iDefense Security Advisory 10.31.06: Sophos Anti-Virus Petite File Denial of Service Vulnerability

Sophos Anti-Virus Petite File Denial of Service Vulnerability iDefense Security Advisory 10.31.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 31, 2006 I. BACKGROUND Sophos Anti-Virus is comprehensive scanning solution used to protect users from viruses, malicious code, ad-ware,...

iDefense Security Advisory 10.27.06: Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability

Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability iDefense Security Advisory 10.27.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 27, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. Additionally, eDirector...

[SA22591] Sophos Anti-Virus RAR and CHM Denial of Service Vulnerabilities

TITLE: Sophos Anti-Virus RAR and CHM Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA22591 VERIFY ADVISORY: http://secunia.com/advisories/22591/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Sophos Anti-Virus for Windows 6.x http://secunia.com/product/12449/ Soph...

iDefense Security Advisory 10.26.06: Multiple Vendor wvWare LVL Count Integer Overflow Vulnerability

Multiple Vendor wvWare LVL Count Integer Overflow Vulnerability iDefense Security Advisory 10.26.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 26, 2006 I. BACKGROUND The WV library provides an interface to facilitate access to binary file format Microsoft Word documents. The projec...

iDefense Security Advisory 10.25.06: AOL YGPPDownload downloadFileDirectory ActiveX Control Heap Corruption Vulnerability

AOL YGPPDownload downloadFileDirectory ActiveX Control Heap Corruption Vulnerability iDefense Security Advisory 10.25.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 25, 2006 I. BACKGROUND America Online 9.0 Security Edition builds upon Internet Explorer technology to offer its users...

FreeBSD : opera -- URL parsing heap overflow vulnerability (4867ae85-608d-11db-8faf-000c6ec775d9)

iDefense Labs reports : Remote exploitation of a heap overflow vulnerability within version 9 of Opera Software's Opera Web browser could allow an attacker to execute arbitrary code on the affected host. A flaw exists within Opera when parsing a tag that contains a URL. A heap buffer with a...

Melange Chat Server 1.10 Remote Buffer Overflow Exploit

No description provided by source. / Proof of Concept for Melange Chat Server 1.10 a lame remote bof exploit by innerphobia [email protected] 12/24/02 Credits go to: - iDefense Labs for the advisory - blink for discovering the bug - Irian for the shellcode With careful calculation it is possible t...

iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability

Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability iDefense Security Advisory 10.21.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 21, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. More informati...

iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Heap Overflow Vulnerability

Novell eDirectory evtFilteredMonitorEventsRequest Heap Overflow Vulnerability iDefense Security Advisory 10.21.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 21, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. More...

iDefense Security Advisory 10.19.06: Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerability

Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerability iDefense Security Advisory 10.19.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 19, 2006 I. BACKGROUND Kaspersky Anti-Virus provides virus and spyware protection. More information about Kaspersky Labs Anti-Viru...

Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability

Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability iDefense Security Advisory 10.15.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 15, 2006 I. BACKGROUND Clam AntiVirus is a multi-platform GPL anti-virus toolkit. The main purpose of which is integration into electronic ma...

iDefense Security Advisory 10.17.06: Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability

Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability iDefense Security Advisory 10.17.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 17, 2006 I. BACKGROUND Opera is a cross-platform web browser. More information is available from http://www.opera.com/ II...

[VulnWatch] iDefense Security Advisory 10.13.06: Apache HTTP Server mod_tcl set_var Format String Vulnerability

Apache HTTP Server modtcl setvar Format String Vulnerability iDefense Security Advisory 10.13.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 13, 2006 I. BACKGROUND The modtcl module for the Apache httpd v2.x is a scripting module that allows a TCL developer to create server side...

Debian DSA-935-1 : libapache2-mod-auth-pgsql - format string vulnerability

iDEFENSE reports that a format string vulnerability in modauthpgsql, a library used to authenticate web users against a PostgreSQL database, could be used to execute arbitrary code with the privileges of the httpd user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[Full-disclosure] iDefense Security Advisory 10.11.06: AOL YGPPDownload SetAlbumName ActiveX Control Buffer Overflow Vulnerability

AOL YGPPDownload SetAlbumName ActiveX Control Buffer Overflow Vulnerability iDefense Security Advisory 10.11.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 11, 2006 I. BACKGROUND America Online 9.0 Security Edition builds upon Internet Explorer technology to offer its users enhanced...

iDefense Security Advisory 10.10.06: FreeBSD ptrace PT_LWPINFO Denial of Service Vulnerability

FreeBSD ptrace PTLWPINFO Denial of Service Vulnerability iDefense Security Advisory 10.10.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 10, 2006 I. BACKGROUND FreeBSD is a modern operating system for x86, amd64, Alpha, IA-64, PC-98 and SPARC architectures. It's based on the UNIX...

[Full-disclosure] iDefense Security Advisory 10.05.06: Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability

Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability iDefense Security Advisory 10.05.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 05, 2006 I. BACKGROUND Symantec has a wide range of Anti-Virus and Internet Security products that are designed to protect users from...

iDefense Security Advisory 09.23.06: FreeBSD i386_set_ldt Integer Overflow Vulnerability

FreeBSD i386setldt Integer Overflow Vulnerability iDefense Security Advisory 09.23.06 http://www.idefense.com/intelligence/vulnerabilities/ Sep 23, 2006 I. BACKGROUND FreeBSD is a modern operating system for x86, amd64, Alpha, IA-64, PC-98 and SPARC architectures. It's based on the UNIX operating...

iDefense Security Advisory 09.23.06: FreeBSD i386_set_ldt Integer Signedness Vulnerability

FreeBSD i386setldt Integer Signedness Vulnerability iDefense Security Advisory 09.23.06 http://www.idefense.com/intelligence/vulnerabilities/ Sep 23, 2006 I. BACKGROUND FreeBSD is a modern operating system for x86, amd64, Alpha, IA-64, PC-98 and SPARC architectures. It's based on the UNIX operati...

GNU Mailutils imap4d 0.6 (search) Remote Format String Exploit (fbsd)

Exploit for bsd platform in category remote exploits ===================================================================== GNU Mailutils imap4d 0.6 search Remote Format String Exploit fbsd ===================================================================== / Copyright c 2005 Rosiello Security...