5623 matches found
Symantec Norton个人防火墙SuiteOwners注册表键值安全绕过漏洞
Symantec Norton Personal Firewall是一款流行的个人桌面防火墙。 Symantec Norton Personal Firewall不正确的注册表键值保护，远程攻击者可以利用漏洞绕过安全保护，装载任意文件等，导致特权提升。...
KDE JPEG KFile Info插件EXIF本地拒绝服务漏洞
JPEG kfile-info插件用于多个KDE应用程序显示图象META信息。 JPEG kfile-info插件在解析图象META信息时存在问题，本地攻击者可以利用漏洞对使用此插件的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 KDE KDE 3.5.5 KDE KDE 3.5.4 KDE KDE 3.5.3 KDE KDE 3.5.2 KDE KDE 3.5 KDE KDE 3.4.3 - Gentoo Linux KDE KDE 3.4.2 KDE KDE 3.4.1 + RedHat Fedora Core4 KDE KDE 3.4 KDE KDE 3.4 KDE KD...
Computer Associates CA Internet Security / CA Personal Firewall privilege escalation
Insufficient TDI and NDIS hooked function paramters validation...
[Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.
Computer Associates "Host Intrusion Prevention System" Engine Drivers are prone to multiple local privilege escalation vulnerabilities. Unprivileged users can take advantage of these flaws in order to execute arbitrary code with kernel privileges. Two drivers are affected, kmxstart.sys and...
Computer Associates Personal Firewall 9.0 - HIPS Driver 'kmxstart.sys' Local Privilege Escalation
// source: https://www.securityfocus.com/bid/21140/info Multiple Computer Associates security-related products are prone to multiple local privilege-escalation vulnerabilities. An attacker can leverage these issues to execute arbitrary code with SYSTEM-level privileges. This could result in the...
Computer Associates Personal Firewall 9.0 - HIPS Driver kmxstart.sys Local Privilege Escalation
Computer Associates Personal Firewall 9.0 - HIPS Driver kmxstart.sys Local Privilege Escalation // source: https://www.securityfocus.com/bid/21140/info Multiple Computer Associates security-related products are prone to multiple local privilege-escalation vulnerabilities. An attacker can leverage...
Computer Associates Personal Firewall 9.0 - HIPS Driver 'kmxfw.sys' Local Privilege Escalation
// source: https://www.securityfocus.com/bid/21140/info Multiple Computer Associates security-related products are prone to multiple local privilege-escalation vulnerabilities. An attacker can leverage these issues to execute arbitrary code with SYSTEM-level privileges. This could result in the...
Microsoft Windows Workstation服务NetpManageIPCConnect远程栈溢出漏洞（MS06-070)
Microsoft Windows是微软发布的非常流行的操作系统。 Windows的Workstation服务组件中存在栈溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 在Workstation服务名为wkssvc.dll的模块中，NetpManageIPCConnect函数以未经检查的缓冲区数据调用了swprintf，而输入缓冲区是远程攻击者可控的。 .text:76781D67 mov edi, ebp+arg0 ... .text:76781D90 lea eax, ebp+var2CC ... .text:76781DA0 push edi .text:76781DA...
CVE-2006-5728
XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags...
CVE-2006-5728
XM Easy Personal FTP Server 5.2.1 and earlier is affected by a denial-of-service vulnerability triggered by a long argument to the NLST command (potentially with -al flags). The issue requires an authenticated remote user to cause the DoS, and the description does not provide explicit exploit det...
CVE-2006-5728
XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags...
XM Easy Personal FTP Server DoS
Buffer overflow on oversized NLST -al FTP command argument...
XM Easy Personal FTP Server <= 5.2.1 Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ===================================================================== XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort...
PC Tools AntiVirus本地权限提升漏洞
PC Tools AntiVirus是一款功能强大的个人电脑杀毒软件。 PC Tools AntiVirus对自身文件的保护上存漏洞，本地攻击者可能利用此漏洞提升自己的权限。 PC Tools AntiVirus目录及其所有子对象没有设置安全的默认权限，给予了Everyone组Full Control权限，因此本地攻击者可能获得权限提升，以系统权限执行任意代码。 PC Tools AntiVirus 2.1.0.51 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.pctools.com/anti-virus/...
XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service
XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service !/usr/bin/perl Title: XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort . "\n"; print $socket "USER "...
XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service
!/usr/bin/perl Title: XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort . "\n"; print $socket "USER " . $remoteUsername . "\r\n"; print " FTP Username: '" . $remoteUsername...
Symantec Norton个人防火墙SymEvent驱动本地拒绝服务漏洞
Symantec Norton个人防火墙是非常流行的防火墙软件。 Symantec Norton个人防火墙的实现上存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。 Norton没有充分地保护 \Device\SymEvent 驱动，也没有验证其输入缓冲区，允许Everyone向这个驱动中写入数据，可能导致驱动执行无效的内存操作以及整个操作系统崩溃。 Symantec Norton Personal Firewall 2006 9.1.0.33 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
CVE-2006-5153
The 1 fwdrv.sys and 2 khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to caus...
CVE-2006-5153
The CVE concerns Sunbelt Kerio Personal Firewall 4.3.268 and earlier, where two drivers, fwdrv.sys and khips.sys, fail to validate arguments passed to SSDT functions (NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, NtSetInformationFile). This lack of validation allows lo...