iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability

Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability iDefense Security Advisory 10.21.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 21, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. More informati...

iDefense Security Advisory 10.19.06: Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerability

Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerability iDefense Security Advisory 10.19.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 19, 2006 I. BACKGROUND Kaspersky Anti-Virus provides virus and spyware protection. More information about Kaspersky Labs Anti-Viru...

CVE-2006-4926

CVE-2006-4926 concerns a local privilege escalation in Kaspersky Anti-Virus 6.0.0.303 related to the NDIS-TDI Hooking Engine used by the KLICK.KILIN drivers (KLICK.SYS, KLIN.SYS) v2.0.0.281. Affected components process IOCTL 0x80052110 and an invalid address in crafted IRP structures, enabling lo...

CVE-2006-4926

The NDIS-TDI Hooking Engine, as used in the 1 KLICK KLICK.SYS and 2 KLIN KLIN.SYS device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.0.0.303 and other Anti-Virus and Internet Security products, allows local users to execute arbitrary code via crafted Irp structure with invalid addresses ...

[Full-disclosure] MS06-060 Microsoft Word Memmove Code Execution

McAfee, Inc. McAfee Avert Labs Security Advisory Vendor Notification Date: 2006-07-06 Public Release Date: 2006-10-10 Microsoft Word Memmove Code Execution CVE-2006-3647 Synopsis An integer bug stack overflow exists in the Microsoft Word file format. The file format allows a attacker to create a...

MHL-2006-001 Public Advisory: "Eazy Cart" Multiple Security Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MHL-2006-001 - Public Advisory +-----------------------------------------------------------+ | Eazy Cart Multiple Security Issues | +-----------------------------------------------------------+ PUBLISHED ON October 9th, 2006 PUBLISHED AT...

[Full-disclosure] MHL-2006-001 Public Advisory: "Eazy Cart" Multiple Security Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MHL-2006-001 - Public Advisory +-----------------------------------------------------------+ | Eazy Cart Multiple Security Issues | +-----------------------------------------------------------+ PUBLISHED ON October 9th, 2006 PUBLISHED AT...

Apple QuickTime H.264 Integer Overflow Vulnerability

Apple QuickTime H.264 Integer Overflow Vulnerability By Sowhat of Nevis Labs Date: 2006.09.12 http://www.nevisnetworks.com http://secway.org/advisory/AD20060912.txt CVE: CVE-2006-4381 Vendor: Apple Inc. Affected Versions: Apple QuickTime versions 7.1.3 Overview: By carefully crafting a corrupt...

Multiple Vulnerabilities in Apple QuickTime

McAfee, Inc. McAfee Averttm Labs Security Advisory Public Release Date: 2006-09-12 Apple QuickTime Multiple Vulnerabilities CVE-2006-4382, CVE-2006-4384, CVE-2006-4385, CVE-2006-4386, CVE-2006-4388, CVE-2006-4389 Synopsis Apple QuickTime is a multimedia technology used to process image, audio and...

Symantec Enterprise Security Manager Denial-of-Service Vulnerability

McAfee, Inc. McAfee® Avert® Labs Security Advisory Public Release Date: 2006-08-22 Symantec Enterprise Security Manager Denial-of-Service Vulnerability CVE Number Pending • Synopsis The Symantec Enterprise Security Manager ESM platform and agent are susceptible to a race condition that can cause...

Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability

------------------------------------------------------------------------ ------------------- Mafia Moblog pathtotemplate Remote File Inclusion ------------------------------------------------------------------------ ------------------- Author : Sh3ll Date : 2006/04/30 HomePage : http://www.sh3ll....

eIQnetworks License Manager Remote Buffer Overflow Exploit (multi)

Exploit for unknown platform in category remote exploits ================================================================== eIQnetworks License Manager Remote Buffer Overflow Exploit multi ================================================================== !/usr/bin/perl -w package...

GLSA-200608-01 : Apache: Off-by-one flaw in mod_rewrite

The remote host is affected by the vulnerability described in GLSA-200608-01 Apache: Off-by-one flaw in modrewrite An off-by-one flaw has been found in Apache's modrewrite module by Mark Dowd of McAfee Avert Labs. This flaw is exploitable depending on the types of rewrite rules being used. Impact...

Apache: Off-by-one flaw in mod_rewrite

Background The Apache HTTP server is one of the most popular web servers on the Internet. The Apache module modrewrite provides a rule-based engine to rewrite requested URLs on the fly. Description An off-by-one flaw has been found in Apache's modrewrite module by Mark Dowd of McAfee Avert Labs...

apache -- mod_rewrite buffer overflow vulnerability

The Apache Software Foundation and The Apache HTTP Server Project reports: An off-by-one flaw exists in the Rewrite module, modrewrite, as shipped with Apache 1.3 since 1.3.28, 2.0 since 2.0.46, and 2.2 since 2.2.0. Depending on the manner in which Apache HTTP Server was compiled, this software...

CVE-2006-3540

Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not properly validate RegSaveKey, RegRestoreKey, and RegDeleteKey function calls, which allows local users to cause a denial of service system crash via a certain combination of these...

CVE-2006-3540

Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not properly validate RegSaveKey, RegRestoreKey, and RegDeleteKey function calls, which allows local users to cause a denial of service system crash via a certain combination of these...

[Full-disclosure] Microsoft Excel Could Allow Remote Code Execution by Malformed FNGROUPCOUNT value Vulnerability

Microsoft Excel Could Allow Remote Code Execution by Malformed FNGROUPCOUNT value Vulnerability By OYXin xin.ouyang at google mail of Nevis Labs http://www.nevisnetworks.com Vendor Microsoft Inc. Products affected: Microsoft Office 2000 Service Pack 3 Microsoft Office XP Service Pack 3 Microsoft...

[Full-disclosure] Microsoft SMB Information Disclosure Vulnerability CVE-2006-1315

McAfee, Inc. McAfee® Avert® Labs Security Advisory Public Release Date: 2006-07-11 SMB Information Disclosure Vulnerability CVE-2006-1315 • Synopsis An information disclosure vulnerability exists in the Server service that could allow an attacker to retrieve fragments of memory from an affected...

CVE-2006-2358

Multiple cross-site scripting XSS vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter and 2 unspecified fields related to e-mail alerts. NOTE: the provenance of this information is unknown; the details are...