6378 matches found
CVE-2007-0081
Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246 (and possibly other versions) is affected by CVE-2007-0081, where local users can place a Trojan horse iphlpapi.dll in the installation directory to compromise the product. The NVD CVSS2 base score is 6.8 (MEDIUM) with high impact on conf...
CVE-2007-0081: Undefined Security Weakness
Sunbelt Kerio Personal Firewall SKPF 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory...
Kerio Personal Firewall IPHLPAPI.DLL本地权限提升漏洞
Kerio Personal Firewall是一款流行的个人防火墙应用程序。 Kerio Personal Firewall装载文件存在问题，本地攻击者可以利用漏洞提升特权。 系统库iphlpapi.dll安装在系统目录中，需要此DLL的SKPF服务先尝试在安装目录中查找iphlpapi.dll，如果在此目录没有找到，会尝试在系统目录中找，如果攻击者在SKPF中的安装目录中建立恶意的iphlpapi.dll文件，在SKPF服务初始化时被操作系统装载到SKPF服务中，导致恶意代码在SKPF服务中执行。 Sunbelt Software Kerio Personal Firewall...
Kerio可注入伪造iphlpapi DLL漏洞
Kerio Personal Firewall是一款个人桌面系统防火墙。 Kerio Personal Firewall处理程序相关组件的加载时存在漏洞，本地攻击者可能利用此漏洞提升权限或使防火墙失效。 Kerio Personal Firewall在加载相关的库文件iphlpapi.dll时，首先从软件的安装目录搜索，如果搜索不到才从操作系统目录加载，而且软件的安装目录是可写的，本地攻击者可以创建伪造的DLL文件，防火墙服务在初始化时加载执行其中的代码，导致执行攻击者的任意指令。 Kerio Personal Firewall 4.3.268 Kerio Personal Firewa...
Kerio Personal Firewall 4.3 - IPHLPAPI.dll Local Privilege Escalation
Kerio Personal Firewall 4.3 - IPHLPAPI.dll Local Privilege Escalation source: https://www.securityfocus.com/bid/21828/info Kerio Personal Firewall is prone to a local privilege-escalation vulnerability. A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level...
Kerio Personal Firewall 4.3 - 'IPHLPAPI.dll' Local Privilege Escalation
source: https://www.securityfocus.com/bid/21828/info Kerio Personal Firewall is prone to a local privilege-escalation vulnerability. A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level privileges. A successful exploit could result in the complete compromi...
CVE-2006-6826
Unspecified vulnerability in the tab editor for Personal .NET Portal before 2.0.0 has unknown impact and attack vectors related to a "Security leak."...
CVE-2006-6826
Technical details are not publicly provided in the supplied documents for CVE-2006-6826. Monitor for updates to see affected products, vulnerable components, impact, and remediation guidance.
CVE-2006-6826
Unspecified vulnerability in the tab editor for Personal .NET Portal before 2.0.0 has unknown impact and attack vectors related to a "Security leak."...
CVE-2006-6826: Undefined Security Weakness
Unspecified vulnerability in the tab editor for Personal .NET Portal before 2.0.0 has unknown impact and attack vectors related to a "Security leak."...
CVE-2006-6751
Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service application crash via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable...
CVE-2006-6750
XM Easy Personal FTP Server is affected by a format string vulnerability in the PORT handling which can cause a denial of service (crash). The issue is documented for version 5.0.1, with related notes mentioning 5.3.0 in consolidated records. Root cause is improper handling of format specifiers i...
CVE-2006-6751: Use of Externally-Controlled Format String
Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service application crash via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable...
CVE-2006-6751
CVE-2006-6751 : Format-string vulnerability in XM Easy Personal FTP Server (versions 5.2.1 and 5.3.0) allows remote attackers to trigger a crash via format specifiers in the USER command or other commands, causing a denial of service and partial availability impact. No remediation details are pro...
CVE-2006-6750: Undefined Security Weakness
Format string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause a denial of service application crash via format string specifiers in a long PORT command. NOTE: this issue might be related to CVE-2006-2226...
CVE-2006-6751
Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service application crash via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable...
CVE-2006-6750
Format string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause a denial of service application crash via format string specifiers in a long PORT command. NOTE: this issue might be related to CVE-2006-2226...
Fishyshoop Security Vulnerability
Synopsis ======== The Fishyshoop shopping cart software contains a vulnerability which allows arbitrary users to create accounts with administrator privileges Background ========== Fishyshoop is a suite of PHP scripts allowing anybody to create an attractive online store. Affected Versions...
XM Easy Personal FTP Server 5.2.1 (USER) Format String DoS Exploit
No description provided by source. import sys,os,string import socket import time print "-----------------------------------------------------------------------" print " XM Easy Personal FTP Server 5.2.1 format string Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinna...