iDefense Security Advisory 05.08.07: Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability

Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability iDefense Security Advisory 05.08.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 08, 2007 I. BACKGROUND Microsoft Exchange Server 2000 is a messaging product developed by Microsoft, part of the Windows Server...

iDefense Security Advisory 05.08.07: Microsoft Word RTF File Parsing Heap Corruption Vulnerability

Microsoft Word RTF File Parsing Heap Corruption Vulnerability iDefense Security Advisory 05.08.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 08, 2007 I. BACKGROUND Microsoft Word is a word processing application from Microsoft Office. Rich Text Format RTF is a document file format...

iDefense Security Advisory 05.07.07: Sun Microsystems Solaris ACE_SETACL Integer Signedness DoS Vulnerability

Sun Microsystems Solaris ACESETACL Integer Signedness DoS Vulnerability iDefense Security Advisory 05.07.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 07, 2007 I. BACKGROUND Solaris is a UNIX operating system developed by Sun Microsystems. More information can be found via the...

LiveData Protocol Server fails to properly handle requests for WSDL files

Overview The LiveData Protocol Server fails to properly handle requests. This vulnerability may allow a remote attacker to execute arbitrary code. Description The LiveData Protocol Server is real-time data acquisition and processing software used to record and transmit data among process control...

iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Service Manager Buffer Overflow Vulnerability

Symantec Norton Ghost 10 Service Manager Buffer Overflow Vulnerability iDefense Security Advisory 04.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 26, 2007 I. BACKGROUND Symantec Norton Ghost is a backup and recovery application designed to allow users to completely restore the...

iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Recovery Points Insecure Password Storage Vulnerability

Symantec Norton Ghost 10 Recovery Points Insecure Password Storage Vulnerability iDefense Security Advisory 04.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 26, 2007 I. BACKGROUND Symantec Norton Ghost is a backup and recovery application designed to allow users to completely...

iDefense Security Advisory 04.26.07: Novell eDirectory NCP Fragment Denial of Service Vulnerability

Novell eDirectory NCP Fragment Denial of Service Vulnerability iDefense Security Advisory 04.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 26, 2007 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. In addition to LDAP,...

GNU Mailutils imap4d 0.6 Remote Format String Exploit (exec-shield)

No description provided by source. / Fedora Core 6 exec-shield based GNU imap4d mailutils-0.6 search remote format string exploit by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL: http://x82.inetcop.org/h0me/papers/FCexploit/FCexploit.txt Reference:...

GNU Mailutils imap4d 0.6 Remote Format String Exploit (exec-shield)

Exploit for linux platform in category remote exploits =================================================================== GNU Mailutils imap4d 0.6 Remote Format String Exploit exec-shield =================================================================== / Fedora Core 6 exec-shield based GNU...

GNU Mailutils imap4d 0.6 - exec-shield Remote Format String

GNU Mailutils imap4d 0.6 - exec-shield Remote Format String / Fedora Core 6 exec-shield based GNU imap4d mailutils-0.6 search remote format string exploit by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL: http://x82.inetcop.org/h0me/papers/FCexploit/FCexploit.txt...

RHEL 3 / 4 / 5 : freetype (RHSA-2007:0150)

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw was...

CentOS 3 / 4 / 5 : freetype (CESA-2007:0150)

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw was...

[Full-disclosure] iDefense Security Advisory 04.17.07: McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow

McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow iDefense Security Advisory 04.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 17, 2007 I. BACKGROUND McAfee VirusScan is an AntiVirus application that offers protection against the latest computer virus...

Moderate: Red Hat Security Advisory: freetype security update

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw was...

[Full-disclosure] iDefense Security Advisory 04.16.07: ClamAV CAB File Unstore Buffer Overflow Vulnerability

Clam AntiVirus ClamAV CAB File Unstore Buffer Overflow Vulnerability iDefense Security Advisory 04.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 16, 2007 I. BACKGROUND Clam AntiVirus is a multi-platform GPL anti-virus toolkit. ClamAV is often integrated into e-mail gateways and...

iDefense Security Advisory 04.04.07: Kaspersky AntiVirus SysInfo ActiveX Control Information Disclosure Vulnerability

Kaspersky AntiVirus SysInfo ActiveX Control Information Disclosure Vulnerability iDefense Security Advisory 04.04.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 04, 2007 I. BACKGROUND Kaspersky AntiVirus offers comprehensive protection from computer viruses and malware threats. Mor...

iDefense Security Advisory 04.04.07: ESRI ArcSDE Buffer Overflow Vulnerability

ESRI ArcSDE Buffer Overflow Vulnerability iDefense Security Advisory 04.04.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 04, 2007 I. BACKGROUND Environmental Systems Research Institute ESRI ArcSDE is a multi-user database server that has been bundled with ArcGIS to provide access ...

iDefense Security Advisory 04.04.07: Kaspersky Internet Security Suite klif.sys Heap Overflow Vulnerability

Kaspersky Internet Security Suite klif.sys Heap Overflow Vulnerability iDefense Security Advisory 04.03.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2007 I. BACKGROUND Kaspersky Internet Security Suite is a combination of Kaspersky anti-virus, anti-spam, and personal firewall...

RHEL 4 : xorg-x11 (RHSA-2007:0126)

Updated X.org packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. X.org is an open source implementation of the X Window System. It provides the basic...

XFree86 security update

CentOS Errata and Security Advisory CESA-2007:0125-01 Updated XFree86 packages that fix a number of security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an...