CVE-2005-3360

The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses insecure default ACLs, which allows local users to cause a denial of service disabled service and gain system privileges by modifying or moving critical program files...

CVE-2005-3360

The CVE-2005-3360 issue affects Trend Micro PC-Cillin Internet Security 2005, version 12.00 build 1244 (and likely earlier builds). The vulnerability arises from insecure default ACLs installed with Trend Micro products, allowing local users to modify or move critical program files. This can enab...

CVE-2005-3360

The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses insecure default ACLs, which allows local users to cause a denial of service disabled service and gain system privileges by modifying or moving critical program files...

Total PC Solutions PHP Rocket Add-in for FrontPage File Traversal Vulnerability

There is a vulnerability in the Total PC Solutions PHP Rocket Add-in for FrontPage that allows a remote attacker to view the contents of any arbitrary file to which the web user has access. SPDX-FileCopyrightText: 2001 HD Moore & Drew Hintz Some text descriptions might be excerpted from a...

Microsoft SQL (MSSQL) Server Brute Force Logins With Default Credentials (TCP/IP Listener)

The remote Microsoft SQL MSSQL Server has a common / publicly known password for one or more accounts. SPDX-FileCopyrightText: 2005 HD Moore SPDX-FileCopyrightText: New / improved code since 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Unprotected PC Anywhere Service (pcAnywhere Protocol)

The PC Anywhere service does not require a password to access the desktop of this system. If this machine is running Windows 95, 98, or ME, gaining full control of the machine is trivial. If this system is running NT or 2000 and is currently logged out, an attacker can still spy on and hijack a...

CVE-2005-3379

CVE-2005-3379 describes a multiple interpretation error in Trend Micro products: PC-Cillin 2005 (version 12.0.1244 with engine 7.510.1002) and OfficeScan 7.0 (engine 7.510.1002). The bug arises from how the scanner handles files with an "MZ" magic byte sequence (normally associated with EXE). Suc...

[SA17305] Skype Multiple Buffer Overflow Vulnerabilities

TITLE: Skype Multiple Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA17305 VERIFY ADVISORY: http://secunia.com/advisories/17305/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Skype for Pocket PC 1.x http://secunia.com/product/4252/ Skype for Mac OS X 1....

Trusted Digital, Trusted Mobility Suite Authorization Bypass Vulnerability

Trusted Digital, Trusted MObility Suite Authorization Bypass Vulnerability Affected applications Trusted Mobility Agent PC Policy Versions: All Backgroud: Trusted Mobility Suite detects, controls and centrally manages mobile devices. It also pushes security policy and disables lost or stolen...

vxTftpSrv TFTP server for Pocket PC buffer overflow

Buffer overflow on oversized file name...

vxWeb Web server for Pocket PC buffer overflow

Buffer overflow on oversized request URI...

Airscanner Mobile Security Advisory #05081102: vxFtpSrv 0.9.7 Remote Code Execution Buffer Overflow Vulnerability

Airscanner Mobile Security Advisory 05081102: vxFtpSrv 0.9.7 Remote Code Execution Buffer Overflow Vulnerability Product: vxFtpSrv 0.9.7 Platform: Tested on Windows Mobile Pocket PC 2003 Requirements: Mobile device running Windows Mobile Pocket PC with vxFtpSrv 0.9.7 installed and running. Credit...

Airscanner Mobile Security Advisory #05081101: vxWeb v.1.1.4 Denial of Service Vulnerability

Airscanner Mobile Security Advisory 05081101: vxWeb v.1.1.4 Denial of Service Vulnerability Product: vxWeb v1.1.4 Platform: Tested on Windows Mobile Pocket PC 2003 Requirements: Mobile device running Windows Mobile Pocket PC with vxWeb v1.1.4 installed and running. Credits: Seth Fogie Airscanner...

PC-EXPERIENCE/TOPPE CMS Security Advisory

PC-EXPERIENCE/TOPPE CMS Security Advisory By : Morinex E-Mail : [email protected] Date : 30-07-2K5 so lazzy this summer Shoutz : Woopie , sirh0t , 00pz , V1su4l and the gayґs of 0x1fe. I hate them so much isnt Falesco ? 0x1fe.com : Vulnerabilities User-ID Bypassing remote Cross Site Scripting...

[SA15932] Access Remote PC User Credentials Disclosure

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Access Remote PC 4.5.1 - Local Password Disclosure

/ Access Remote PC 4.5.1 Local Password Disclosure Exploit by Kozan Application: Access Remote PC 4.5.1 and probably prior versions Vendor: www.access-remote-pc.com Vulnerable Description: Access Remote PC 4.5.1 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA We...

Access Remote PC 4.5.1 Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits ======================================================== Access Remote PC 4.5.1 Local Password Disclosure Exploit ======================================================== / Access Remote PC 4.5.1 Local Password Disclosure Exploit by Kozan...

Access Remote PC 4.5.1 - Local Password Disclosure

Access Remote PC 4.5.1 - Local Password Disclosure / Access Remote PC 4.5.1 Local Password Disclosure Exploit by Kozan Application: Access Remote PC 4.5.1 and probably prior versions Vendor: www.access-remote-pc.com Vulnerable Description: Access Remote PC 4.5.1 discloses passwords to local users...

CVE-2004-2126

CVE-2004-2126 affects BlackICE PC Protection 3.6 and earlier. The upgrade sets insecure permissions on INI files (blackice.ini, firewall.ini, protect.ini, sigs.ini), allowing local users to modify BlackICE configuration and, via vulnerabilities in the INI parsers, potentially execute arbitrary co...

CVE-2004-2125

The CVE-2004-2125 entry describes a local privilege escalation in BlackICE PC Protection before 3.6.ccb, caused by a buffer overflow in blackd.exe when a long packetLog.fileprefix value is written into the application’s INI file. Affected product: BlackICE PC Protection 3.6 and earlier (3.6.ccb)....