[SECURITY] Fedora 8 Update: librapi-0.11-1.fc8

The RAPI library is an open source implementation that works like RAPI.DLL, available on Microsoft operating systems. The library makes it possible to make remote calls to a computer running Pocket PC. In order to use librapi, a daemon that the Pocket PC client connects to mus t be running on the...

[SECURITY] Fedora 8 Update: synce-gnomevfs-0.11-1.fc8

This is a gnome-vfs module that enables access to the Windows CE or Pocket PC file system through the gnome-vfs functions...

[SECURITY] Fedora 8 Update: vdccm-0.10.1-1.fc8

Vdccm is a daemon running as the user on the desktop machine, which the Pocket PC connects to. This vdccm is a replacement of the original dccm and the vdccm comming with SynCE-KDE...

CORE-2007-1106: SynCE Remote Command Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs SynCE Remote Command Injection Advisory Information Title: SynCE Remote Command Injection Advisory ID: CORE-2007-1106 Advisory URL:...

ProWizard 4 PC多个远程栈溢出漏洞

BUGTRAQ ID: 26953 ProWizard（prowiz）是一款简单易用的音乐抓轨工具，支持旧型的MOD格式。 prowiz中的一些数组可能支持过多的单元，如果用户受骗处理了恶意音频文件的话就可以触发多个栈溢出，导致执行任意指令。 Sylvain Chipaux ProWizard 4 PC = 1.62 Sylvain Chipaux --------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://asle.free.fr/prowiz/...

CVE-2007-6510

Multiple stack-based buffer overflows in ProWizard 4 PC prowiz 1.62 and earlier allow remote attackers to execute arbitrary code via a crafted file to the 1 AMOS-MusicBank, 2 FuzzacPacker, and 3 QuadraComposer rippers; and 4 have an unknown impact via a crafted file to the SkytPacker ripper...

Stack overflow

Multiple stack-based buffer overflows in ProWizard 4 PC prowiz 1.62 and earlier allow remote attackers to execute arbitrary code via a crafted file to the 1 AMOS-MusicBank, 2 FuzzacPacker, and 3 QuadraComposer rippers; and 4 have an unknown impact via a crafted file to the SkytPacker ripper...

CVE-2007-6510

Multiple stack-based buffer overflows in ProWizard 4 PC prowiz 1.62 and earlier allow remote attackers to execute arbitrary code via a crafted file to the 1 AMOS-MusicBank, 2 FuzzacPacker, and 3 QuadraComposer rippers; and 4 have an unknown impact via a crafted file to the SkytPacker ripper...

ProWizard 4 PC 1.62 - Multiple Remote Stack Buffer Overflow Vulnerabilities

ProWizard 4 PC 1.62 - Multiple Remote Stack Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/26953/info ProWizard 4 PC is prone to multiple stack-based buffer-overflow issues because it fails to perform adequate boundary checks on user-supplied data. Successfully...

Unfixed XSS vulnerability at affiliates.kinky-mature-gangbang.com

Security researcher TreX, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting affiliates.kinky-mature-gangbang.com, which at the time of submission ranked 48339 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

HP OpenView Client Configuration Manager Default Credentials

The remote host is running HP OpenView Client Configuration Manager OVCCM, a PC software configuration management application. The remote installation of OVCCM is configured to use default credentials to control access. Knowing these, an attacker can gain control of the affected application...

CVE-2007-4277

The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions Everyone:Write for the \.\Tmfilter device, which allows local users to send arbitrary content to the device via the...

CVE-2002-2323

Sun PC NetLink 1.0 through 1.2 does not properly set the access control list ACL for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions...

CVE-2002-2323

CVE-2002-2323 affects Sun PC NetLink 1.0–1.2. The issue is an improper setting of ACLs for files/directories that use symbolic links and have been restored from backup, potentially allowing bypass of access restrictions for local or remote attackers. Connected advisories (Red Hat, PT Security) re...

CVE-2007-5493

CVE-2007-5493 affects Microsoft Windows Mobile 2005 Pocket PC Phone Edition. The vulnerability exists in the SMS handler where a specially crafted WAP PUSH can cause the PDU to be decoded incorrectly, allowing an attacker to hide the original sender field of an SMS without user interaction. The c...

Microsoft MFC库CFileFind::FindFile缓冲区溢出漏洞

Microsoft Windows是一款流行的操作系统。 Microsoft Windows包含的MFC库处理CFileFind::FindFile方法存在缓冲区溢出，远程攻击者可以利用漏洞以链接此库的应用程序权限执行任意指令。 问题存在于MFC库包含的FindFile函数中，FindFile函数管理垮文件系统文件搜索，可指定文件类型进行搜索。FindFile函数为buffer1分配内存，buffer1用于存储function2的第一个参数，而没有对其大小进行检查。这个数据用于开始一个搜索。...

Trend Micro Anti-Spyware和PC-cillin SSAPI引擎本地堆栈缓冲区溢出漏洞

Trend Micro AntiSpyware是一款检测和删除恶意软件的应用程序。 Trend SSAPI引擎存在缓冲区溢出，远程攻击者可以利用漏洞以系统进程权限执行任意指令。 Trend Micro产品包含的vstlib32.dll库中的VST函数存在基于堆栈的缓冲区溢出，当攻击者以超长路径名在本地文件系统中建立文件，vstlib32从操作系统中接收到ReadDirectoryChangesW回调通知，就可以导致基于堆栈的缓冲区溢出发生，精心构建路径数据，并诱使应用程序解析，可导致以系统进程权限执行任意指令。 Trend Micro PC-Cillin Internet Securit...

CVE-2007-3873

Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap VST feature is enabled, allows local users to cause a denial of service service...

Stack overflow

Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap VST feature is enabled, allows local users to cause a denial of service service...

CVE-2007-3873

CVE-2007-3873 describes a stack-based buffer overflow in Trend Micro’s vstlib32.dll (1.2.0.1012) used by the SSAPI Engine in AntiSpyware 3.5 and PC-Cillin Internet Security 2007 (15.0–15.3), triggered when a long local file path is processed via a ReadDirectoryChangesW callback. Affects SSAPI Eng...