Kerio Personal Firewall DoS

SYN flood causes host to hang...

NSSI-2002-tpfw: Tiny Personal Firewall 3.0 Denial of Service Vulnerabilities

NSSI-Research Labs Security Advisory http://www.nssolution.com Ph "Maximum e-security" http://nssilabs.nssolution.com Tiny Personal Firewall 3.0 Denial of Service Vulnerabilities Author: Aaron Tan Lu / b45h3r e-Mail: [email protected] / [email protected] Advisory Code: NSSI-2002-tpfw Tested...

CVE-2002-0349

Tiny Personal Firewall TPF 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions...

Microsoft Windows 95982000NT 4.0 - WinHlp Item Buffer Overflow

Microsoft Windows 95982000NT 4.0 - WinHlp Item Buffer Overflow source: https://www.securityfocus.com/bid/4857/info HTML Help ActiveX control Hhctrl.ocx ships as part of Microsoft HTML Help and is designed to work with Internet Explorer to provide functionality for help systems. A remotely...

Microsoft Windows 95/98/2000/NT 4.0 - WinHlp Item Buffer Overflow

source: https://www.securityfocus.com/bid/4857/info HTML Help ActiveX control Hhctrl.ocx ships as part of Microsoft HTML Help and is designed to work with Internet Explorer to provide functionality for help systems. A remotely exploitable issue has been reported in the WinHlp facility. The softwa...

CVE-2002-0349

CVE-2002-0349 affects Tiny Personal Firewall (TPF) 2.0.15. In certain configurations, it can pop up an alert to the system even when the screen is locked, which could allow a physically proximate attacker to hide activities or bypass access restrictions. The provided connected documents describe ...

CVE-2002-0349

Tiny Personal Firewall TPF 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions...

CVE-2002-0349: Undefined Security Weakness

Tiny Personal Firewall TPF 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions...

Protection bypass in Norton Personal Firewall

Few widespreaded attacks are not detected...

Norton Personal Firewall 2002 vulnerable to SYN/FIN scan

Hi all, I looked briefly in bugtraq archives and I didn't find any reference to this issue. Please accept my apologies, if it's a known problem. Norton Personal Firewall 2002 on Windows 2000 is vulnerable to SYN/FIN scan SYN/FIN/URG, SYN/FIN/PUSH, SYN/FIN/URG/PUSH are not detected as well also if...

CVE-2001-1549

Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters...

ZoneAlarm Pro 1.02.x - Outbound Packet Bypass

ZoneAlarm Pro 1.02.x - Outbound Packet Bypass source: https://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard...

ZoneAlarm Pro 1.0/2.x - Outbound Packet Bypass

source: https://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard Windows protocol adapter. It is possible for a use...

Advisory:Multiple Vulnerabilities in ZoneAlarm

Date: 12.20.2000 Name: Multiple Vulnerabilities in ZoneAlarm Application: ZoneAlarm 2.1.44 Platforms: Windows 9x, ME, NT, 2000 Severity: ZoneAlarm does not detect several types of common Nmap scans. It is also possible for a remote attacker, under certain circumstances, to gain complete access to...

Linux news 3.07.00

WU-FTPD 2.6.1 Вышла новая версия популярного FTP сервера WU-FTPD - WU-FTPD 2.6.1. В данной версии появилась поддержка virtual passwd/virtual shadow как в BeroFTPD. Кроме того пофиксен серьезный security баг, благодаря которому пользователь мог получить права root-а. Также пофиксен баг с возможной...

Zone Labs ZoneAlarm 2.1 Personal Firewall - Port 67

source: https://www.securityfocus.com/bid/1137/info Certain versions of Zone Labs personal Firewall have a vulnerability which allows malicious users to port scan the firewall without being detected. In particular if the port scan originates from source port 67 on the attacking host the ZoneAlarm...

Kerio Personal Firewall Replay Attack and Buffer Overflow

Advisory ID Internal CORE-2003-0305-02 Bugtraq ID: 7179, 7180 CVE Names: CAN-2003-0219, CAN-2003-0220 Title: Kerio Personal Firewall Replay Attack and Buffer Overflow Class: Design Error; Boundary Error Condition Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted...