forum <= 1.3.4 (prestart.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =============================================================== WSN Forum = 1.3.4 prestart.php Remote Code Execution Exploit =============================================================== !/usr/bin/php -q -d shortopentag=on ? print '...

JavaScript code can cause the browser attack-vulnerability warning-the black bar safety net

Security researchers have found a Use JavaScript to scan the family and the enterprise network, and attacks on the network server, and the router and printer and other equipment of the method. Researchers say the malicious JavaScript code can be embedded in a Web page, use the browser to browse t...