Symantec End Point Protection 11.x / Symantec Network Access Control 11.x - Local Code Execution (PoC)

Symantec End Point Protection 11.x & Symantec Network Access Control 11.x Local Code Execution POC Date: 22/05/2012 Author: 41.w4r10r Software Link: Symantec.com Version: 11.x Tested on: Windows XP SP2 English Windows XP SP3 English Windows Vista 32Bit Windows 7 32Bit CVE : CVE-2012-0289 Time Lin...

Symantec End Point Protection 11.x Symantec Network Access Control 11.x - Local Code Execution (PoC)

Symantec End Point Protection 11.x Symantec Network Access Control 11.x - Local Code Execution PoC Symantec End Point Protection 11.x & Symantec Network Access Control 11.x Local Code Execution POC Date: 22/05/2012 Author: 41.w4r10r Software Link: Symantec.com Version: 11.x Tested on: Windows XP...

PacketFence 3.2.0 released

PacketFence 3.2.0 released The PacketFence development team has published version 3.2.0 of its open source network access control NAC system. PacketFence allows organisations to increase control over their network by enforcing authentication and registration for newly connected devices. It also...

FreeBSD : nwclient -- multiple vulnerabilities (d177d9f9-e317-11d9-8088-00123f0f7307)

Insecure file permissions, network access control and DNS usage put systems that use Legato NetWorker at risk. When the software is running, several files that contain sensitive information are created with insecure permissions. The information exposed include passwords and can therefore be used...

Network access control system PacketFence 2.2 released !

PacketFence is a free and open source network access control NAC system. It can be used to effectively secure networks - from small to very large heterogeneous networks. PacketFence has been deployed in production environments where thousands of users are involved - on wired and wireless networks...

Cisco Network Access Control Guest Server System Software Authentication Bypass

Unauthenticated access to protected network is possible...

Cisco Security Advisory: Cisco Network Access Control Guest Server System Software Authentication Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Network Access Control Guest Server System Software Authentication Bypass Vulnerability Advisory ID: cisco-sa-20110330-nac Revison 1.0 For Public Release 2011 March 30 1600 UTC GMT...

Camtron CMNC-200 IP Camera ActiveX Buffer Overflow Vulnerability

Exploit for hardware platform in category dos / poc ================================================================ Camtron CMNC-200 IP Camera ActiveX Buffer Overflow Vulnerability ================================================================ The CMNC-200 IP Camera ActiveX control identified ...

Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow

Finding 1: Buffer Overflow in ActiveX Control CVE: CVE-2010-4230 The CMNC-200 IP Camera ActiveX control identified by CLSID DD01C8CA-5DA0-4B01-9603-B7194E561D32 is vulnerable to a stack overflow on the first argument of the connect method. The vulnerability can be used to set the EIP register,...

Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow

Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow Finding 1: Buffer Overflow in ActiveX Control CVE: CVE-2010-4230 The CMNC-200 IP Camera ActiveX control identified by CLSID DD01C8CA-5DA0-4B01-9603-B7194E561D32 is vulnerable to a stack overflow on the first argument of the connect method. The...

Camtron CMNC-200 IP Camera - Authentication Bypass

Camtron CMNC-200 IP Camera - Authentication Bypass Finding 3: Web Based Administration Interface Bypass CVE: CVE-2010-4232 The CMNC-200 IP Camera has an administrative web interface that does not handle authentication properly. Using a properly formatted request, an attacker can bypass the...

CA eTrust Intrusion Detection Encryption Key Handling Denial of Service (CVE-2007-1005)

CA eTrust Intrusion Detection product offers network access control and monitoring. It monitors and filters the network traffic, detects and blocks viruses or other intrusions. Moreover, it provides centralized monitoring of local and remote stations. There exists a memory corruption vulnerabilit...

Forrester: The Good And Bad of Security Technologies

From SC Magazine Angela Moscaritolo Businesses are using a variety of technologies to help reduce the impact of threats, prevent breaches and meet compliance — but some of these products are more beneficial than others, according to a new Forrester report released Wednesday that examines the stat...

Microsoft Windows Print Spooler 'EnumeratePrintShares()' Remote Stack Buffer Overflow Vulnerability

Description Microsoft Windows is prone to a remote stack-based buffer-overflow vulnerability that affects the Windows Print Spooler. Exploiting this vulnerability allows attackers to execute arbitrary code with system-level privileges. Failed exploit attempts will likely cause denial-of-service...

[Full-disclosure] CORE-2008-0125: CitectSCADA ODBC service vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ CitectSCADA ODBC service vulnerability Advisory Information Title: CitectSCADA ODBC service vulnerability Advisory ID: CORE-2008-0125 Advisory URL:...

HP System Management Homepage cross-site scripting vulnerability

Overview The HP System Management Homepage contains a cross-site scripting vulnerability. Description The HP System Management Homepage SMH server is a web-based interface that can manage HP servers running the Microsoft Windows or Linux operating systems.The SMH contains an unspecified cross-sit...

McAfee HTTP Server vulnerable to buffer overflow

Overview A stack-based buffer overflow exists in the McAfee HTTP server that may allow a remote, unauthenticated attacker to execute arbitrary code. Description The McAfee HTTP server NAISERV.exe is used in McAfee products, such as McAfee ePolicy Orchestrator and Protection Pilot. The McAfee HTTP...

Microsoft Exchange Outlook Web Access HTTP Response Splitting Vulnerability

Description Microsoft Exchange Outlook Web Access OWA is prone to HTTP response splitting attacks. This issue could permit hostile script to be injected into client sessions, which could gain access to properties of the OWA server and Web pages hosted on the site. It is noted that the attacker mu...

Microsoft MDAC Function Broadcast Response Buffer Overrun Vulnerability

Description Microsoft has released an advisory reporting a buffer overrun vulnerability in an MDAC function. This issue is exposed when an application makes a broadcast request to query for SQL Servers on the network and malformed data is returned in the broadcast response. Successful exploitatio...

Pam_SMB Remote Buffer Overflow Vulnerability

Description pamsmb has been reported prone to a buffer overflow vulnerability. It has been reported that systems using pamsmb to authenticate to a remotely accessible service may be vulnerable to a condition that could allow a remote attacker to supply and execute arbitrary code in the context of...