ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability

ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-026.html May 8, 2007 -- CVE ID: CVE-2007-0215 -- Affected Vendor: Microsoft -- Affected Products: Office Excel 2000 Office Excel 2002 Office Exce...

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption http://dvlabs.tippingpoint.com/advisory/TPTI-07-06 May 2, 2007 -- CVE ID: CVE-2007-2418 -- Affected Vendor: Cerulean Studios -- Affected Products: Trillian Pro 3.1 build 121 and below -- TippingPointTM IPS Customer Protection:...

Design/Logic Flaw

3Com TippingPoint IPS allows remote attackers to cause a denial of service device hang via a flood of packets on TCP port 80 with sequentially increasing source ports, related to a "badly written loop." NOTE: the vendor disputes this issue, stating that the product has "performed as expected with...

CVE-2007-2276

The CVE-2007-2276 issue affects 3Com TippingPoint IPS. A badly written loop allows remote attackers to cause a denial of service (device hang) by flooding TCP port 80 with packets that have sequentially increasing source ports. The vendor disputes the issue, stating the product has performed as e...

CVE-2007-2276

3Com TippingPoint IPS allows remote attackers to cause a denial of service device hang via a flood of packets on TCP port 80 with sequentially increasing source ports, related to a "badly written loop." NOTE: the vendor disputes this issue, stating that the product has "performed as expected with...

3Com's TippingPoint Denial of Service

Vulnerability: Denial of Service Affected Product: 3Com's TippingPoint IPS Affected Versions: All Author: CorrodedLunchmeatsX Issue: ====== TippingPoint IPS is prone to DoS when a sequence of crafted packets are destined for port 80. Details: ======== When quickly flooded with packets destined fo...

ZDI-07-022: CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities

ZDI-07-022: CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-07-022.html April 24, 2007 -- CVE ID: CVE-2007-2139 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup r11.5 SP2 BrightSto...

ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability

ZDI-07-019: BMC Patrol PerformAgent bgssdservice Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-019.html April 18, 2007 -- CVE ID: CVE-2007-2136 -- Affected Vendor: BMC -- Affected Products: Patrol -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-07-011: IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability

ZDI-07-011: IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-011.html March 28, 2007 -- CVE ID: CVE-2007-1675 -- Affected Vendor: IBM -- Affected Products: IBM Lotus Domino Server 6.5 IBM Lotus Domino Server 7.0 ...

ZDI-07-010: Apple Quicktime UDTA Parsing Heap Overflow Vulnerability

ZDI-07-010: Apple Quicktime UDTA Parsing Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-010.html March 7, 2007 -- CVE ID: CVE-2007-0714 -- Affected Vendor: Apple -- Affected Products: Quicktime Player 7.1 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

Cisco IOS Intrusion Prevention System (IPS) Multiple Vulnerabilities (CSCsa53334, CSCsg15598)

The remote version of IOS contains an intrusion prevention system that is affected by a fragmented packet evasion vulnerability and a denial of service vulnerability. An attacker might use these flaws to disable this device remotely or to sneak past the IPS. C Tenable Network Security, Inc...

TSRT-07-02: Trend Micro ServerProtect eng50.dll Stack Overflow Vulnerabilities

TSRT-07-02: Trend Micro ServerProtect eng50.dll Stack Overflow Vulnerabilities http://www.tippingpoint.com/security/advisories/TSRT-07-02.html February 20, 2007 -- CVE ID: CVE-2007-1070 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect for Windows 5.58 ServerProtect for EMC 5.58...

TSRT-07-01: Trend Micro ServerProtect StCommon.dll Stack Overflow Vulnerabilities

TSRT-07-01: Trend Micro ServerProtect StCommon.dll Stack Overflow Vulnerabilities http://www.tippingpoint.com/security/advisories/TSRT-07-01.html February 20, 2007 -- CVE ID: CVE-2007-1070 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect for Windows 5.58 ServerProtect for EMC...

Authentication flaw

The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...

CVE-2007-0918

The ATOMIC.TCP signature engine in the Intrusion Prevention System IPS feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service IPS crash and traffic loss via unspecified manipulations that are not properly handled by the regular expressio...

CVE-2007-0918

The ATOMIC.TCP signature engine in the Intrusion Prevention System IPS feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service IPS crash and traffic loss via unspecified manipulations that are not properly handled by the regular expressio...

CVE-2007-0917

The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...

CVE-2007-0918

Cisco IOS IPS vulnerability CVE-2007-0918 affects the ATOMIC.TCP signature engine in the IPS feature across Cisco IOS trains including 12.4XA, 12.3YA, 12.3T and related versions. The issue allows remote attackers to cause a denial of service (IPS crash and traffic loss) by manipulating signatures...

CVE-2007-0917

CVE-2007-0917 affects Cisco IOS IPS (IPS feature set) on IOS 12.4XE to 12.3T. The vulnerability allows remote attackers to bypass IPS signatures that use regular expressions by sending fragmented IP packets, potentially enabling evasion of signature inspection. Related Cisco advisories note addit...

Cisco Security Advisory: Multiple IOS IPS Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple IOS IPS Vulnerabilities Advisory ID: cisco-sa-20070213-iosips http://www.cisco.com/warp/public/707/cisco-sa-20070213-iosips.shtml Revision 1.0 For Public Release 2007 February 13 1600 UTC GMT -...