ISS PAM.dll ICQ Parser Buffer Overflow

This module exploits a stack buffer overflow in the ISS products that use the iss-pam1.dll ICQ parser Blackice/RealSecure. Successful exploitation will result in arbitrary code execution as LocalSystem. This exploit only requires 1 UDP packet, which can be both spoofed and sent to a broadcast...

ISS BlackICE PC Protection DoS

Invalid NtOpenSection hook causes sytem to crash if 3rd paramter is NULL...

Internet Security Systems 3.6 BlackICE - Local Denial of Service

Internet Security Systems 3.6 BlackICE - Local Denial of Service source: https://www.securityfocus.com/bid/19800/info Internet Security Systems ISS BlackICE PC Protection is prone to a local denial-of-service vulnerability because the application fails to properly sanitize user-supplied input. Th...

CVE-2006-3999

ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries...

CVE-2006-3999

ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE (and possibly earlier) are vulnerable due to improper integrity checking of the pamversion.dll BlackICE library, allowing local users to subvert BlackICE by replacing pamversion.dll. The attack would generally require administrative privileges to repla...

CVE-2006-3999

ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries...

ISS BlackICE protection bypass

It's possible to inject fake pamversion.dll into BlackICE service...

ISS RealSecure / BlackICE DoS

Bug in SMBMailSlotHeapOverflow MS06-035/KB917159 vulnerability attack detection leads to 100 CPU usage...

NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability

NSFOCUS Security Advisory SA2006-07 ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability Release Date: 2006-07-27 CVE ID: CVE-2006-3840 http://www.nsfocus.com/english/homepage/research/0607.htm Affected systems & software =================== RealSecure Network Sensor...

CVE-2006-3840

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU 24.39/1.78/epj/x.x.x.1780, including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service infinite loop via a crafted...

CVE-2006-3840

The CVE-2006-3840 issue affects ISS RealSecure/BlackICE products and related PAM SMB Mailslot parsing. A crafted SMB_Mailslot_Heap_Overflow payload can trigger an infinite loop in the detection code, causing remote DoS with potential client/system unresponsiveness. Affected products include RealS...

CVE-2006-3840

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU 24.39/1.78/epj/x.x.x.1780, including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service infinite loop via a crafted...

CVE-2006-2827

SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field, when the settings specify only "Search in Detailed description" and "Search also in ISBN." NOTE: the vend...

CVE-2005-2711

ISS BlackIce 3.6 and related products (BlackICE PC Protection, BlackICE Server Protection, BlackICE Agent for Server, RealSecure Desktop 3.6/7.0) are affected by a local privilege escalation vulnerability. The root cause is that the Application Protection module does not drop privileges before la...

CVE-2005-2711

ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to...

iDefense Security Advisory 03.23.05: ISS Multiple Products Local Privilege Escalation Vulnerability

ISS Multiple Products Local Privilege Escalation Vulnerability iDefense Security Advisory 03.23.05 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=403 March 23, 2006 I. BACKGROUND Internet Security Systems ISS has developed a suite of tools aimed at securing server and desktop...

Sendmail: Race condition in the handling of asynchronous signals

Background Sendmail is a popular mail transfer agent MTA. Description ISS discovered that Sendmail is vulnerable to a race condition in the handling of asynchronous signals. Impact An attacker could exploit this via certain crafted timing conditions. Workaround There is no known workaround at thi...

CVE-2005-2711

ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to...

Snort <= 2.4.2 Back Orifice Pre-Preprocessor Remote Exploit (3)

No description provided by source. / snort 2.4.0 - 2.4.2 Back Orifice Pre-Preprocessor Remote Exploit by Russell Sanford [email protected] - www.code-junkies.net - Date: Nov 11, 2005 Discription: A buffer overflow exist in the snort pre-preprocessor designed to detect encrypted Back Orifice ping...

Snort 2.4.2 - Back Orifice Pre-Preprocessor Remote (3)

Snort 2.4.2 - Back Orifice Pre-Preprocessor Remote 3 / snort 2.4.0 - 2.4.2 Back Orifice Pre-Preprocessor Remote Exploit by Russell Sanford [email protected] - www.code-junkies.net include include include include include include include include include include define buffsize 1056 define COOKIE...