CVE-2003-1491

Kerio Personal Firewall KPF 2.1.4 has a default rule to accept incoming packets from DNS UDP port 53, which allows remote attackers to bypass the firewall filters via packets with a source port of 53...

CVE-2003-1491

CVE-2003-1491 affects Kerio Personal Firewall 2.1.4, where a default DNS (UDP 53) inbound rule permits packets from source port 53, enabling remote bypass of firewall filters. This is a network-accessible bypass vulnerability; exploitation details are provided in multiple sources (NVD/NIST, CVE l...

CVE-2003-1491: Improper Control of Generation of Code

Kerio Personal Firewall KPF 2.1.4 has a default rule to accept incoming packets from DNS UDP port 53, which allows remote attackers to bypass the firewall filters via packets with a source port of 53...

Vba32 Personal Antivirus不安全文件权限本地特权提升漏洞

Vba32 Personal Antivirus是一款反病毒应用程序。 Vba32 Personal Antivirus 不安全设置目录文件权限，本地攻击者可以利用漏洞提升特权。 由于默认的安装目录设置全局可写，因此通过删除，操作和替代应用程序文件可导致特权提升。 VirusBlokAda Vba32 Personal 3.12.2 VirusBlokAda VBA32 升级到最新程序： http://www.anti-virus.by/en/personal.html...

CVE-2007-4967

Online Armor Personal Firewall 2.0.1.215 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API...

CVE-2007-4967

CVE-2007-4967 affects Online Armor Personal Firewall 2.0.1.215. The issue stems from improper validation of parameters to System Service Descriptor Table (SSDT) function handlers, enabling a local attacker to trigger a denial of service (crash) and potentially gain privileges via unspecified kern...

CVE-2007-4967: Improper Input Validation

Online Armor Personal Firewall 2.0.1.215 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API...

Recently updated links for users with personal spaces link to profile if personal space is not accessible

Users without the global access right for personal space can still see links to personal spaces in the "Recently updated" list on their dashboard. This is a serious security problem for extranets, when one wants to prevent non anonymous external users to see who's using the wiki. Note: this probl...

Recently updated links for users with personal spaces link to profile if personal space is not accessible

Users without the global access right for personal space can still see links to personal spaces in the "Recently updated" list on their dashboard. This is a serious security problem for extranets, when one wants to prevent non anonymous external users to see who's using the wiki. Note: this probl...

[Aria-Security] Image Racer SearchResults.asp SQL INJECTION vuln.

Aria-Security Team Image Racer SearchResults.asp SQL Injection Vendor: http://www.junctionquest.com/Software.asp Example: http://www.TARGET.com/SearchResults.asp?SearchWord=SQL COMMAND&WordSearchCrit=Yes&image.x=0&image.y=0 Example : -1 'union select username,password from admin where FIND IT YOU...

tim-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TIM Telecom Italia Mobile is a big italian phone company. The web portal TIM.it is vulnerable to XSS attacks in search function http://www.tim.it/ricerca/d/areaconsumer/ricercasito.do. An attacker can steal cookie session and access with victim...

Menu Manager Mod for WebAPP - No Input Filtering

There is a system access vulnerability in the Menu Manager Mod for WebAPP. This mod is available at http://www.2xlnt.com/webapp/development/app.cgi?action=downloadinfo&cat=webappmods&id=3 . System commands can be entered in user's personal menus. Any system command works there and allows reading ...

screen 4.0.3 Local Authentication Bypass Vulnerability

No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author: Rembrandt Date: Known since somewhere in &cantremember...

Norton Personal Firewall ISAlertDataCOM ActiveX控件缓冲区溢出漏洞

Norton Personal Firewall是一款个人防火墙应用程序。 Norton Personal Firewall包含的ISAlertDataCOM ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 当ISLAlert.dll处理"Set"和"Get"方法时存在边界错误，提交超长参数可导致缓冲区溢出，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。 Symantec Norton Internet Security 2004 Symantec Norton Internet Security...

Design/Logic Flaw

The installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as used in Adobe Creative Suite 3 CS3, does not re-enable the personal firewall after completing the product installation, which allows remote attackers to bypass intended firewall rules...

CVE-2007-2682

The installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as used in Adobe Creative Suite 3 CS3, does not re-enable the personal firewall after completing the product installation, which allows remote attackers to bypass intended firewall rules...

Symantec Norton个人防火墙ActiveX控件远程溢出漏洞

Symantec Norton个人防火墙是非常流行的防火墙软件。 Symantec Norton的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 Norton个人防火墙的ISLALERT.DLL库中ISAlertDataCOM函数所使用的Get和Set函数没有正确验证输入参数，如果用户受骗浏览了特制的HTML文档的话，就可能触发缓冲区溢出，导致以登录用户的权限执行任意指令。 Symantec Norton Personal Firewall 2004 Symantec Norton Internet Security 2004 临时解决方法：...

Moderate: Red Hat Security Advisory: evolution security update

Updated evolution packages that fix a security bug are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A flaw wa...

Symantec Product Security: Norton Personal Firewall 2004 ActiveX Control vulnerability

SYM07-007 May 16, 2007 Symantec Norton Personal Firewall 2004 ActiveX Control Buffer Overflow Risk Impact Medium Affected Products Norton Internet Security 2004 Norton Personal Firewall 2004 Details CERT notified Symantec that a buffer overflow exists in an ActiveX Control used by Norton Personal...

CVE-2007-2729

CVE-2007-2729 affects Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81 (and likely older Comodo firewall versions). The issue arises from improper testing of equivalence of process identifiers for certain Windows API functions in the NT kernel (version 5.0 and greater). This a...