CVE-2007-4037

Summary: CVE-2007-4037 affects Guidance Software EnCase. A malformed NTFS filesystem containing a modified FILE record with a large offset can cause a buffer over-read and an application crash. The issue can be triggered by user-assisted attackers. The vendor disputes the significance, noting tha...

CVE-2007-4035

Guidance Software EnCase is affected by CVE-2007-4035 and related CVE-2007-4201 issues. The flaws involve improper handling of (1) malformed MBR partition tables with many entries that can prevent logical collection of a disk image, (2) NTFS filesystems with directory loops that can block examina...

PT-2007-5243 · Guidance · Encase

Name of the Vulnerable Software and Affected Versions: Guidance Software EnCase affected versions not specified Description: The issue arises from the improper handling of certain malformed MBR partition tables and NTFS filesystems. This allows remote attackers to prevent the logical collection o...

PT-2007-5244 · Microsoft +1 · Ntfs +2

Name of the Vulnerable Software and Affected Versions: Guidance Software EnCase affected versions not specified Description: The issue allows user-assisted remote attackers to cause a denial of service via three main vectors: 1 a corrupted Microsoft Exchange database, which triggers an applicatio...

Guidance Software response to iSEC report on EnCase

Guidance Software Response to iSEC Report Guidance Software received and reviewed the report drafted by two presenters at the upcoming Black Hat USA conference. We have also spoken to Alex Stamos, one of the testing leaders. The report authors disclose that they conducted, over a period of six...

CVE-2007-4035: Undefined Security Weakness

Guidance Software EnCase does not properly handle 1 certain malformed MBR partition tables with many entries, which allows remote attackers to prevent logical collection of a disk image; 2 NTFS filesystems with directory loops, which allows remote attackers to prevent examination of certain...

CVE-2007-4037: Improper Restriction of Operations within the Bounds of a Memory Buffer

Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers...

CVE-2007-4036: Undefined Security Weakness

Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via 1 a corrupted Microsoft Exchange database, which triggers an application crash when many options are selected; 2 a corrupted NTFS filesystem, which causes the application to report "memory allocation...

Microsoft Windows Vista/2003/XP/2000 file management security issues

Title: Microsoft Windows Vista/2003/XP/2000 file management security issues Author: 3APA3A, http://securityvulns.com/ Vendor: Microsoft and potentially another vendors Products: Microsoft Windows Vista/2003/XP/2000, Microsoft resource kit for Windows 2000 and different utilities. Access Vector:...

DSA-1304 kernel-source-2.6.8 - several

Bulletin has no description...

Code injection

The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...

CVE-2007-2964

The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...

CVE-2007-2964

The CVE concerns F-Secure Policy Manager Server (7.00 and earlier) where the fsmsh.dll host module can be triggered to cause a denial of service (application crash) by sending URLs containing NTFS reserved words. The vulnerability is a DoS condition affecting the server via the fsmsh.dll CGI modu...

CVE-2007-2964

The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...

CVE-2007-2964: Undefined Security Weakness

The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...

Logical Drive Insecure Filesystem Enumeration (WMI)

Binary data wmintfsdrives.nbin...

Not afraid to forget the password Qiao broken NTFS under Win2000 password-vulnerability warning-the black bar safety net

Maybe a lot of people made confusion, their own set or modify the password after that, but put their account password to forget. Today the author brings readers crack NTFS under Win2000 the password method. The first step, the site to download NTFSDOS Professional software, download after...

So it is to bypass the NTFS permissions limit-vulnerability warning-the black bar safety net

This machine is loaded with Windows 2 0 0 0, because the working relationship will be important information to put in the C:\studio, theC drive to NTFS formatand set the following permissions: Lostarthat's me full control The Everyone read-only After one day, and found where the file being...

Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak

Title: Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak Author: 3APA3A, Affected: Microsoft Windows 2000,XP,2003,Vista Exploitable: Yes Type: Remote from local network, authentication required NULL session was not tested. Class: Information leak CVE: Intro: It's very...

Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak

Title: Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak Author: 3APA3A, http://securityvulns.com Affected: Microsoft Windows 2000,XP,2003,Vista Exploitable: Yes Type: Remote from local network, authentication required NULL session was not tested. Class: Information leak...