Computer Associates Personal Firewall 9.0 - HIPS Driver kmxstart.sys Local Privilege Escalation

Computer Associates Personal Firewall 9.0 - HIPS Driver kmxstart.sys Local Privilege Escalation // source: https://www.securityfocus.com/bid/21140/info Multiple Computer Associates security-related products are prone to multiple local privilege-escalation vulnerabilities. An attacker can leverage...

Computer Associates Personal Firewall 9.0 - HIPS Driver 'kmxstart.sys' Local Privilege Escalation

// source: https://www.securityfocus.com/bid/21140/info Multiple Computer Associates security-related products are prone to multiple local privilege-escalation vulnerabilities. An attacker can leverage these issues to execute arbitrary code with SYSTEM-level privileges. This could result in the...

Computer Associates Personal Firewall 9.0 - HIPS Driver 'kmxfw.sys' Local Privilege Escalation

// source: https://www.securityfocus.com/bid/21140/info Multiple Computer Associates security-related products are prone to multiple local privilege-escalation vulnerabilities. An attacker can leverage these issues to execute arbitrary code with SYSTEM-level privileges. This could result in the...

CVE-2006-5728

XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags...

CVE-2006-5728

XM Easy Personal FTP Server 5.2.1 and earlier is affected by a denial-of-service vulnerability triggered by a long argument to the NLST command (potentially with -al flags). The issue requires an authenticated remote user to cause the DoS, and the description does not provide explicit exploit det...

CVE-2006-5728

XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags...

CVE-2006-5728: Undefined Security Weakness

XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags...

XM Easy Personal FTP Server DoS

Buffer overflow on oversized NLST -al FTP command argument...

XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service

XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service !/usr/bin/perl Title: XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort . "\n"; print $socket "USER "...

XM Easy Personal FTP Server <= 5.2.1 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================================== XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort...

PC Tools AntiVirus本地权限提升漏洞

PC Tools AntiVirus是一款功能强大的个人电脑杀毒软件。 PC Tools AntiVirus对自身文件的保护上存漏洞，本地攻击者可能利用此漏洞提升自己的权限。 PC Tools AntiVirus目录及其所有子对象没有设置安全的默认权限，给予了Everyone组Full Control权限，因此本地攻击者可能获得权限提升，以系统权限执行任意代码。 PC Tools AntiVirus 2.1.0.51 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.pctools.com/anti-virus/...

XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service

!/usr/bin/perl Title: XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort . "\n"; print $socket "USER " . $remoteUsername . "\r\n"; print " FTP Username: '" . $remoteUsername...

Symantec Norton个人防火墙SymEvent驱动本地拒绝服务漏洞

Symantec Norton个人防火墙是非常流行的防火墙软件。 Symantec Norton个人防火墙的实现上存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。 Norton没有充分地保护 \Device\SymEvent 驱动，也没有验证其输入缓冲区，允许Everyone向这个驱动中写入数据，可能导致驱动执行无效的内存操作以及整个操作系统崩溃。 Symantec Norton Personal Firewall 2006 9.1.0.33 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2006-5153

The 1 fwdrv.sys and 2 khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to caus...

CVE-2006-5153

The CVE concerns Sunbelt Kerio Personal Firewall 4.3.268 and earlier, where two drivers, fwdrv.sys and khips.sys, fail to validate arguments passed to SSDT functions (NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, NtSetInformationFile). This lack of validation allows lo...

CVE-2006-5153: Undefined Security Weakness

The 1 fwdrv.sys and 2 khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to caus...

Kerio Multiple insufficient argument validation of hooked SSDT function Vulnerability

Hello, I would like to inform you about a vulnerability in Sunbelt Kerio Personal Firewall. Description: Sunbelt Kerio Personal Firewall hooks many functions in SSDT and in at least six cases it fails to validate arguments that come from user mode. User calls to NtCreateFile, NtDeleteFile,...

Kerio Personal Firewall privilege escalation

Insufficient hooked SSDT calls arguments validation...

Kerio Multiple insufficient argument validation of hooked SSDT function Vulnerability

Hello, I would like to inform you about a vulnerability in Sunbelt Kerio Personal Firewall. Description: Sunbelt Kerio Personal Firewall hooks many functions in SSDT and in at least six cases it fails to validate arguments that come from user mode. User calls to NtCreateFile, NtDeleteFile,...

CVE-2006-5070: Undefined Security Weakness

PHP remote file inclusion vulnerability in fsl2/objects/fsformlinks.php in faceStones Personal 2.0.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSfsinitobjpath parameter...