Zone Labs Products Advance Program Control and OS Firewall (Behavioral Based) Technology Bypass Vulnerability

Zone Labs Products Advance Program Control and OS Firewall Behavioral Based Technology Bypass Vulnerability I. PRODUCT BACKGROUND ZoneAlarm Pro and Internet Security Suite with its a new level of protection is what Zone Labs calls an "OS Firewall" based on "Behavior Based Analysis" has gone beyon...

Zone Labs Zone Alarm 6.0 - Advance Program Control Bypass

Zone Labs Zone Alarm 6.0 - Advance Program Control Bypass source: https://www.securityfocus.com/bid/15347/info Zone Labs Zone Alarm is prone to a weakness that permits the bypassing of the Advanced Program Control protection. Reports indicate that applications can create a modal dialog box...

Zone Labs Zone Alarm 6.0 - Advance Program Control Bypass

source: https://www.securityfocus.com/bid/15347/info Zone Labs Zone Alarm is prone to a weakness that permits the bypassing of the Advanced Program Control protection. Reports indicate that applications can create a modal dialog box displaying HTML, which can then be redirected to a remote site...

[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability

SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO UnixWare is a UNIX operating system. More information is available at:...

[Full-disclosure] iDEFENSE Security Advisory 09.30.05: RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability

RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability iDEFENSE Security Advisory 09.30.05 www.idefense.com/application/poi/display?id=311&type=vulnerabilities September 30, 2005 I. BACKGROUND RealPlayer is an application for playing various media formats, developed by RealNetwor...

iDEFENSE Security Advisory 09.13.05: Linksys WRT54G 'upgrade.cgi' Firmware Upload Design Error Vulnerability

Linksys WRT54G 'upgrade.cgi' Firmware Upload Design Error Vulnerability iDEFENSE Security Advisory 09.13.05 www.idefense.com/application/poi/display?id=307&type=vulnerabilities September 13, 2005 I. BACKGROUND The Linksys WRT54G is a combination wireless access point, switch and router. More...

iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Management Interface DoS Vulnerability

Linksys WRT54G Management Interface DoS Vulnerability iDEFENSE Security Advisory 09.13.05 www.idefense.com/application/poi/display?id=308&type=vulnerabilities September 13, 2005 I. BACKGROUND The Linksys WRT54G is a combination wireless access point, switch and router. More information is availab...

sakeru.txt

!/usr/bin/perl sakeru.pl v0.1 URL Filtering Bypass proof of concept By sinhack research labs first version Dec 23 2002 last update Jun 06 2004 Usage: 1 perl sakeru.pl 2 Configure your browser's proxy at localhost:5050 3 Have fun. Known bugs: - This proxy is not multitask, so your browser will...

SoftiaCom MailServer - Local Password Disclosure Vulnerability

Software: SoftiaCom MailServer Corporation: DarWeb Version: v1.0 v2.0 is a fake Vulnerability: Local Password Disclosure ------------------------------- BACKGROUND SoftiaCom design and build software utilities in communication and network server. WMailserver is an internet email server able to...

SoftiaCom wMailServer 1.0 - Remote Denial of Service

/ wMailServer Remote D.o.S Exploit by Kozan Application: wMailServer Vendor: Softiacom Software - www.softiacom.com Discovered by: fRoGGz - SecuBox Labs Exploit Coded by: Kozan Credits to ATmaCA, fRoGGz, SecuBox Labs Web: www.spyinstructors.com Mail: [email protected] / include include...

wMailServer 1.0 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================ wMailServer 1.0 Remote Denial of Service Exploit ================================================ / wMailServer Remote D.o.S Exploit by Kozan Application: wMailServer Vendor: Softiacom Software -...

dosPlanet.txt

Software: PlanetFileServer Corporation: PlanetDNS Software Version: v2.0.1.3 Vulnerability: Denial of Service - Crash Vulnerability ------------------------------- BACKGROUND PlanetFileServer v2.0.1.3 is a BETA product PlanetDNS provides products and services that enable you to host your own web...

XML-RPC for PHP Remote Code Injection Vulnerability

Description XML-RPC for PHP is affected by a remote code-injection vulnerability. An attacker may exploit this issue to execute arbitrary commands or code in the context of the webserver. This may facilitate various attacks, including unauthorized remote access. XML-RPC for PHP 1.1 and prior...

PlanetDNS PlanetFileServer - Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/14138/info PlanetFileServer is prone to a remote buffer overflow vulnerability. A successful attack may allow an attacker to cause the server to crash or execute arbitrary code. This can lead to remote unauthorized access to the affected computer in the...

CVE-2001-1496

CVE-2001-1496 affects thttpd (Acme Labs) with an off-by-one buffer overflow in Basic Authentication across versions 1.95–2.20. The underlying issue is a buffer overflow in the Basic Auth handling, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. Explo...

CVE-2001-1496

Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2001-1496: Off-by-one Error

Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2005-1905

The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs...

CVE-2005-1905

The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs...

CVE-2005-1905

CVE-2005-1905 affects Kaspersky Anti-Virus on Windows 2000 via the klif.sys kernel driver. The Seebug and NVD records indicate the klif.sys component can be abused by a local attacker to gain privileges by modifying certain high-privilege code addresses that are later accessed by privileged proce...